This article will detail how to search for added or removed users to and from groups via Okta System Logs.

• System Logs
• Group Membership
• CSV 

To leverage the Okta System Logs to search for group membership removal and additions, please follow the steps below: 

1. Access the Okta Admin App Dashboard.
2. Click Reports > System Log.
3. Specify a time range using the From, To, and Time Zone fields.
4. Enter group.user_membership.add or group.user_membership.remove to search for group removal or addition events.
   
    

5. Press the Enter key or click the Search icon.
6. Click Download CSV to have the data exported. 

Related References

• Event Types
• System Log filters and search
• System Log API