cancel
Showing results for 
Search instead for 
Did you mean: 

User change log report in Console

Former Member
0 Kudos

Dear Experts,

We have one audit requirement. We need u2018change logu2019 for useru2019s role modification.

I checked in console logs. I found the log for delete user & modify user. In case of delete user it is giving details which are the users had been deleted. But in case of role modify in user, it is not giving which are the users had been modified or which newly role had been assign.

We need change log report from MDM console.

Regards,

Gaurang

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Hi Gaurang,

Please find section 4.2 of the document below:

http://help.sap.com/saphelp_mdm71/helpdata/en/4d/bf9ac206ec288de10000000a42189e/MDMSecurity71.pdf

Regards,

Neethu Joy

Former Member
0 Kudos

Hi Neethu,

My MDM version is 7.1 SP06

It appears to be helpful document.

Can you pls elaborate below paragraph mention in doc.

<repositoryAdmin><role action="modify" id="2"><functionRight>

<function>16777216</function><access>1</access>

</functionRight></role></repositoryAdmin>

In this case the role with ID 2 has been modified. The authorization with ID 16777216 (see function ID map below) has been set to 1 (Execute).

How to identify which user & which roles has been change from this log description.

Regards,

Gaurang

Former Member
0 Kudos

Hi Gaurang,

<repositoryAdmin><role action="modify" id="2"><functionRight>

<function>16777216</function><access>1</access>

</functionRight></role></repositoryAdmin>

In this case the role with ID 2 has been modified. The authorization with ID 16777216 (see function ID map below) has been set to 1 (Execute).

Below this section there is one table with function ID and Description.

Here in case of change in functions Tab

<access>X</access> will tell u if the function is set to Execute or None:

Legends:

Execute:1

None:0

and which function u will get from <function>16777216</function>

For decoding the function id there is a table given in section 4.2

and if there is any change in the table and fields tab:

then log will be as follows:

<repositoryAdmin><role action="modify" id="5"><objectRight> <object>1</object><type>0</type><access>2</access>

</objectRight></role></repositoryAdmin>

where access will tell u if its Read Write(3) or Read Only(2)

Which table u will get from <object>ID</object>

Now this role ID and Table ID is the Index values which u can get using API.

Try to write an api which will extract the Table ID ,Field ID and Role ID information in an Excel this u can use as reference the decode the Log.

Regards,

Neethu Joy

Former Member
0 Kudos

Hi Neethu,

It appears to be giving u2018what are the change done in users roleu2019. My requirement is to find out which are the user has undergone changes in their roles through console Log

Is there a tool available with SAP which will help us to decode this logs accordingly?

Regards,

Gaurang

Former Member
0 Kudos

Hi Gauranh,

Unfortunatley MDM Logs do not capture Role change for Users.

Regards,

Neethu Jou

Former Member
0 Kudos

Hi Neethu,

Thanx for the valuable information.

Closing thread.

Rgds,

Gaurang