The Activity page is a durable record of who did what, when, and from which workstation -- independent of whether the action was actually allowed. A denied attempt shows up here too, not just successful changes.

Reading a row

EVENT and STATUS are separate columns on purpose: EVENT is just the category of action (create/delete/alter/etc.), colored by that category alone; STATUS ("Success"/"Denied") is entirely independent, so a successful delete and a denied attempt never look identical at a glance. Click a row's Details link for the full picture -- who, when, from where, what changed (a readable before/after, not raw data), and, if you have permission to see it, the actual command text for a step that changed.

Finding something

A filter box under each column header searches just that column; a separate search box searches everything at once, including the Reason and change-detail content that isn't its own column. A column-chooser button lets you show or hide any available field.

Viewing this page requires its own dedicated permission, separate from Security Management or Blacklist Management -- an admin can hand someone "see who changed what" without also handing them the ability to actually change roles, permissions, or the blacklist.