Which term refers to recording who has accessed or changed identities and their permissions?

• A. Logging
• B. Auditing
• C. Provisioning Process
• D. Audit Reports

Answer: (A)

In IAM, recording who has accessed or changed identities and their permissions is achieved through logging. Logging creates time-stamped records of identity-related events—such as login attempts, account creations, and permission updates—providing a traceable history of actions taken on identities and their access rights. This data serves as the foundation for later security reviews and investigations. Auditing is the process of examining these logs to verify compliance and detect issues, while audit reports are the results of that review. The provisioning process, meanwhile, deals with creating and configuring accounts and access rights, not the ongoing capture of access events. For example, when a change is made to a user’s permissions, a log entry records who made the change and when, enabling traceability and accountability.