1. Identify "Free Users" in the audit log. 2. Include data in the audit log that will provide more information about the data source (e.g. the server / database name or the location of the file from...
Not including the username for the free users who can take advantage of publish to web and share external if enabled for a legitimate reason is an unnecessary risk. Audit function must and should always link action to identity.
