how to get a audit trail for all actions when impersonate user

[Wim2]

Hi,

I am looking for a way to get an Audit trail/report of all actions in two cases

1. Actions done by a user when impersonating another user
2. when users, role, groups or ACL's are created, changed or deleted.

case 1)

• Start impersonating
• Who is impersonatin who
• All performed actions, inclusif the performed changes (old/new value)
• end impersonating

case 2)

• user performing the action
• On users, groups and ACL's what action is performed
• Old / new value

Is there a OOTB solution?

Is there a plugin I need to activate?

Thanks,

Wim 

[Mamta9]

HI,

The test cases that you have mentioned can be performed using Automated Test Framework. (ATF).

Its a paid plugin available in ServiceNow for doing automated testing.

ATF supports testing of impersonation, form, ACL etc.

These automated tests can record the screenshots of these actions.

For trial, you can activate this on your personal developer instance or lower environments.

Please mark correct or helpful.

Regards

Mamta 

[Ashutosh Munot1]

Hi,

This all things are logged into couple of places. First for impersonating is logged in system logs and what actions are done is in event logs like insert update,etc.

Thanks,
Ashutosh

[Wim2]

Ashutosh

I can see the 

• Start impersonation
• Stop Impersonation

But I can not see the actions performd. I did try this with impersonation Abel Tuter ( dev instance).  

[Ashutosh Munot1]

Hi,

That actions performed are captured in event logs and not system logs. This is bit tricky. because in events logs you can to filter based on time frame when impersonation started and when it ended.

Thanks,
Ashutosh