Auditing and reporting overview
The Auditing & Reporting menu groups the pages that show what happened in Privilege Secure: who accessed what, what changed in the configuration, what the system logged, and what the services wrote to their log files. Use these pages to answer audit questions, certify access, and schedule reports.
To open them, select Auditing & Reporting in the left navigation. The menu lists, in order, Access Certification, Activity Log, DB Change History, Events, Log Files, and Reporting.
Pages
| Page | Question it answers | Default range |
|---|---|---|
| Run an access certification | Who still needs the access they have, according to a reviewer? | Not applicable |
| Activity log | What sessions ran, and for how long? | Last 30 days |
| Database change history | Who changed the configuration, and when? | Last 7 days |
| Events | What did the system log? | Not applicable |
| Log files | What did each service write to its log file? | Not applicable |
| Reports and subscriptions | How are reports run, customized, and scheduled? | Last 7 days for a new report, last 30 days for a predefined report |
For a session-by-session view of live and past sessions, see the Dashboard.
Who can open the pages
| Role | Pages |
|---|---|
| Administrators | All pages |
| Users with Admin View Read Only | All pages, read-only |
| Reviewers | Access Certification, limited to the tasks assigned to them |
| Auditors with the Reporting permission | Activity Log, DB Change History, Events, Log Files, and Reporting |
An auditor whose role doesn't include the Reporting permission doesn't see the Auditing & Reporting menu.
Auditors work within the users and resources assigned to their role. For auditor permissions, see Create a custom role. To give auditors a read-only view of every administration page, see Give auditors read-only console access.
Common tasks
- Review who has access to what: Run an access certification.
- Export session history to a spreadsheet: Activity log.
- Check a recent configuration change: Database change history.
- Send a report to your inbox on a schedule: Reports and subscriptions.
- Collect logs for a support case: Log files.