Hi all,
I've noticed some strange 'access' activity from some of our remote working CRM users outside of working hours and have been asked to investigate.
The audit summary view tells me that these users are not creating or updating any records and their security roles do not allow them to delete records.
The audit summary view only shows me that they 'accessed' the system via web services, but multiple times between 5pm - 1am on several evenings.
Upon request from management I have amended their security roles further to stop them from being able to export data to Excel, but I would really like to be able to find out what they are accessing and what they are doing out of hours, and potentially see if they have been exporting data to Excel prior to the amendment to their security roles.
Can anyone help me please?
Many Thanks