Problem Statement
We installed the Delegated Admin extension and changed the email for a user when logged in on the extension. However, the “sapi” logs do not show which user initiated the PATCH.
Solution
There is no way to see which particular account made a change via the Delegated Admin extension or the Management API.
You can only filter for type:sapi events to see changes made to the tenant. The description field can be used to narrow down to certain operations. For example, to see when a user was modified, use the filter:
type:"sapi" AND description:"Update a User"