# Auditing User Authentication and Authorization

To meet compliance and regulation objectives, you can audit the user interactions through the Kloudfuse observability platform.

To monitor both authentication and authorization services in the Kloudfuse UI data plane, contact the Kloudfuse support team. See [Support](https://docs.kloudfuse.com/platform/3.5.0/support/).

Optionally, users with admin privileges can access the relevant logs on the command line; see [Authentication Auditing](https://docs.kloudfuse.com/platform/3.5.0/auditing/#identity) and [Authorization Auditing](https://docs.kloudfuse.com/platform/3.5.0/auditing/#security).

## Authentication Auditing

For authentication, the administrator can view the user login interactions in the `kfuse-auth` deployment logs.

```console
kubectl logs -n kfuse deployment/kfuse-auth
```

Copied!

## Authorization Auditing

For authorization, the RBAC configuration enables the administrators to examine the logs of `user-mgmt-service` to view the user actions on the various Kloudfuse resources.

```console
kubectl logs -n kfuse deployment/user-mgmt-service
```

Copied!

## Audit Logs

To be able to view audit logs in the UI, first enable these features in your cluster custom-values.yaml configuration file:

```yaml
global:
  RBACEnabled: true
  EnableAuditLogs: true
  EnableAuditSelfIngest: true
```

yamlCopied!

These three settings work together as dependencies: `EnableAuditSelfIngest` requires `EnableAuditLogs` to be enabled, which in turn requires `RBACEnabled`. This configuration enables RBAC authentication for all operations, captures audit logs for mutation operations, and ingests those logs into Kloudfuse so they are viewable in the Logs section of the UI.

After applying these configurations and updating your cluster, you can view the audit logs in the Logs section by filtering with `audit_log="true"` or by source using `Core:source="kf-audit-log"`.