User Removed From Group With CA Policy Modification Access — Detection Rule
Monitor and alert on group membership removal of groups that have CA policy modification access
Monitor and alert on group membership removal of groups that have CA policy modification access