Log Impersonation History
Enable impersonation history logging using a system property.
The impersonation history log tracks the following impersonation details on the Impersonation History [sys_user_impersonation_history] table when an impersonation is performed using the UI.
- Impersonating user
- Impersonated user
- Impersonation start and end times
- SessionID
Ensure that the identity.impersonation.history.enabled property doesn’t exist in the System Properties [sys_properties] table, or exists and is set to a value of true.
More information
| Attribute | Description |
|---|---|
| Configuration name | identity.impersonation.history.enabled |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | Error handling and logging |
| Security risk | - Severity score: 4.9 - CVSS score: Medium - Security risk details: When this property is set to `true`, impersonation session details are logged in the Impersonation History \[sys\_user\_impersonation\_history\] table. Use this information for auditing in security investigations or for compliance purposes. |
| Functional Impact | When this property is set to `true`, impersonation session details are logged in the Impersonation History \[sys\_user\_impersonation\_history\] table. When set to `false`, the impersonation details aren’t captured this table. |
| Dependencies and prerequisites | None |
Parent Topic:Error handling and logging