Maybe you don’t want to turn auditing on because you think you don’t need it or are concerned about the additional storage space it will consume. But enabling auditing is a CRM Administrator’s best friend when it comes to understanding the consequences of the assigned security roles. So at the minimum be sure to enable auditing for the COLAC entities: Contacts, Opportunities, Leads, Accounts and Cases.