User lost role and need help finding out who did this

Community Alums
Not applicable

I am trying to figure out if there is a way to determine who removed a role from someone else. Does any one know a way to do this in Tokyo?

1 ACCEPTED SOLUTION

Gunjan Kiratkar
Kilo Patron
Kilo Patron

Hi @Community Alums 

Search in application navigator as deleted record and try to search if you get that record.

System Definition > Deleted Records

Table name = sys_user_has_role


Please Mark My Response as Correct/Helpful based on Impact
Regards,
Gunjan Kiratkar
2X ServiceNow MVP
Community Rising Star 2022
Youtube : ServiceNow Guy

View solution in original post

4 REPLIES 4

Gunjan Kiratkar
Kilo Patron
Kilo Patron

Hi @Community Alums 

Search in application navigator as deleted record and try to search if you get that record.

System Definition > Deleted Records

Table name = sys_user_has_role


Please Mark My Response as Correct/Helpful based on Impact
Regards,
Gunjan Kiratkar
2X ServiceNow MVP
Community Rising Star 2022
Youtube : ServiceNow Guy

Saurabh Gupta
Kilo Patron
Kilo Patron

Hi,
You can look in the users audit history as relationship lost if user table is being audited.

 

SaurabhGupta_0-1672341370126.png

 

 

 

 

 


Thanks and Regards,

Saurabh Gupta

Saurabh Gupta
Kilo Patron
Kilo Patron

Hi,

In Tokyo, there is a new feature of role auditing.

 

Enable role auditing with Contextual Security: Role Management V2 (servicenow.com)


Thanks and Regards,

Saurabh Gupta

Saurabh Gupta
Kilo Patron
Kilo Patron

PFA the result.

 

SaurabhGupta_0-1672341850617.png

 


Thanks and Regards,

Saurabh Gupta