Audit trail reports
Audit Trail reports show information on decisions that have been taken for a resource assignment. They can show why certain access exists and who authorized it. Specifically, they show resource assignments that have been approved in an access request process, reviewed in a survey, or dispensed in a Separation of Duties evaluation process.
WAT001 Decision Log for Resource Assignments
This report shows details of decisions that have affected resource assignments. The Decision Log for Resource Assignments report shows the resource and the account or identity the resource assignment is for. The report also shows audit trail for expired resource assignments. This report is grouped by resource assignment, and links to the Resource Assignment report (WEN002).
WAT001 fields
| Field | Description |
|---|---|
| Name | Full name of the system. This field links to the System details report. |
| Description | The description for the system. |
| Type | Type of the system. |
| Source | The source system the system has been imported through. |
| Classification tags | The custom classification of the systems (for example, according to their criticality). |
| Import time | The time when the data for the system was last successfully imported. |
WAT001 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
| Max. items | The maximum number of returned items. By default, this parameter is set to 100 items. Change to view more results. |
| Process type-Answer | Select from these options: All Access Request-Approve Attestation-All Attestation-Approve Attestation-Reject Initial Verdict-Approve Revoke Assignment-Reject SoD-All SoD-Block SoD-Override |
| Account | Filter on resource assignment decisions for a particular account. |
| Identity | Filter on resource assignment decisions for a particular identity. |
| Resource | Filter on resource assignment decisions for a particular resource. |
WAT002 Decision for Resource Assignment
From the Decision Log for Resource Assignment report, you can drill down to details on an individual decision. Click the Answer column in Decision Log for Resource Assignment report to navigate to the details.
WAT002 fields
| Field | Description |
|---|---|
| Identity | The identity the resource assignment is for. |
| Account | The account the resource assignment is for. |
| Resource | The resource the resource assignment is for. |
| Process type | Shows in which type of process the decision was made in. The possible options are Access Request, Attestation, Initial Verdict, Revoke Assignment, SoD |
| Decision | The decision, can be Approve, Reject or Dispensate. |
| Justification | Justification comment, if provided. |
| Approver | The user who made the decision. |
| Approver | Role The role of the user who made the decision. |
| Time | The time of the decision. |
WAT002 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
| Max. items | The maximum number of returned items. By default, this parameter is set to 100 items. Change to view more results. |
| Process type-Answer | Select from these options: All Access Request-Approve Attestation-All Attestation-Approve Attestation-Reject Initial Verdict-Approve Revoke Assignment-Reject SoD-All SoD-Block SoD-Override |
| Account | Filter on resource assignment decisions for a particular account. |
| Identity | Filter on resource assignment decisions for a particular identity. |
| Resource | Filter on resource assignment decisions for a particular resource. |