The CreatorCon Call for Content is officially open! Get started here.

Where would you go to see if an admin impersonated another user?

WITOU
Tera Contributor

Hi,

 

Could you, please, give me the correct answer  of the question below:

 

I'm confused between the second and the third answer.

 

Where would you go to see if an admin impersonated another user?

  • In the transaction logs and look for impersonation.start and impersonation.end in the name field
  • In the User Transaction logs
  • In the Event logs and look for impersonation.start and impersonation.end in the name field
  • In the Client transaction logs

Thanks for your help 🙂 

5 REPLIES 5

Dr Atul G- LNG
Tera Patron
Tera Patron

Hi @WITOU 

 

Easy to find the right answer.

 

Login to PDI.

Impersonate In and Out.

 

Check at these places:

  • In the transaction logs and look for impersonation.start and impersonation.end in the name field
  • In the User Transaction logs
  • In the Event logs and look for impersonation.start and impersonation.end in the name field
  • In the Client transaction logs

And confirm which is right.

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]

****************************************************************************************************************

Hi @Dr Atul G- LNG,

 

Thanks for your reply.

 

Could I understand from your reply that the correct answer is  " In the User Transaction logs"?

 

When I navigate to Navigate to System Logs >Events, I see events impersonation.start and impersonation.end events. Thats why I'm confused between the two answers.

 

Thank you in advance for your help,

WITOU
Tera Contributor

Hi @Dr Atul G- LNG,

 

Thanks for your reply.

 

Could I understand from your reply that the correct answer is  " In the User Transaction logs"?

 

When I navigate  to System Logs >Events, I see events impersonation.start and impersonation.end events. Thats why I'm confused between the two answers.


Thank you in advance for your help,

Yes. @WITOU 

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]

****************************************************************************************************************