Configuring Tables and Fields

Identity and Access Audit to understand the changes made for a user, group, role, and ACL.

Before you begin

Role required: security_admin

You must elevate your role to Security Admin to configure tables and fields for Identity and Access Audit.

The following tables can be configured for auditing​:

• Group [sys_user_group]​
• Role [sys_user_role]​
• Access Control [sys_security_acl]​
• User [sys_user]​
• Group Role [sys_group_has_role]​
• User Role [sys_user_has_role]​
• Access Roles [sys_security_acl_role]​
• Contained Role [sys_user_role_contains]​
• Group Member [sys_user_grmember]​

Note:

To understand which fields can be configured for the tables, see Fields supported and not supported for Identity Access and Audit.

Procedure

1. Navigate to All > System Security > Identity and Access Audit > Configure Tables & Fields.
2. Select the table that you want to audit a field from.

   For example, sys_user.

   
3. Add the field to be audited.

   For example, Password.

   

   Note:

   The following modifications for the security auditable fields result in more processing time when doing bulk import:

   • Adding more fields from the available field list for audit.
   • Enabling additional operations such as create, update, or delete.
4. Update the record.

   Any changes to the password field add a new record to the Security Table Audits. In this example, the audit shows a changed password field for the user Abel Tuter.

   

   Selecting the created record displays the details of the changes.