https://community.appian.com/discussions/f/general/14119/logging-in-tomcat---appian-18-4We recently upgraded to 18.4. I am still in need of a security mechanism to ensure our production support team and administrators don&#39;t add users to groups from the Appian /design link. We would like to ensure only our Identity Management team has theen-USTelligent Community 12https://community.appian.com/thread/63945?ContentTypeID=1Thu, 10 Jan 2019 13:29:55 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:c5da8fd3-cdc8-4dc6-81e4-d50c38762bdferickpalso, what function can I use to retrieve the last modified by? Seems like the group() function doesn&#39;t have that property for some reason.<div style="clear:both;"></div>https://community.appian.com/thread/63925?ContentTypeID=1Wed, 09 Jan 2019 21:18:01 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:341fde83-b58b-4cd4-a871-8a6e3f5d2d6cerickpYeah, that is a good idea. My coworker and I were talking about doing something similar. It would require having a daily process to store the group membership information on the database and keeping track of an audit for the group membership. Without an audit, we don&#39;t know if a change occurred or not. It is a lot of work but it is a solution. I am really surprised Appian doesn&#39;t write into their logs when a group membership change occurs through the /design. You would think that is top priority in terms of security...<div style="clear:both;"></div>https://community.appian.com/thread/63924?ContentTypeID=1Wed, 09 Jan 2019 21:14:39 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:8c255abd-72a7-4c08-a8f2-a88f666e03e1Jose CavazosThis just came to my mind.<br /> <br /> What about having a list of members separately and comparing it to the members you have in the group. <br /> If they don&#39;t match you can get an email sent to you that &quot;X&quot; User was added and you can use the Last modify to retrieve who did it.<div style="clear:both;"></div>