opmanager security logs?

Hi All,

Some users in OpManager have been making unapproved changes to the system, can somone tell me which logs I can review to help me identify the user(s) in question?

Regards,
BlueFire