title: Is it possible to review the changes to ACL? Where should I search for logs?
body: <p>I see that somebody gave &quot;Tom&quot; the ACL access to a storage account. I would like to check who gave Tom the access and when it happened.</p>
  <p>The access was probably provided via the Azure portal or Azure Storage Explorer.</p>
  <p>I've tried opening the activity log blade in the storage account. I've downloaded the logs for the last days. However the list seems to include RBAC changes (it's labelled &quot;Create role assignment&quot;), but not ACL changes. Some ACL changes that I myself know I undertook in the last days don't appear there.</p>
  <p>My role is Resource Group admin and Resource Group User. There are custom roles at my company, but I think they correspond to the standard roles to a high degree.</p>