Hmm... Maybe this will work, but I'm guessing from her other conversation she has going that she's looking more for the commands that a person executed on a device either via a script or a job, or maybe even a Compliance rule remediation. Basically be able to tell everything a person did to devices using NCM. This only goes through the general tasks they did within NCM.
The problem is the way that things are stored, things can tend to be in different databases and stored different ways I think. Plus the output can be a bit odd. Try putting at least the first part of the query in the link below into SWQL and you'll see how it formats the job output.
You know, actually I'll leave that link there and modify the query slightly to include what user did the "job" for you. Pretty minor change.
SELECT TR.Username, TR.NodeProperties.Nodes.Caption, RequestedScript, ErrorMessage, DeviceOutput, Action, Status
FROM NCM.TransferResults TR
WHERE (Action = 3) AND (Status = 2)
The first problem you can see is that it kind of runs everything together from the output. It might look a little bit better if it was a config job. I do mainly compliance rule remediation. Give it a try and see. The other problem is how easy it is to clear this table. If you go into "Configs" and "Configuration Management" under "Transfer Status", anyone that clicks "Clear Complete" clears out all the output from jobs that completed. There is also "Clear All" and "Clear Failed". Not sure how you're going to keep people from clearing them. Not a very good history, nor do I know anywhere that these are moved to an actual historical table... You could easily modify this by doing a "WHERE Username LIKE '%MyUser%')", or look at the link provided to see a cleaner way of having it in a page...
Hope this helps a bit though?
Let us know what type of "Audit Report" you were actually looking for too!