How to get logs who removed user from group ?

[B Ashok]

Hi Team, 

How to get logs who removed the user from a group, We have few users removed from the group, I have checked in sys_audit table not found it helpful. 

Thanks

Ashok B

[Allen Andreas]

Hi,

Unless the table is audited, you won't be able to see specifics like you want.

You can review the updated by column (for example) for other members within the same group and see if someone recently made changes to that group and then ask them if they removed the member.

Otherwise it's not logged anywhere.

If the table is audited, then you can navigate to the sys_audit table for example, look at records for sys_user_grmember and see delete entries there.

Please mark reply as Helpful/Correct, if applicable. Thanks!

[Mihir Mohanta]

Hi Ashok,

Please navigate to System Definition > Deleted Records and find the deleted records with filter Table Name = sys_user_grmember.

The updated by field there will display who removed the user from group.

Note:

The retention policy in the deleted records table data is 7 days.

If  no_audit_delete=false dictionary attribute set for sys_user_grmember table then you cant find any records against this table.

Thanks,

Mihir