Admin Audit Logs Now Show Exactly What Changed

Security

New in IT Portal 4.6.41 · Q4 2026

Overview

"Who changed this user, and what did they change?" It is one of the most common questions an MSP or IT team has to answer — after a security review, a customer escalation, or simply when someone suddenly has access they should not have.

Until now, IT Portal's Admin Access log could tell you that a user was updated, by whom and when. It could not tell you what was different afterwards. With IT Portal 4.6.41, it can. User changes made in Admin Settings now record the before and after value of each field that changed, right in the log.

What you get

  • The full story of every user edit. Promoted from User to Administrator? Granted password access? Moved into a different security group? You see the exact field, the old value and the new value.
  • Plain-language values. Access levels show as Administrator, User or Company User, and on/off settings show as Yes or No — easy for anyone to read, not just the person who built the system.
  • Enable, disable and 2FA resets on the record. Disabling or re-enabling a user and resetting a user's 2FA are now logged as their own clearly titled entries, so these sensitive actions are never invisible.
  • Security group membership tracked. Changes to a user's security groups appear as a single, clear before-and-after entry.
  • Secrets stay secret. Passwords, PINs, 2FA secrets, security answers and reset tokens are never written to the log. You see that the change happened — never the sensitive value itself.

How it works

Open Admin Settings → Security → Logs → Admin Access, choose your date range and run the report. Entries that include field-level details show a small link such as "3 Changes" next to the title. Click it, and a Change Details window lists each changed field with its old and new value side by side.

Need to share it? Save (csv) now includes a Changes column, so the exported report carries the full detail for change reviews, customer reports or your auditor.

There is nothing to switch on. Once 4.6.41 and its upgrades are applied, user changes are recorded automatically.

Why it matters

  • Faster investigations. When access looks wrong, you can see exactly when it changed and who changed it in seconds, instead of piecing it together from memory.
  • Stronger compliance evidence. SOC 2, ISO 27001 and cyber-insurance reviews all ask how you control and monitor privileged access. A clear, exportable record of every permission change is exactly the evidence they want.
  • Accountability across the team. When several technicians manage users, a precise change history keeps everyone confident that changes are intentional and traceable.
  • Better customer conversations. If a client asks why someone's access changed, you can show them — with dates, names and values.

Getting started

Upgrade to IT Portal 4.6.41, make a user change, and run the Admin Access report to see it in action. Entries recorded before the upgrade will not include change details.

For step-by-step instructions, what is and is not captured, and troubleshooting tips, see the knowledge base article Admin Access Logs — Seeing What Changed.

See everything else in this release in the IT Portal 4.6.41 release notes.

Author Bio
Leslie Salvan

Leslie Salvan

Leslie Salvan is the Social Media Manager and SEO Lead at IT Portal, where she shapes the brand's digital presence and drives strategic growth across multiple platforms. With a strong focus on content clarity, search performance, and community engagement, she helps connect IT teams to smarter documentation solutions.