# Access History - Identity Attribute Change

**URL:** <https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, reporting\
**Created:** [April 7, 2025, 8:53am UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642 "2025-04-07T08:53:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sahincelik](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@sahincelik](https://developer.sailpoint.com/discuss/u/sahincelik)\
**Post date:** [April 7, 2025, 8:53am UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642/1 "2025-04-07T08:53:57Z")

</div>

Hi all,

We would like to report some of the identity attribute changes due to some audit policy requirements. I know it is possible to filter out in the Access History page, but I presume it is limited up until 13 months and we cannot see transactions before that. So, my question is how I can see the older identity attribute changes and possible create a report for this?

Thanks in advance!

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [April 7, 2025, 8:58am UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642/2 "2025-04-07T08:58:56Z")

</div>

You can use Audit event: **IDENTITY\_ATTRIBUTE\_VALUE\_UPDATE\_PASSED**

Check this [doc](https://community.sailpoint.com/t5/IdentityNow-Wiki/Audit-Events-in-Cloud-Audit/ta-p/218727) for more info

---

<div class="post-metadata">

**Author:** ![sahincelik](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@sahincelik](https://developer.sailpoint.com/discuss/u/sahincelik)\
**Post date:** [April 7, 2025, 9:39am UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642/3 "2025-04-07T09:39:28Z")

</div>

Thanks for your reply. However it does not bring logs older than 13 months.

---

<div class="post-metadata">

**Author:** ![suresh4iam](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suresh4iam/32/29513_2.png) [@suresh4iam](https://developer.sailpoint.com/discuss/u/suresh4iam)\
**Post date:** [April 7, 2025, 10:16pm UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642/4 "2025-04-07T22:16:29Z")

</div>

If you need to access older data, up to 5 years old, fill out the [Audit History Request Form](https://documentation.sailpoint.com/saas/help/assets/auditHistoryRequestForm.docx) and submit it with a support ticket.

---

<div class="post-metadata">

**Author:** ![sahincelik](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@sahincelik](https://developer.sailpoint.com/discuss/u/sahincelik)\
**Post date:** [April 8, 2025, 9:26am UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642/5 "2025-04-08T09:26:34Z")

</div>

I will simply use the identity history API ({{baseUrl}}/historical-identities/:id/events) to get all the events for now. Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 7, 2025, 9:27am UTC](https://developer.sailpoint.com/discuss/t/access-history-identity-attribute-change/108642/6 "2025-06-07T09:27:29Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.