Oracle Transactional Business Intelligence Idea Lab

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

Report which audits role delegation and revoked roles

21
Views
2
Comments

Description

Hi Community,

We are trying to audit the delegation of roles, and roles that have been revoked from users. We trying to see who completed the action and when this took place.

Report Layout example

Delegator | Employee | Role | Action (Grant/Revoked) | Date of Action

Does anyone know if this is possible and how we can achieve this?

Thanks for your assistance in advance

Use Case and Business Need

Business need the ability to audit roles which have been delegated and revoked from users as per auditing requirements to ensure users have not been granted unathourised access to roles.

Original Idea Number: d8d67b762d

1
1 votes

Submitted · Last Updated

Comments

  • Karissa-85136
    Karissa-85136 Rank 1 - Community Starter

    This is an enhancement we've been needing as well - there is an ER/Bug in metalink (ID below) related to this that was opened a couple years ago, but the status is "Suggestion Rejected"

    Bug 27187704 : WFRULEDICTIONARY AND WFUSERVACATION

  • AprilMaurer
    AprilMaurer Rank 2 - Community Beginner

    Given the heightened focus on security in the industry, it is surprising that this is not already a higher priority. Audit records should be present for Role Assignment and Areas of Responsibility. Currently there is no way to tell if a Role Assignment or Area of Responsibility has been deleted. This is a clear security gap for the client and could potentially cause a security breach.