Who removed a user from a group
Document ID : KB000115332
Last Modified Date : 19/09/2018
 Show Technical Document Details
Question:
Is there a way to find which account has removed a user from a User Group?

User-added image
Environment:
CA Spectrum 10.x
Answer:
Search the event and removed the user from a group in OneClick Console, on the landscape handle item.
User-added image

In the Contents pane, select Events TAB, search for User Group for instance. 
In the example below, the account called "fulano" removed the Test account from the UserGroup.

Event: Dist Assoc Removed - Duplicate association GroupTest (0x1000924) of type UserGroup Has_Member Test (0x10035d1) of tpye User has been removed from the master landscape by fulano.
Event Type: 0x10a0b
Created By: fulano

User-added image