CONFIG_ROLE Audit Event

Overview

The CONFIG_ROLE audit event is generated when configuring role information (anything under users/groups) add/remove/edit a role, etc).

Properties:

• ParamNameValPairs must be a name;;value pair (where name and value are separated by the delimiter ;;) separated by + (if more than one name;;value pair) of config params changed

Examples

Adding Group Member

Use PKI CLI to add a member to a group:

$ pki -n caadmin ca-group-member-add Administrators testuser

The server will generate the following logs:

[AuditEvent=CONFIG_ROLE][SubjectID=caadmin][Outcome=Success][ParamNameValPairs=S
cope;;members+Operation;;OP_ADD+Resource;;Administrators+user;;testuser] role co
nfiguration parameter(s) change