FortiSIEM User-privileges alerts

Using FortiSIEM monitoring tool. I'm looking to get alerts when a user tries to escalate their privileges. 

Trouble is I'm not sure of the event name/type which would show this event. I have tried filtering through RAW event log, but I still can't seem to find the correct alert.

Any help appreciated.