EPM Planning - need guidance on identifying epm-automate login vs browser login
Summary:
I have a service account that is used for automation purposes (epm-automate and integration agent). The password refresh is done by the run and operate team and is done every 120 days and then the encrypted password is used for epm-automate and agent.
I want to ensure that the service account is used only for its intended purposes (automation) and none of the run and operate team explicitly logs in to the application (via browser or smartview) using the service account credentials.
I am the tenant admin and I have access to application audit and domain audit reports, but I am unable to identify epm-automate login (or agent or API) vs browser login for a user account. The plan is to set up a automated notification whenever there is a browser login for an account.