How to Find User Account Changes

Hi all,   I am trying to research why a user's account on our F5 was set to no access. I looked through the user.log and secure logs via the CLI but I could find anything for that user's account....