返回
-
标题
Identity Manager Process Logging in ARS Change History -
说明
Is there a way for Identity Manager (1IM) to log more descriptive information in the ActiveRoles Server (ARS) Change History?
For example, a Group Manager performs a Group Membership Change in IT Shop. Is it possible to see who made this change; when the change was made; and the reason for the change in the ARS change history? -
解决办法
This is currently not possible.
Whenever steps such as group membership changes are performed in IT Shop, it is at the database level. That is, the Person record for the group manager makes changes at a database level for group membership as defined in the 1IM database.
Following the database changes, the 1IM service account will execute these changes in the target system, in this case ARS.
That's why group membership changes appear in ARS change history, and that the operation is initiated by the 1IM service account. This is the account connecting to the target system to make such changes.
Identity Manager has its own change history available that would allow you to track this type of change in the database.
For more information please refer to the Operational Guide, Analyzing process monitoring in the Manager.