Activity log
Everything staff do in the admin area, with who, what, when and the result.
Stratum → Users & Security → Activity log records every change made in the admin area: who did it, what they changed, when, from which IP, and whether it worked. Refused and rate-limited attempts are logged as well. Changes root admins make on other users' servers are logged too.
- Filter by staff member, area or time.
- Export the log (separate permission).
- Keep for: old entries are removed after the time you set.
User history (logins, IPs, past changes of a user) is on each admin user page.
Suggestions
A role with only stratum.activity.view lets someone check what happened without being able to change anything.