Enable Identity and Access Audit Tool

Use Identity and Access Audit to track changes to user accounts, groups, and roles.

Use Identity and Access Audit to track critical information about modifications made to user accounts, groups, and roles. Enable this feature to help detect malicious users, track unusual activity on your instance, and adhere to compliance standards for tracking access changes.

This tool stores audit records of successful create, update, and delete transactions to the Security Table Audits [sys_security_table_level_audit] table.

重要:

Identity and Access Audit doesn’t audit successful read transactions, or any unsuccessful transactions.

Ensure that the Identity Security Audit (com.glide.security.audit) plugin is installed. After the plugin is installed, ensure that the glide.identity.security.audit.enabled system property is set to true, or doesn’t exist in the System Properties [sys_properties] table.

More information

Attribute	Description
Configuration name	glide.identity.security.audit.enabled
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	true
Default value	true
Fallback value	true
Category	Error handling and logging
Security risk	Severity score: 4.6 CVSS score: Medium Security risk details: Not auditing changes to user accounts, groups, and roles limits the effectiveness of audit and security personnel during investigations.
Functional impact	None
Dependencies and prerequisites	None