To keep track of entitlement and grant events, you can view the PAM audit logs.
Before you begin
Make sure you have enabled PAM and set up permissions for it.
View the PAM audit logs using the Google Cloud console
Go to the Privileged Access Manager page.
Select the organization, folder, or project you want to audit entitlement activity in.
Click the Audit logs tab.
To view details of the audited resource, click an entry in the Action column.
Audit logs are also available in Cloud Audit Logs, and PAM can additionally write to Data Access audit logs if Data Access audit logs are enabled.