Logging User Role Actions/Changes

additionally, the logs for when i make an user to an admin looks like this:


you cannot see what was changed.

Would be very helpful, if there were more information, like what was changed, for example:

User XY changed User YX from Read-Only to Administrator + Time

Hello Luke,

Thank you for your suggestions. From what I understood, your concern is mainly to know if a user is updated as administrator, am I right ? We could probably add information in logs and try to add notification if that property is added. I just want to be sure that your need is mainly that property and not any property. Is it important for you to know exactly what has been updated in the user other than the user type ? (name, email, language, etc.)

We have notifications already in place that could help for now. I don't think it is exactly what you want, but I let you know in case it could help. If you go in Administration > Notifications > Subscriptions, you should be able to create a subscription and receive a notification for all users modified. Here is an example :


I will create a ticket on our side and see what could be done for your request.

Best regards,

Hi Francois,
yes, mainly i want to receive an alert via the subscriptions, when a user is made to administrator.
Best would be, if there is an extra filter for this special property.
For our Usecases, it is not important, when email etc. changes, as these values are coming from AD.
But i cannot monitor atm what is changed with the admins.

I already tried the User Modified Subscription, but that would generate a mail within every user change.
Also, as shown above, from the logs and the mails, you cannot exactly see what has changed. There is no "made to admin" in that logs

Thank you for your work and
Kind Regards
luke

Hi Luke,

Thank you for your answer. I understand your need, we will see if we could add a filter on the user type property. With a such filter, you could configure a notification on all users with the user type "Administrator". From what I understood, it would fill your need. I don't have an ETA for now, but we will post back here once it will be done.

Best regards,

Hello Luke,

We released a new version, 2023.2.8.0 earlier this week and it contains an improvement for your request. Now, you will be able to create notification and add a filter based on user type (administrator/user). So you should be able to be notified when an administrator user is modified or if a user is granted as an administrator.




We also improved our log to at least indicate clearly if the user has been granted as administrator because we understand that it could be useful to know that.


Let us know if that works for you.

Best regards,

Hi François,
that sounds great, i will update soon and then let you know if it works for us.
Thank you
Kind Regards
Luke