IMOS - Auditing Modifications to the System Security List

Purpose:

The purpose of the IMOS System Audit Report is to record all changes to system security for different users, groups, and administrators. This document thoroughly outlines the type of changes this report tracks and details on all fields available in the report.

System Requirements:

Requires schema version 294 that was released in 2021.

Types of Security Admin changes tracked in the report:

• Checking or unchecking the security admin checkbox (For group or user)

• Checking or unchecking the inactive checkbox (for group or user)

• Adding or removing a user to/from a group

• Adding, removing, or updating a group’s object and module rights (Read, Read-Write, Read-Write-Delete, DenyExecute)

• Adding, removing, or updating a user’s object and module rights (Read, Read-Write, Read-Write-Delete, DenyExecute)

Example Stock Report:

The following stock report is available for import into the Report Designer tool. We recommend adjusting the report filters after importing.

IMOS System Admin Report .form

Report Designer Tables in the Stock Report:

• Start with the Audit table, then join to the Audit Details and Target User tables (one-to-many joins)

Field Definitions in the Stock Report:

• System Admin - Admin user who made the security changes

• Request Time - Timestamp of the date/time of the security change

• User or Group Modified - Name of user or group whose security rights were updated

• Membership - The group a user was added to, or where security changes took place

• Change Type - Type of security change such as modify, delete, or add

• Subject Type - Subject category of change including access right, admin access, object right, group membership, and user or group

• Subject Details - Details on the specific type of change that occurred. This field also captures critical details concerning object rights and the specific user added or removed from groups

• Previous Value - Previous value of change including None, Read, Read-Write, Read-Write-Delete, DenyExecute

• Value - Value of change including None, Read, Read-Write, Read-Write-Delete, DenyExecute

Common Questions:

1. What does value and previous value “None” mean:

   1. This means the security right was set to the default blank value of no rights assigned.

2. Where does the audit report capture the name of the group a user was added or removed from?

   1. These details are captured in the Subject Details column. For example, “Tim.S~Education Services”.

3. Where does the report capture specific object type detail changes (for example, specific companies, posting rights, and approval rights)?

   1. These details are captured in the Subject Details column. For example, “company:ABCD” or “InvoicePostingType:APCT”.

4. How far back can I report on?

   1. Historical information is available since your company upgraded to schema version 294 (released in 2021).

Key Filters:

• Request Type –COMMIT_USER_DATA

• Request Time – Report can only provide audit change details after the schema update took place.