The User Audit report records user changes made by CSV, RM Unify Network Provisioning or those made directly from the RM Unify Management Console. The table below provides a more detailed description of those change types.

The User Audit report does not include changes made by RM Unify AD Sync or MIS Sync.

Event type	Event description
Apply Grace Period	User has been given a fixed number of days extra access to RM Unify after leaving the establishment (Glow only).
Bulk Password Change	Password changed for all users in a group.
Clear MFA enrolment	Admin has removed the user's MFA enrolment.
CSV Delete User	User deleted as not present in the uploaded CSV file.
CSV Update User	User created or updated by CSV file upload.
Delegate Admin Rights	Admin rights manually applied or revoked in the RM Unify Management Console.
Disable User	User disabled manually in the RM Unify Management Console.
Enable User	User re-enabled manually in the RM Unify Management Console.
Enrol in MFA	User has enrolled their smartphone for MFA.
Manual Create User	User created manually in the RM Unify Management Console.
Manual Delete User	User deleted manually in the RM Unify Management Console.
Manual Hard Delete User	User hard deleted manually in the RM Unify Management Console.
Manual Update User	User's specified attribute was updated manually in the RM Unify Management Console, e.g., username, email address.
Password Change	User's password was changed by the specified user.
Restore User	Deleted user temporarily restored (Glow only).
Scheduled Delete User	Scheduled deletion of restored user (Glow only).
AD Password Change Detected	Password change for local AD user detected and synced to linked RM Unify account by RM Unify Network Provisioning.
Create AD User	AD user created by RM Unify Network Provisioning.
Disable AD User	AD user disabled by RM Unify Network Provisioning.
Update AD User	AD user attributes updated by RM Unify Network Provisioning.