• Agency needs to see who was added or removed from groups. 

• Azure

       1.Login to Portal.azure.com

       2.Select Entra ID

       3.On the left pane go under monitoring logs then audit logs (as shown below)

       4.From here you can filter through specific date ranges as well as categories for the audit. 

Refer to: https://learn.microsoft.com/en-us/azure/security/fundamentals/log-audit