Automated mechanisms exist to generate event logs for permissions changes to privileged accounts and/or groups.