We currently have a security compliance problem because the security team doesn't like the fact that the Appian production support team has access to remove/add roles to business users through the designer. They want only for the Identity Management team to do so which they already have the option to do so from an application we built for them.
Since we can't remove the option to manage users from System admins, my second thought was: does Appian keeps a log every time a user gets added or removed from a specific group? If so, we could build a simple app that reads from that log and that way the security team has access to it.
Question: does Appian currently do that? We are on 17.3 currently.
Discussion posts and replies are publicly visible