Grouper Users - Open Discussion List

[Chris Hyzer <>]

I think the point-in-time audit handles this, and it links to the audit log 
to get the high level action, but in this case we can have even higher lever 
actions (import vs adds/deletes)

Thanks,
Chris

-----Original Message-----
From: Curry, Warren 
[mailto:]
 
Sent: Tuesday, May 19, 2015 4:01 PM
To: Chris Hyzer; Michael R. Gettes; grouper-users
Subject: RE: audit log and certain events

If the tool is used to create authz content for a federally compliant 
environment.  A record of what and when things were done for each person and 
"permission"  would be needed somewhere.   Ideally this would be in the 
central tool that creates and manages the Authz info.    More granular audit 
is better ... perhaps necessary/required.   We are in midst of a FISMA  
moderate compliant environment.  Activities going to there are much more 
controlled and require audit capability..  

My two cents..   not sure if this answers you or not Michael but clearly adds 
.... 

whc

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Chris Hyzer
Sent: Tuesday, May 19, 2015 3:52 PM
To: Michael R. Gettes; grouper-users
Subject: [grouper-users] RE: audit log and certain events

These are not currently in the audit log as you know, but just letting other 
people know :)

Viewing or exporting hasn’t been in the audit log, for import, each 
individual add/remove creates an audit record, though generally the auditing 
is for higher level actions, so that could be replaced with an "import" 
audit, or in addition to (I think point in time covers the other cases so I 
think one high level audit is better).  If there are other things you want to 
see in there let me know.

Thanks,
Chris

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Michael R. Gettes
Sent: Tuesday, May 19, 2015 3:39 PM
To: grouper-users
Subject: [grouper-users] audit log and certain events

Should the audit log show certain events like “Export members” and “Import 
members”?  

I’m not sure what other events are appropriate but I hope you get the intent 
of my question.

/mrg