Pixiportal

As an administrator, I want to consult a record of key user and system actions, so that I can ensure traceability and investigate changes made within PixiPortal.

Acceptance Criteria:
Audit events
The system records key actions performed within PixiPortal, including, at minimum:
User creation, update, activation and deactivation
Organizational assignments and changes
Role and permission assignments or removals
Application access assignments and revocations
Authentication events such as successful login, failed login and logout

Audit information
Each recorded event includes, where applicable:
Date and time
Action performed
User who performed the action
Affected user or entity
Relevant entity type
Previous and new values for changes

Filtering
The administrator can filter audit events by relevant criteria, such as:
Date/time range
Action type
User who performed the action
Affected user or entity

Immutability
Audit records cannot be modified or deleted through the PixiPortal interface.

Security
Only authorized administrators can consult the audit trail.