You can use Change Guardian with NetIQ Identity Manager, which allows you to view the user identity details of events. You must have the View People Browser permission to view the identity details.
To view the user identity details of an event:
Perform a search, and refine the search results as needed.
In the search results, select the events for which you want to view the identity details.
Click Event operations > Show identity details.
Select whether you want to view the identity of the Initiator user, the Target user, or both.
If you do not have Identity Manager or a similar product installed, this option is not available. For more information about integrating identity information with Change Guardian events, see “Integrating Identity Information” in the NetIQ Sentinel Administration Guide.