Forum Stats

  • 3,817,098 Users
  • 2,259,276 Discussions
  • 7,893,655 Comments

Discussions

Where can I get HSS user management information?

GrayMagellan
GrayMagellan Member Posts: 34 Blue Ribbon
edited Dec 22, 2017 5:05AM in EPM System Infrastructure

EPM 11.1.2.1. I must make a report (or find correspond EPM log) about all HSS user management actions performed by me (I am HSS native admin) for these actions:

- which native groups were created (or removed);

- which Active Directory users were inserted (or removed) into (from) native groups and which native groups were processed;

- etc...

I have configured Audit Configuration in HSS for all events for all applications:

2017-12-22_110608.png

Now I removed one (test) Active Directory user from one (test) native group, but when I build Security Report in HSS I don't see this information (just a lot of messages about native admin authentication events):

2017-12-22_112520.png

Tagged:

Answers

  • Madhusudhan. M
    Madhusudhan. M Business Analyst Member Posts: 1,904 Silver Trophy
    edited Dec 22, 2017 3:54AM

    Did you check the same in HSS table also?

    Thanks,

    Mady

  • Madhusudhan. M
    Madhusudhan. M Business Analyst Member Posts: 1,904 Silver Trophy
    edited Dec 22, 2017 3:59AM

    11.1.2 Shared Services changes ~ Oracle - Hyperion Labs

    Check this blog once, you will get some idea.

    Thanks,

    Mady

    GrayMagellan
  • GrayMagellan
    GrayMagellan Member Posts: 34 Blue Ribbon
    edited Dec 22, 2017 4:53AM

    Oh! I was not attentive enough! I have found my test remove in HSS security report. But it's not informative for me in short variant, because I don't see who I excluded from native group:

    2017-12-22_123958.png

    When I make a detailed report and now I can see who I excluded from group, but this format is very uncomfortable for export and next processing:

    2017-12-22_124434.png

  • GrayMagellan
    GrayMagellan Member Posts: 34 Blue Ribbon
    edited Dec 22, 2017 4:51AM

    I was need go to database and work with tables directly... So I made this SQL query. It gave me more comfortable result:

    SELECT

        A.STARTTIME "DATE AND TIME",

        A.USER_NAME "WHO PERFORMED",

        D.TASK_NAME "TASK PERFORMED",

        A.ARTIFACT_NAME "FIRST OBJECT",

        A.ARTIFACT_TYPE "FIRST OBJECT TYPE",

        F.ATTRIBUTE_OLD_VALUE "SECOND OBJECT OLD VALUE",

        F.ATTRIBUTE_CURR_VALUE "SECOND OBJECT NEW VALUE",

        A.STATUS "STATUS"

    FROM

        SMA_AUDIT_FACT A

    JOIN

        SMA_TASK_DIM D

    ON

        A.TASK_ID = D.TASK_ID

    JOIN

        SMA_AUDIT_ATTRIBUTE_FACT F

    ON

        A.AUDIT_FACT_ID = F.AUDIT_FACT_ID

    WHERE

        D.TASK_ID IN

        (

        '0000012332326d99-000c-0670-0ab2d96a',

        '0000012332326d99-0010-0670-0ab2d96a',

        '0000012332326d99-0014-0670-0ab2d96a',

        '0000012332326d99-0018-0670-0ab2d96a',

        '0000012332326d99-001c-0670-0ab2d96a',

        '0000012332326d99-0020-0670-0ab2d96a',

        '0000012332326d99-0025-0670-0ab2d96a',

        '0000012332326d99-0029-0670-0ab2d96a',

        '0000012332326d99-002d-0670-0ab2d96a',

        '0000012332326d99-0031-0670-0ab2d96a',

        '0000012332326d99-0035-0670-0ab2d96a',

        '0000012332326d99-0039-0670-0ab2d96a',

        '0000012332326d99-003d-0670-0ab2d96a',

        '0000012332326d99-0041-0670-0ab2d96a',

        '0000012332326d99-0045-0670-0ab2d96a',

        '0000012332326d99-0049-0670-0ab2d96a',

        '0000012332326d99-004d-0670-0ab2d96a',

        '0000012332326d99-0051-0670-0ab2d96a',

        '0000012332326d99-0055-0670-0ab2d96a',

        '0000012332326d99-0059-0670-0ab2d96a',

        '0000012332326d99-005d-0670-0ab2d96a',

        '0000012332326d99-0066-0670-0ab2d96a',

        '0000012332326d99-006e-0670-0ab2d96a',

        '0000012332326d99-0072-0670-0ab2d96a',

        '0000012332326d99-0076-0670-0ab2d96a',

        '0000012332326d99-007a-0670-0ab2d96a',

        '0000012332326d99-007e-0670-0ab2d96a',

        '0000012332326d99-0082-0670-0ab2d96a'

        )

    ORDER BY

        A.STARTTIME DESC;

    Now I will give this table to auditors and let them make their job.

  • GrayMagellan
    GrayMagellan Member Posts: 34 Blue Ribbon
    edited Dec 22, 2017 4:50AM

    Thank you for this information too!

  • Madhusudhan. M
    Madhusudhan. M Business Analyst Member Posts: 1,904 Silver Trophy
    edited Dec 22, 2017 5:05AM

    Yeah, In Detailed view you can see those changes but from tables you can get it easily with script in desired format. 

    Thanks,

    Mady

This discussion has been closed.