We have a need to set up alerts in our org whenever there is a change to a specific Permission Set Assignment i.e. when users are added/removed from the sensitive PS.
We have a similar need for a profile.
I tried exploring Transaction Security Policy for this, however I could not find a matching event that would capture PermSet/Profile assignments. Currently it only seems to support API, ListView, Login and Report Events which are not matching our needs.
Also tried looking for any standard platform event that could be getting fired but I donot think that is the case.
So I am left with polling the
SetUpAuditTrail/PermissionSetAssignment object to look for the changes. Is there any better way to monitor Profile/Permission Set Assignment changes ?