is there a way to track User Addition and removal from groups

RE: is there a way to track User Addition and removal from groups

soujanya B — Thu, 14 Dec 2023 18:44:07 GMT

Did you achieve this ?

RE: is there a way to track User Addition and removal from groups

jayanths573114 — Thu, 15 Sep 2022 09:31:46 GMT

Thanks Mike,

This helps

RE: is there a way to track User Addition and removal from groups

Mike Schmitt — Wed, 14 Sep 2022 21:48:50 GMT

Ok.. i'm not sure why that would be generally acceptable in a production system, but to confirm, there's no way to systematically track that, that I know of. IMHO all end-user-facing group management should be done through process models (etc).

RE: is there a way to track User Addition and removal from groups

jayanths573114 — Wed, 14 Sep 2022 18:55:09 GMT

yeah some users have access and can directly edit group membership

RE: is there a way to track User Addition and removal from groups

Mike Schmitt — Wed, 14 Sep 2022 18:45:24 GMT

What exactly do you mean "added manually"? Do you mean that some users have access to /designer and are directly editing group membership from there?

Regarding any place in your system where group access is managed programmatically, i believe the best option as always is to log such changes into a DB table you implement that will satisfy your requirements.

RE: is there a way to track User Addition and removal from groups

jayanths573114 — Wed, 14 Sep 2022 18:08:55 GMT

Thanks,

we have a requirement to audit the users being added and removed from groups,

users can be added manually or using smart services.

RE: is there a way to track User Addition and removal from groups

Gabriele Camilli — Wed, 14 Sep 2022 15:45:19 GMT

Hi,

it's an interesting use case.

First thing to ask is why? What's the use case for this?

Also how are the user added or removed from the system. LDAP? SSO Groups? Smart Service? Manually?

In general you would have to track it using the Object Rolemaps (https://docs.appian.com/suite/help/22.3/Logging.html#auditing) but it's not a simple solution, probably knowing the use case something simpler could be found