# Track changes in each user's IAM permissions

* You can **use Config to view the IAM policy that was assigned to an IAM user, group, or role at any time in which Config was recording**.<br>
* This information can **help you determine the permissions that belonged to a user at a specific time**: for example, you can **view whether the user John Doe had permission to modify VPC settings on Jan 1, 2015**.