How to Identify Historical User Role Assignment Changes When the Role Has Already Been Removed?

7:40AM · 7:40AM

We are currently investigating a security access issue where we believe a user may have been assigned an incorrect role in the past.

The challenge is that the role has already been removed from the user account, and we are now trying to determine:

Who assigned the role to the user
When the role was assigned
Whether the role was subsequently updated or removed
Which user account or process performed the action

We attempted to retrieve the information using the following query:

SELECT pu.personid, pu.username, purn.rolename, pur.startdate, pur.enddate, pur.activeflag, pur.createdby, pur.creationdate, pur.lastupdatedby, pur.lastupdatedateFROM peruserroles purJOIN perusers pu ON pur.userid = pu.useridJOIN perrolesdnvl purn ON pur.roleid = purn.roleidWHERE purn.rolename = '<ROLE_NAME>'AND pu.username IN ( SELECT username FROM perusers WHERE personid = <PERSON_ID>)ORDER BY pur.creationdate DESC

How to Identify Historical User Role Assignment Changes When the Role Has Already Been Removed?

Howdy, Stranger!