Event-based logging that provides a historical record of who did what that caused changes

[sjs1]

Is there any event based logging for the below events:
1)when users are created
2) when users are assigned or removed to  groups
3)when a user logins
4) when a user logout
5) when a group is edited and by whom.

Is there any reports regarding this which can be pulled  down in periodic intervals to check access rights of a user?

[CarlesColl]

I think that the short answer it's not at all the questions.

The long answer:

1. if you create users and/or assign users to groups with custom Mashup and custom Services instead of the Composer you can create your own events for 1, 2 and 5.
2. For 3 and 4 you have a LoginSucceded and Logout event on SecurityMonitor System Thing to which you can subscribe to, but this doesn't covers 100% of times that users logins and logouts ( for instance for a session timeout you don't receive a Logout ). You can do a poll with a timer on Resources["currentSessionInfo"].GetActiveUsers() and keep track who it's logged in and who it's not and trigger login / logouts events
3. To know which groups a user belongs to you have a GetGroups on User Object, then you can iterate over all users and use this service.

[vnarayanan]

In Thingworx Platform 8.2.0 (to be released soon) - we have added a new Audit feature which audits all the events that you listed. There are services to query the audit history data, so you can get all activities of a particular user. You can also export the audit data and do analysis on the data.