User Permissions Changes Audit

Part of the product are three reports serving for auditing changes in the user permissions.

Report name	RDL file name	Description	Database view name
Objects tree – Protocol for setting the permissions.	Object Tree – Security Settings Log csy.rdl Object Tree – Security Settings Log enu.rdl	Provides the list of changes in permissions in the objects tree.	Query.NodeRightLog
Protocol for setting the membership in groups	Roles Membership Log csy.rdl Roles Membership Log enu.rdl	Provides the list of changes in membership of users and groups in groups.	Query.RoleMembershipLog
User login protocol	User Login Log csy.rdl User Login Log enu.rdl	Provides the list of individual users logins into and logouts from the Admin and Asset Management Console applications.	Query.UserLogonLog

Tip:

Database views names can be used in the AM Console – Tools – Database – SQL query window. So you can display here the same data as in a report without using Reporting Services.

Note:

Reports are in Czech and English only.

Installation

RDL files can be found on the www.alvao.com/download site under Asset Management product in the SecurityAuditReports.zip archive.
Reports installation description can be found on the Installing Reports in Microsoft SQL Server Reporting Services site.

Objects tree – Protocol for setting the permissions.

Protocol displays the list of changes in user permissions in the objects tree for the selected period.
In addition to the changes performed, in the report there is date and time when the change has been performed and the name of the user who has performed the change.

Report parameters

From – enter the date which the records in the report should be displayed from.
To – enter the date which the records in the report should be displayed to.
User – select the users who should be displayed in the report from the menu.
Group – select the groups which should be displayed in the report from the menu.
Edited by – select the authors of permissions changes who should be displayed in the report from the menu.

Protocol for setting the membership in groups

Protocol displays the list of changes in membership of users and groups in groups for the selected period.
In addition to the changes performed, in the report there is date and time when the change has been performed and the name of the user who has performed the change.

Note:

The membership change is not recorded upon deleting the user or group. Only if a group being a member of other groups is deleted, there are records in the record on deleting this group from those groups.

Report parameters

From – enter the date which the records in the report should be displayed from.
To – enter the date which the records in the report should be displayed to.
Member – select the users and groups which should be displayed in the report from the menu.
Group – select the member groups which should be displayed in the report from the menu.
Edited by – select the authors of membership changes who should be displayed in the report from the menu.

User login protocol

The report displays the list of user logins into and logouts from the Admin and AM Console programs for the selected period.
In the individual records there is also the name of the computer on which the user logged into the application.

Report parameters

From – enter the date which the logins in the report should be displayed from.
To – enter the date which the logins in the report should be displayed to.
Member – select the users who should be displayed in the report from the menu.
Application – select the applications which should be displayed in the report from the menu.
Computer – select the computers which should be displayed in the report from the menu.
Administrators only – enable this option if the report should display only the users who have been members of the Administrators group at the time they logged on into the Admin, or who have been members of the Asset Management Administrators group at the time they logged on into the AM Console.

Did not find what you were looking for? Ask our technical support team.