HOW TO: Reduce Dynamic Groups traffic in Change History (4336860)

It may be desired to block Dynamic Groups from logging Change History, as these objects have automated changes which can get quite large.

This is currently not possible, but it is possible to reduce the amount of information which is shown in Change History.

The following enhancement request has been created:

Change product functionality around Change History and display and storage of changes with large values. This can be traced using Enhancement ID 431618.

WORKAROUND

1. In the Active Roles Console under Configuration/Managed Units, create a new Managed Unit.
2. Have the Managed Unit populate objects by an Include by query Membership Type Rule.
3. Change the Find: dropdown to Groups and set the Group Type tab to Dynamic Groups. Optionally specify a smaller scope than Active Directory.
4. Click Add Rule and Next | Next | Finish
5. In the Active Roles Console View menu, make sure that the Advanced Details Pane is selected.
6. Click on the new Managed Unit and then on the Active Roles Policy tab in the Advanced Details Pane.
7. Deselect the Built-in Policy - Change Tracking checkbox. (NOTE: This will prevent the tracking of ALL changes made explicitly to Dynamic Group objects, not just group membership changes).
8. Navigate to Configuration | Policies | Administration | Builtin, right-click on Built-in Policy - Dynamic Groups and choose Properties | Policies, then double-click on the policy entry.
9. On the Policy Settings tab, deselect the Enable cross-domain membership checkbox.
10. Click on OK | OK.

NOTE: The Enable cross-domain membership option has hard-coded behaviour which shows full Dynamic Group membership in the Change History of a member whenever a Dynamic Group operation is performed. There is no workaround which can remove these full membership entries while retaining cross-domain functionality.

STATUS

Enhancement Request 90894 has been created to change product functionality with regards to display and storage of changes with large values.

Product Management will review the open enhancement requests on a periodic basis and consider them for inclusion in a future product release. Product enhancements will not be considered or implemented in current or prior product releases. There is no guarantee that a specific enhancement request will be implemented in a future version of our product. It is at our discretion if a certain enhancement will be offered for an additional charge or as a chargeable option.