User Added To Group With CA Policy Modification Access — Detection Rule
Monitor and alert on group membership additions of groups that have CA policy modification access
Monitor and alert on group membership additions of groups that have CA policy modification access