Better auditing / tracking for profile changes and user creation

I need more reliable/accurate tracking for profile changes and user creation. Who did it, and when.

  • Deleted User
  • Jan 27 2017
  • Implemented
  • Attach files
  • Kristofer Thurston commented
    2 Dec, 2022 05:29pm

    Adding on:


    Currently, the profile changes log does not record who changed the preferred address or primary parent checkmarks. That needs to be logged as well.



  • Danielle Keeney commented
    3 Oct, 2022 12:04pm

    Could the impersonation be added to an individual user's Login History in Core > People Finder > Access tab > View Login History?


    So if I impersonate John Doe, John Doe's Login History would look like the following to show both logins and impersonations by someone:

    Date Time Action User IP Address

    10/1/22 7:00 am Logged In <blank> <ip address here>

    10/3/22 8:00 am Impersonation Start <blank> by Danielle Keeney (367567)

    10/3/22 8:15 am Impersonation End <blank> by Danielle Keeney (367567)


    where the number behind my name is my user ID in the system (in case there is more than one person by the name in the system).


    It would show in the end-user's individual profile if you needed to look at a single person, and it would be reportable using the existing "User Login History" object within advanced lists. The object doesn't have the Action column, but it does have the IP Address column. Having the Action would be easier to search for all impersonations, but you could do a search on the IP column where it starts with "by " to get around it.


    While the login history addition won't show exactly what I did when I impersonated John Doe, but it will create a record that the impersonation was done and the timing of it.

  • Becky Jones commented
    28 May, 2021 07:04pm

    Thanks Angela! Appreciate the info! Becky

  • Angela Addison commented
    28 May, 2021 06:45pm

    Hi Becky, you can set it up in Core under Notifications it's in the Profile category, called Profile changes. Enable it for roles then go into your profile settings for notification preferences and opt in.

  • Becky Jones commented
    28 May, 2021 05:15pm

    I admit I am very late to the party, but how would I set it up to email me when changes were made in a profile?

  • Angela Addison commented
    28 May, 2021 05:08pm

    @ashcraft_k@summitcds.org - handle profile changes will show who the logged in user was that made the change - not the impersonated user if they were impersonating. So, it is always the person who actually updated it. The reason on the notifications that we bundled all the fields that changed on the profile into one, is otherwise if a user changed their address line 1, city, state, zip, mailing address flag, address type etc. you would get a notification for each field which we anticipated would make people very cranky. So, we went with here are all the fields that changed for this user in this session which seemed to make more sense, and redirect you to the whole record. It should not be sending you every profile field tracked, only those that changed.

  • Guest commented
    27 May, 2021 03:49pm

    First, I agree with the guest who said: "we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support."


    Also, regarding profile change notifications: I have this set up to my email. But you don't get a targeted field that has been changed. The notification will list all the fields that are in that "container." Also, it's not possible to tell there if an actual user made the change or if an admin made the change. And it's not admins doing impersonations, they are changing settings without impersonation. I would like to be able to know clearly who made the change without having to go to the profile changes window and look it up.

  • Nicole Ramsey commented
    11 Mar, 2021 02:39pm

    Our school really needs tracking/reporting for changes made in the system. One thing we'd like to see is that User 1 impersonated User 2, and what changes were made. Basically, we would like to be able to see who is doing what. We would love for this to be a report that we can access without having to contact support.

  • Janet Wittenberg commented
    3 Sep, 2020 01:28pm

    See this idea for voting up a log of impersonations: https://blackbaud.aha.io/ideas/ideas/K12CO-I-1240

  • Janet Wittenberg commented
    3 Sep, 2020 01:24pm

    Hi Priscilla, over the last several months we have made significant changes to our profile auditing, fixing a few errors, and adding auditing for relationships, emergency contacts, business and education. Do you have a specific issue that sent you looking for this idea? The only reason I hadn't closed this idea is because there are comments that request additional ideas such as logging impersonations and other core data. Please let me know if there is specific profile update you think is still missing. Thank you.

  • Priscilla Lopez commented
    3 Sep, 2020 12:03am

    3 years this has been a feature request and still waiting for this to happen. Especially now with online learning we need to be able to see what the student is seeing to help them

  • lauren marcus eisenberg commented
    8 Jan, 2020 03:52am

    Yes - a robust, accurate tracking log is really important - for accountability, and more!

  • Carolyn Stevens commented
    13 Mar, 2019 11:26am

    Add logging for impersonations as well. Who did the impersonating, who they impersonated, and what tasks they did while impersonating.

  • Gregg commented
    30 Jul, 2018 08:13pm

    This would be very helpful, in addition to profile changes it would be even better to include changes to roles (including assigning/removing users from a role and adding or removing tasks associated with a role).

    It would be also helpful to include changes to report access (what users were added/removed to a given report).

    It doesn't need to be fancy, just include "What changed, who changed it and when it was changed" and include the ability to sort and filter by when, who or what.

     

  • Audra Harris commented
    28 Jun, 2017 06:40pm

    We just had an issue where someone changed our current academic year, but nobody has admitted to doing it and I would love to have a log of this type of change that is quite important! 

  • Jonathan Tepper commented
    1 May, 2017 06:23pm

    This suggestion should be part of the same scope, Add change Log for Core Changes for Auditing Purposes

  • M.J. Galat commented
    23 Mar, 2017 07:09pm

    This would be extremely helpful!

  • +67