Activity log capturing GRC Policy owner's name even if he has not made any changes.

[Obito]

Hi All,

We have one issue regarding activity log. This activity log is capturing some field changes (please see below screenshot) 

but client is saying they have not made any update to the GRC policy in 2023. How to debug this issue.

Thanks

[Hemanth M1]

Hi @Obito ,

1)I would recommend you to check the history of this policy (what all updated on this date??).

2)Do you know users who have impersonate rights in Prod, check with them once

[Obito]

Hi @Hemanth M1 , 

Thank you for the reply! I wanted to know is there any way where we can find out that this update has not been done by user itself but someone has done by impersonating. Basically How I will identify that difference.

Thanks.

[Hemanth M1]

Hi @Obito ,

You can try this: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0717055 

Please be sure to do it sub production instance first and also "cache.do" might cause Performance issue in Production (you can try doing during non business hours)