Could the impersonation be added to an individual user's Login History in Core > People Finder > Access tab > View Login History?
So if I impersonate John Doe, John Doe's Login History would look like the following to show both logins and impersonations by someone:
Date Time Action User IP Address
10/1/22 7:00 am Logged In <blank> <ip address here>
10/3/22 8:00 am Impersonation Start <blank> by Danielle Keeney (367567)
10/3/22 8:15 am Impersonation End <blank> by Danielle Keeney (367567)
where the number behind my name is my user ID in the system (in case there is more than one person by the name in the system).
It would show in the end-user's individual profile if you needed to look at a single person, and it would be reportable using the existing "User Login History" object within advanced lists. The object doesn't have the Action column, but it does have the IP Address column. Having the Action would be easier to search for all impersonations, but you could do a search on the IP column where it starts with "by " to get around it.
While the login history addition won't show exactly what I did when I impersonated John Doe, but it will create a record that the impersonation was done and the timing of it.
Hi Becky, you can set it up in Core under Notifications it's in the Profile category, called Profile changes. Enable it for roles then go into your profile settings for notification preferences and opt in.
@ashcraft_k@summitcds.org - handle profile changes will show who the logged in user was that made the change - not the impersonated user if they were impersonating. So, it is always the person who actually updated it. The reason on the notifications that we bundled all the fields that changed on the profile into one, is otherwise if a user changed their address line 1, city, state, zip, mailing address flag, address type etc. you would get a notification for each field which we anticipated would make people very cranky. So, we went with here are all the fields that changed for this user in this session which seemed to make more sense, and redirect you to the whole record. It should not be sending you every profile field tracked, only those that changed.
First, I agree with the guest who said: "we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support."
Also, regarding profile change notifications: I have this set up to my email. But you don't get a targeted field that has been changed. The notification will list all the fields that are in that "container." Also, it's not possible to tell there if an actual user made the change or if an admin made the change. And it's not admins doing impersonations, they are changing settings without impersonation. I would like to be able to know clearly who made the change without having to go to the profile changes window and look it up.
Our school really needs tracking/reporting for changes made in the system. One thing we'd like to see is that User 1 impersonated User 2, and what changes were made. Basically, we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support.
Hi Priscilla, over the last several months we have made significant changes to our profile auditing, fixing a few errors, and adding auditing for relationships, emergency contacts, business and education. Do you have a specific issue that sent you looking for this idea? The only reason I hadn't closed this idea is because there are comments that request additional ideas such as logging impersonations and other core data. Please let me know if there is specific profile update you think is still missing. Thank you.
3 years this has been a feature request and still waiting for this to happen. Especially now with online learning we need to be able to see what the student is seeing to help them
This would be very helpful, in addition to profile changes it would be even better to include changes to roles (including assigning/removing users from a role and adding or removing tasks associated with a role).
It would be also helpful to include changes to report access (what users were added/removed to a given report).
It doesn't need to be fancy, just include "What changed, who changed it and when it was changed" and include the ability to sort and filter by when, who or what.
We just had an issue where someone changed our current academic year, but nobody has admitted to doing it and I would love to have a log of this type of change that is quite important!
Adding on:
Currently, the profile changes log does not record who changed the preferred address or primary parent checkmarks. That needs to be logged as well.
Could the impersonation be added to an individual user's Login History in Core > People Finder > Access tab > View Login History?
So if I impersonate John Doe, John Doe's Login History would look like the following to show both logins and impersonations by someone:
Date Time Action User IP Address
10/1/22 7:00 am Logged In <blank> <ip address here>
10/3/22 8:00 am Impersonation Start <blank> by Danielle Keeney (367567)
10/3/22 8:15 am Impersonation End <blank> by Danielle Keeney (367567)
where the number behind my name is my user ID in the system (in case there is more than one person by the name in the system).
It would show in the end-user's individual profile if you needed to look at a single person, and it would be reportable using the existing "User Login History" object within advanced lists. The object doesn't have the Action column, but it does have the IP Address column. Having the Action would be easier to search for all impersonations, but you could do a search on the IP column where it starts with "by " to get around it.
While the login history addition won't show exactly what I did when I impersonated John Doe, but it will create a record that the impersonation was done and the timing of it.
Thanks Angela! Appreciate the info! Becky
Hi Becky, you can set it up in Core under Notifications it's in the Profile category, called Profile changes. Enable it for roles then go into your profile settings for notification preferences and opt in.
I admit I am very late to the party, but how would I set it up to email me when changes were made in a profile?
@ashcraft_k@summitcds.org - handle profile changes will show who the logged in user was that made the change - not the impersonated user if they were impersonating. So, it is always the person who actually updated it. The reason on the notifications that we bundled all the fields that changed on the profile into one, is otherwise if a user changed their address line 1, city, state, zip, mailing address flag, address type etc. you would get a notification for each field which we anticipated would make people very cranky. So, we went with here are all the fields that changed for this user in this session which seemed to make more sense, and redirect you to the whole record. It should not be sending you every profile field tracked, only those that changed.
First, I agree with the guest who said: "we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support."
Also, regarding profile change notifications: I have this set up to my email. But you don't get a targeted field that has been changed. The notification will list all the fields that are in that "container." Also, it's not possible to tell there if an actual user made the change or if an admin made the change. And it's not admins doing impersonations, they are changing settings without impersonation. I would like to be able to know clearly who made the change without having to go to the profile changes window and look it up.
Our school really needs tracking/reporting for changes made in the system. One thing we'd like to see is that User 1 impersonated User 2, and what changes were made. Basically, we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support.
See this idea for voting up a log of impersonations: https://blackbaud.aha.io/ideas/ideas/K12CO-I-1240
Hi Priscilla, over the last several months we have made significant changes to our profile auditing, fixing a few errors, and adding auditing for relationships, emergency contacts, business and education. Do you have a specific issue that sent you looking for this idea? The only reason I hadn't closed this idea is because there are comments that request additional ideas such as logging impersonations and other core data. Please let me know if there is specific profile update you think is still missing. Thank you.
3 years this has been a feature request and still waiting for this to happen. Especially now with online learning we need to be able to see what the student is seeing to help them
Yes - a robust, accurate tracking log is really important - for accountability, and more!
Add logging for impersonations as well. Who did the impersonating, who they impersonated, and what tasks they did while impersonating.
This would be very helpful, in addition to profile changes it would be even better to include changes to roles (including assigning/removing users from a role and adding or removing tasks associated with a role).
It would be also helpful to include changes to report access (what users were added/removed to a given report).
It doesn't need to be fancy, just include "What changed, who changed it and when it was changed" and include the ability to sort and filter by when, who or what.
We just had an issue where someone changed our current academic year, but nobody has admitted to doing it and I would love to have a log of this type of change that is quite important!
This suggestion should be part of the same scope, Add change Log for Core Changes for Auditing Purposes.
This would be extremely helpful!