Erik Darling is keeping an eye on you:
Sort of recently, a client really wanted a way to figure out if support staff was manipulating data in a way that they shouldn’t have. Straight away: this method will not track if someone is inserting data, but inserting data wasn’t the problem. Data changing or disappearing was.
The upside of this solution is that not only will it detect who made the change, but also what data was updated and deleted.
Read on to see how it works. I’ve used temporal tables for this type of scenario, and they’re fine for stable table designs.