Symantec IGA

 View Only
  • 1.  Attributes changed in DB TABLE

    Posted Apr 27, 2020 04:46 AM
    We are using vAPP 14.1 and I have to analyze a lot of data based on which attribute is changed when and for which user. And for that I have to open each MODIFU USER Task > Modify User Event and see which attribute is updated.

    Is there any way I can check the Attributes Changed from DB for a users for all its Modfy requests. I can see TaskSession12_5 table and Event12_5 table but they do not contain information of which attribute was updated. opening each request takes few mins and its very time consuming tasks.

    Your help here will be highly appreciated!!

    Thanks in advance!
    Tanu Goyal


  • 2.  RE: Attributes changed in DB TABLE
    Best Answer

    Broadcom Employee
    Posted Apr 27, 2020 09:17 AM
    A better plan for you may be auditing.

    https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/identity-manager/14-3/configuring/auditing.html

    • Enable auditing for Identity Manager admin tasks.
    • Enable auditing for some or all of the Identity Manager events generated by admin tasks.
    • Record event information at specific states, for example, when an event completes or is canceled.
    • Log information about attributes involved in an event. For example, you can log attributes that change during a ModifyUserEvent.
    • Set the audit level for events and attributes.


    ------------------------------
    And, as always Perhaps there are others in the communities who have experience in doing this and we invite them to comment here also.

    Another option may be to reach out to our partner HCL Technologies to see in what way they can assist further. The Enterprise Studio team of HCL can be reached at enterprisestudio@hcl.com. https://www.hcltech.com/enterprise-studio
    ------------------------------



  • 3.  RE: Attributes changed in DB TABLE

    Posted May 06, 2020 07:46 AM
    Where can I find these Audit logs or corresponding configurations, any idea would be further helpful.

    Thanks,
    Tanu Goyal


  • 4.  RE: Attributes changed in DB TABLE

    Broadcom Employee
    Posted May 12, 2020 09:18 AM
    Hi Tanu
    As long as Audit is configured in your environment (Management Console > Audit > Enable), the audit DB would hold this information. 
    Reviewing the following chapter would give you a good idea about the required configuration
    https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/identity-manager/14-3/management-console-help/how-to-configure-auditing.html

    Regards
    Rinat


  • 5.  RE: Attributes changed in DB TABLE

    Posted May 18, 2020 07:53 AM
    We do not have Audit configured in our environment.

    But thanks for your information. It was helpful to understand for options.