Better auditing / tracking for profile changes and user creation

I need more reliable/accurate tracking for profile changes and user creation. Who did it, and when.

  • Deleted User
  • Jan 27 2017
  • Implemented
  • Attach files
  • Kristofer Thurston commented
    December 02, 2022 17:29

    Adding on:


    Currently, the profile changes log does not record who changed the preferred address or primary parent checkmarks. That needs to be logged as well.



  • Danielle Keeney commented
    October 03, 2022 12:04

    Could the impersonation be added to an individual user's Login History in Core > People Finder > Access tab > View Login History?


    So if I impersonate John Doe, John Doe's Login History would look like the following to show both logins and impersonations by someone:

    Date Time Action User IP Address

    10/1/22 7:00 am Logged In <blank> <ip address here>

    10/3/22 8:00 am Impersonation Start <blank> by Danielle Keeney (367567)

    10/3/22 8:15 am Impersonation End <blank> by Danielle Keeney (367567)


    where the number behind my name is my user ID in the system (in case there is more than one person by the name in the system).


    It would show in the end-user's individual profile if you needed to look at a single person, and it would be reportable using the existing "User Login History" object within advanced lists. The object doesn't have the Action column, but it does have the IP Address column. Having the Action would be easier to search for all impersonations, but you could do a search on the IP column where it starts with "by " to get around it.


    While the login history addition won't show exactly what I did when I impersonated John Doe, but it will create a record that the impersonation was done and the timing of it.

  • Becky Jones commented
    May 28, 2021 19:04

    Thanks Angela! Appreciate the info! Becky

  • Angela Addison commented
    May 28, 2021 18:45

    Hi Becky, you can set it up in Core under Notifications it's in the Profile category, called Profile changes. Enable it for roles then go into your profile settings for notification preferences and opt in.

  • Becky Jones commented
    May 28, 2021 17:15

    I admit I am very late to the party, but how would I set it up to email me when changes were made in a profile?

  • Angela Addison commented
    May 28, 2021 17:08

    @ashcraft_k@summitcds.org - handle profile changes will show who the logged in user was that made the change - not the impersonated user if they were impersonating. So, it is always the person who actually updated it. The reason on the notifications that we bundled all the fields that changed on the profile into one, is otherwise if a user changed their address line 1, city, state, zip, mailing address flag, address type etc. you would get a notification for each field which we anticipated would make people very cranky. So, we went with here are all the fields that changed for this user in this session which seemed to make more sense, and redirect you to the whole record. It should not be sending you every profile field tracked, only those that changed.

  • Guest commented
    May 27, 2021 15:49

    First, I agree with the guest who said: "we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support."


    Also, regarding profile change notifications: I have this set up to my email. But you don't get a targeted field that has been changed. The notification will list all the fields that are in that "container." Also, it's not possible to tell there if an actual user made the change or if an admin made the change. And it's not admins doing impersonations, they are changing settings without impersonation. I would like to be able to know clearly who made the change without having to go to the profile changes window and look it up.

  • Nicole Ramsey commented
    March 11, 2021 14:39

    Our school really needs tracking/reporting for changes made in the system. One thing we'd like to see is that User 1 impersonated User 2, and what changes were made. Basically, we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support.

  • Janet Wittenberg commented
    September 03, 2020 13:28

    See this idea for voting up a log of impersonations: https://blackbaud.aha.io/ideas/ideas/K12CO-I-1240

  • Janet Wittenberg commented
    September 03, 2020 13:24

    Hi Priscilla, over the last several months we have made significant changes to our profile auditing, fixing a few errors, and adding auditing for relationships, emergency contacts, business and education. Do you have a specific issue that sent you looking for this idea? The only reason I hadn't closed this idea is because there are comments that request additional ideas such as logging impersonations and other core data. Please let me know if there is specific profile update you think is still missing. Thank you.

  • Priscilla Lopez commented
    September 03, 2020 00:03

    3 years this has been a feature request and still waiting for this to happen. Especially now with online learning we need to be able to see what the student is seeing to help them

  • lauren marcus eisenberg commented
    January 08, 2020 03:52

    Yes - a robust, accurate tracking log is really important - for accountability, and more!

  • Carolyn Stevens commented
    March 13, 2019 11:26

    Add logging for impersonations as well. Who did the impersonating, who they impersonated, and what tasks they did while impersonating.

  • Gregg commented
    July 30, 2018 20:13

    This would be very helpful, in addition to profile changes it would be even better to include changes to roles (including assigning/removing users from a role and adding or removing tasks associated with a role).

    It would be also helpful to include changes to report access (what users were added/removed to a given report).

    It doesn't need to be fancy, just include "What changed, who changed it and when it was changed" and include the ability to sort and filter by when, who or what.

     

  • Audra Harris commented
    June 28, 2017 18:40

    We just had an issue where someone changed our current academic year, but nobody has admitted to doing it and I would love to have a log of this type of change that is quite important! 

  • Jonathan Tepper commented
    May 01, 2017 18:23

    This suggestion should be part of the same scope, Add change Log for Core Changes for Auditing Purposes

  • M.J. Galat commented
    March 23, 2017 19:09

    This would be extremely helpful!

  • +67