...
Note: when you assign privileges in the API you use the AccessPrivilege class, e.g. AccessPrivilege.VIEW
Entity auditing, change log, point in time
Entities are auditing like groups, but the categories are: entity, and the actions are addEntity, updateEntity, and deleteEntity.
sdf