User Audit Log for QPR Foundation Server

Selected operations performed in QPR Foundation Server can be recorded into a log file called "FoundationServerUserAudit.txt". If logging is enabled, the log file is generated to the "Audit" folder under the log folder that can be defined in the Server log settings of the Common section in the QPR Configuration Manager utility. To enable logging, launch QPR Configuration Manager, select Server log settings from the Common section, and select Basic logging enabled or Full logging enabled from the User audit log settings for QPR Foundation Server. By default, the logging is off.

The changes audited include the following QPR Foundation Server operations:

•Changing the product permissions method

•Changing product permissions (user or group specific)

•Adding or deleting users and groups (includes manual user import with QPR User Management System Client and synchronization with AD or LDAP)

•Changing user or group licenses

The Structure of the Log File

The fields of the log file are separated with tabulators. Each row contains a separate transaction made for a particular user or a group.

The log file includes the following data:

Field	Format or value	Description
TIME	<hh>:<mm>:<ss>	Time stamp when the transaction is made
DATE	<mm>/<dd>/<yy>	Time stamp when the transaction is made
USER LOGIN	<user's login name>	Login name for the user performing the transaction
USER NAME	<user's real name>	Full name of the user performing the transaction
OPERATION	•Grant/Revoke for permissions •Add/Delete for objects	Single operation performed
TARGET USER	<targeted user's name>	User object against whom the operation is performed
TARGET GROUP	<targeted group's name>	Group object against whom the operation is performed
PRODUCT	Licenses: •MEU: QPR Metrics User •MEV: QPR Metrics Viewer •EAU: QPR EnterpriseArchitect User •PDU: QPR ProcessDesigner User •MOV: QPR Modeling Viewer Product rights: •ME: QPR Metrics •MO: QPR Modeling •PORTAL: QPR Portal •UMS: QPR User Management	Product object or license against which the operation is performed
PERMISSION	•Basic/Administrate for MO and ME •View/Update/Administrate for PORTAL and UMS	Changed product permission
PRODUCT PERMISSION METHOD	•Inherit From Group •Use System Administrator •Use User Specific	Changed product permission method

If the full logging option is selected and the operation is made for a group to modify group specific permissions, separate log entries for each user (member of the group) are written to the log file. If the user group management method is synchronized with NT or LDAP, the 'LOGIN' is 'system' and the "Grant User Permissions" lines are written only if full logging is selected, since the user uses the group's rights.

Note that the user's group synchronization is done only when the user logs in to the system and the audit log reflects the current situation in the User Management System database, not necessarily the situation in NT or LDAP. Thus, the audit log may contain information that is not up-to-date but the information is automatically updated the next time the user logs in since the user is at that point removed from the old group(s) and added to the new one(s) and the audit log entries are written for this change.

Example Log File Contents

TIME	DATE	USER LOGIN	USER NAME	OPERATION	TARGET USER	TARGET GROUP	PRODUCT	PERMISSION	PRODUCT PERMISSION METHOD
16:00:42	11/19/07	qpr	Demo User	Add User	new user	-	-	-	-
16:00:42	11/19/07	qpr	Demo User	Grant Product Method	new user	-	-	-	Use User Specific
16:00:42	11/19/07	qpr	Demo User	Grant User Permissions	new user	-	PORTAL	Administrate	-
16:00:42	11/19/07	qpr	Demo User	Grant User Permissions	new user	-	MO	Basic	-

Help URL: http://www.yourdomain.com/help/index.html?audit_log_for_qpr_user_managem.htm

User Audit Log for QPR Foundation Server				Audit_Log_for_QPR_User_Managem Dear Support Staff,
User Audit Log for QPR Foundation Server