Audit logging for RBAC policy changes

[gorkem]

Acceptance criteria

Every create, update, or delete change an RBAC administrator makes on policies and roles should be logged with information like.

• Event name as identified in the system
• Description of the event
• Timestamp
• Actor or plugin that created, edited, or deleted
• Information that identifies the running backstage instance (IP Address, hostname etc.)
• Information on where the source of the change originated (country, hostname, IP address, device ID, etc.)

We may also implement audit logging for Scaffolder and Orchestrator. We can combine the efforts to store/forward and view these logs.

Who will have access:

Put an x in the boxes that apply

• Authenticated user
• Unauthenticated user/Guest
• System Admin only

UI/UX

Figma links if needed

Api documentation/information

OpenAPI link if needed

[AndrienkoAleksandr]

Feature was implemeted.