Issue Summary

Audit logs do not capture events for two scenarios:

1. Email address or Full name change of a user directly via managed accounts is not captured in Audit logs.
2. IDP synced user removed from the group at IDP deactivates the account. The user's group removal is logged in the audit log but the user's deactivation event is not logged.

Steps to Reproduce

1. Change the email address or full name of the user under the managed account for a user and check audit logs.
2. For scenario 2: remove an IDP synced user from all IDP synced groups, this will deactivate the user, deactivated account event is not logged in audit logs through the user's group membership removal is logged. 

Expected Results

The above-explained scenarios should be captured in audit logs.

Actual Results

Events for the explained scenarios are not captured in audit logs.

Workaround

Currently, there is no known workaround for this behavior. A workaround will be added here when available