Try searching events with this query
NOT actor.name:System AND technicalName:"IDENTITY_ATTRIBUTE_VALUE_UPDATE_PASSED" AND attributes.attributeName:cloudLifecycleState
That should narrow it down to manual changes
Try searching events with this query
NOT actor.name:System AND technicalName:"IDENTITY_ATTRIBUTE_VALUE_UPDATE_PASSED" AND attributes.attributeName:cloudLifecycleState
That should narrow it down to manual changes