While evaluating permissions, We noticed that when assigning a permission to a user, there is no tracking in the audit log that shows what user and what permission was updated. I would believe the following information necessary:

• date performed
• user performing the action
• action taken on action and attributeName it was applied to
• updates to the attributeName and action name fields (When defining new ones)