I have found that "access" gets confusing from an audit perspective, and have had to explain to many people that the list of people who have accessed something

I have found that "access" gets confusing from an audit perspective, and have had to explain to many people that the list of people who have accessed something is a subset of those who have access to something. I like "permission" for the concept of "allowed by the system to do". I like "activity" or "actions" for things users have done.