Where can I get HSS user management information?

GrayMagellan

EPM 11.1.2.1. I must make a report (or find correspond EPM log) about all HSS user management actions performed by me (I am HSS native admin) for these actions:

- which native groups were created (or removed);

- which Active Directory users were inserted (or removed) into (from) native groups and which native groups were processed;

- etc...

I have configured Audit Configuration in HSS for all events for all applications:

Now I removed one (test) Active Directory user from one (test) native group, but when I build Security Report in HSS I don't see this information (just a lot of messages about native admin authentication events):

Madhusudhan. M

Did you check the same in HSS table also?

Thanks,

Mady

Madhusudhan. M

11.1.2 Shared Services changes ~ Oracle - Hyperion Labs

Check this blog once, you will get some idea.

Thanks,

Mady

GrayMagellan

Oh! I was not attentive enough! I have found my test remove in HSS security report. But it's not informative for me in short variant, because I don't see who I excluded from native group:

When I make a detailed report and now I can see who I excluded from group, but this format is very uncomfortable for export and next processing:

GrayMagellan

I was need go to database and work with tables directly... So I made this SQL query. It gave me more comfortable result:

SELECT

    A.STARTTIME "DATE AND TIME",

    A.USER_NAME "WHO PERFORMED",

    D.TASK_NAME "TASK PERFORMED",

    A.ARTIFACT_NAME "FIRST OBJECT",

    A.ARTIFACT_TYPE "FIRST OBJECT TYPE",

    F.ATTRIBUTE_OLD_VALUE "SECOND OBJECT OLD VALUE",

    F.ATTRIBUTE_CURR_VALUE "SECOND OBJECT NEW VALUE",

    A.STATUS "STATUS"

FROM

    SMA_AUDIT_FACT A

JOIN

    SMA_TASK_DIM D

ON

    A.TASK_ID = D.TASK_ID

JOIN

    SMA_AUDIT_ATTRIBUTE_FACT F

ON

    A.AUDIT_FACT_ID = F.AUDIT_FACT_ID

WHERE

    D.TASK_ID IN

    (

    '0000012332326d99-000c-0670-0ab2d96a',

    '0000012332326d99-0010-0670-0ab2d96a',

    '0000012332326d99-0014-0670-0ab2d96a',

    '0000012332326d99-0018-0670-0ab2d96a',

    '0000012332326d99-001c-0670-0ab2d96a',

    '0000012332326d99-0020-0670-0ab2d96a',

    '0000012332326d99-0025-0670-0ab2d96a',

    '0000012332326d99-0029-0670-0ab2d96a',

    '0000012332326d99-002d-0670-0ab2d96a',

    '0000012332326d99-0031-0670-0ab2d96a',

    '0000012332326d99-0035-0670-0ab2d96a',

    '0000012332326d99-0039-0670-0ab2d96a',

    '0000012332326d99-003d-0670-0ab2d96a',

    '0000012332326d99-0041-0670-0ab2d96a',

    '0000012332326d99-0045-0670-0ab2d96a',

    '0000012332326d99-0049-0670-0ab2d96a',

    '0000012332326d99-004d-0670-0ab2d96a',

    '0000012332326d99-0051-0670-0ab2d96a',

    '0000012332326d99-0055-0670-0ab2d96a',

    '0000012332326d99-0059-0670-0ab2d96a',

    '0000012332326d99-005d-0670-0ab2d96a',

    '0000012332326d99-0066-0670-0ab2d96a',

    '0000012332326d99-006e-0670-0ab2d96a',

    '0000012332326d99-0072-0670-0ab2d96a',

    '0000012332326d99-0076-0670-0ab2d96a',

    '0000012332326d99-007a-0670-0ab2d96a',

    '0000012332326d99-007e-0670-0ab2d96a',

    '0000012332326d99-0082-0670-0ab2d96a'

    )

ORDER BY

    A.STARTTIME DESC;

Now I will give this table to auditors and let them make their job.

GrayMagellan

Thank you for this information too!

Madhusudhan. M

Yeah, In Detailed view you can see those changes but from tables you can get it easily with script in desired format. 

Thanks,

Mady