The auditing functions function will tell you about accounts' history - i.e. what has been done to the account(s) such as on the activity tab of any account - e.g. when the password was changed , or when it failed to work because the password was entered incorrectly or even when the account was deleted. You can view this over the organisation, or on the activity tab of any account.PLACEHOLDER - SCREENSHOTS. It also says who made the change.