In some cases you will need to delve into a single user.

  • They are complaining they cannot sign in
  • You are concerned they have lost their device or password
  • They cannot access a specific resource

You can get a snapshot of the per-user audit information by using the Access/Audits menu, and typing in part of the user email and selecting search.