Please let us know how can we enable the logger for GET operation calls made using the exposed SailPoint API. Kindly suggest if its in SCIM Resource Actions of Audit configuration.
I think you are on the right track, just check the Read box too in user resource action so that whenever a user data is read(using GET) it’ll be logged.
you can find these logs in advanced analytics>Audit>Read logs with details like date and time when it was read and the user whose credentials were used in that call.