Audit entitlement and grant events in PAM

To keep track of entitlement and grant events, you can view the PAM audit logs.

Before you begin

Make sure you have enabled PAM and set up permissions for it.

View the PAM audit logs using the Google Cloud console

  1. Go to the Privileged Access Manager page.

    Go to Privileged Access Manager

  2. Select the organization, folder, or project you want to audit entitlement activity in.

  3. Click the Audit logs tab.

  4. To view details of the audited resource, click an entry in the Action column.

Audit logs are also available in Cloud Audit Logs, and PAM can additionally write to Data Access audit logs if Data Access audit logs are enabled.