We have had many endpoints that look like their identity group has been changed by someone or some script. Is there a report or log to look at that will show the user id of the person that made a change to a endpoint that is located in ISE.
Thanks,
Sam
