All admin and user behaviors that access the credentials for password vaulted apps are audit logged. Audit logs record any actions to add a credential, modify a credential, or view a credential.
To view the audit logs for password vaulted apps in the Google Admin console, go to Reports > Audit log > Password vault. For general instructions and details about audit logs, see Admin audit log.
Data retention and lag times for password vaulted apps
The data retention time (how long data is saved) for audit logs related to password vaulted apps is 6 months. The lag time (how long it takes before the collected data is available to view) ranges from a few minutes to a few hours. For more details about data retention and lag times for reports and audit logs in the Google Admin console, see Data retention and lag times.