Enable Identity and Access Audit Tool
Use Identity and Access Audit to track changes to user accounts, groups, and roles.
Use Identity and Access Audit to track critical information about modifications made to user accounts, groups, and roles. Enable this feature to help detect malicious users, track unusual activity on your instance, and adhere to compliance standards for tracking access changes.
This tool stores audit records of successful create, update, and delete transactions to the Security Table Audits [sys_security_table_level_audit] table.
Important: Identity and Access Audit doesn’t audit successful read transactions, or any unsuccessful transactions.
Ensure that the Identity Security Audit (com.glide.security.audit) plugin is installed. After the plugin is installed, ensure that the glide.identity.security.audit.enabled system property is set to true, or doesn’t exist in the System Properties [sys_properties] table.
More information
| Attribute | Description |
|---|---|
| Configuration name |
|
| Configuration type |
|
| Data type | - N/A - Boolean |
| Recommended value | - Plugin is active - true |
| Default value | - Plugin is active - true |
| Fallback value | - N/A - true |
| Category | Error handling and logging |
| Security risk | - Severity score: 4.6 - CVSS score: Medium - Security risk details: Not auditing changes to user accounts, groups, and roles limits the effectiveness of audit and security personnel during investigations. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Error handling and logging