In the CEM Domain Configuration Change History (under Setup -> Monitors -> View Changes Since Last Synchronization) there are entries for changes made by users that have not yet been synchronized out to the TIMs.
The table has headings:
I see actions (component create) performed by user "cemsystem" with no correspondign user login in the MOM log.
Is it the system actually making changes to business transaction definitions? or
Is it someone logging in as cemadmin?