> "If the policy allows access, the flow will: > > [...] > add an audit field ("uu") containing the impersonating account so > that it can be recorded in the audit log" That just means it populates the field internally. Nothing, ever, will add any fields to your audit log but you because the format line is in userland. -- Scott