Views:

Applies to Product - FnO Platform
 

What’s happening?
Customers need to track which admin account created a specific role and which admin account assigned a user to that role within their production environment.
 

Reason:
The inability to track changes is due to the telemetry limit of 30 days, which restricts access to historical data regarding role assignments and modifications.
 

Resolution:
To track which admin account created a certain role and to monitor user assignments in the future, follow these steps:

  1. Set Up Database Logging:
  2. Navigate to System administration > Setup > Database log.
  3. Select New to open the Logging database changes wizard.
  4. On the Tables and fields page, select the UserSecurityRole table. If it is not visible, enable the "Show all tables" and "Show table names" options to display more tables.
  5. On the Types of change page, select the data operations (insert, update, delete, rename key) for which you want to track changes for the UserSecurityRole table.
  6. Review the changes on the Finish page and select Finish.
  7. Audit Trail for Role Creation:
  8. To find out who created a specific role, access the Security Configuration form and select the role in question. You can then view the Audit Trail to see all changes made to that role, including the creator's information.
  9. Future Monitoring:
  10. In future versions of the product, a Role Audit feature will be included in the Users form to automatically log all role changes made on a user, including who made those changes.
If you have any further questions or require additional assistance, please reach out to support.