is there a way to track User Addition and removal from groups

Hi,

it's an interesting use case.

First thing to ask is why? What's the use case for this?

Also how are the user added or removed from the system. LDAP? SSO Groups? Smart Service? Manually?

In general you would have to track it using the Object Rolemaps (https://docs.appian.com/suite/help/22.3/Logging.html#auditing) but it's not a simple solution, probably knowing the use case something simpler could be found

Hi,

it's an interesting use case.

First thing to ask is why? What's the use case for this?

Also how are the user added or removed from the system. LDAP? SSO Groups? Smart Service? Manually?

In general you would have to track it using the Object Rolemaps (https://docs.appian.com/suite/help/22.3/Logging.html#auditing) but it's not a simple solution, probably knowing the use case something simpler could be found

Thanks,

we have a requirement to audit the users being added and removed from groups,

users can be added manually or using smart services.

What exactly do you mean "added manually"?  Do you mean that some users have access to /designer and are directly editing group membership from there?

Regarding any place in your system where group access is managed programmatically, i believe the best option as always is to log such changes into a DB table you implement that will satisfy your requirements.

yeah some users have access and can directly edit group membership

Ok.. i'm not sure why that would be generally acceptable in a production system, but to confirm, there's no way to systematically track that, that I know of.  IMHO all end-user-facing group management should be done through process models (etc).

Thanks Mike,

This helps