Hello,
I came across a techincal requirement (SharePoint 2013), which is like this:
Enabling automatic logging actions of granting privileges (roles, groups, permissions) in the System.
The following attributes should be recorded: the date and time of the event, the user who granted the privilege, the name of the privilege, the type (role, group, permission), the expiration date (if exists).
Is there any way to implement this requirement?
Thanks in advance.
You can use auditing (site collection level setting), but after testing it, I found that the information is pretty useless, since you cannot see who the permissions are given to. See screenshot that I added.
Maybe there are 3rd party tools that accomplish your requirement. Hope it helps.