9.1.2 Creating Reports for Administrator Activities

This report displays audit logs of all administration console activities performed using the Privileged Access Manager user interface, command line, and the API.

To create a report for administrator activities, perform the following steps:

  1. On the home page of the console, click Reports > Create Report.

  2. Select Administrator Activities.

  3. Click Next.

  4. Specify the following details:

    Report Name: Specify a name for the report.

    Description: (Optional) Describe the purpose of the report.

  5. Click Next.

  6. (Optional) Add the required permission in Read and Update fields.

    NOTE:To add these permissions:

    • Define them using Users > + Create Group > Permissions > Custom Permissions pane with Module and Role.

    • Add the user to whom these permissions apply, using the following procedure:

      1. On the home page of the console, click Users > Users & Groups. Select the group from the left pane, click the edit icon.

      2. In the General pane, select the details you want to modify. You cannot modify the Group Name field.

      3. In the Members section, select to add or remove the users you want to be members of this group.

    You can also create a separate user group with these permissions.

    To assign these roles to a group, see Audit Reports Permissions.

  7. Click Next.

  8. In the Filters tab, specify the following details:

    • Duration: Select the Duration. The default duration that is displayed is the Last 3 Months. When you click the Last 3 Months, a calendar is displayed for you to select the exact duration.

    • Databases: Select the database for which you want to create the report. By default all the databases are selected. You can view the rollover time for each database based on the audit settings you have specified in Reports > Settings. In this setting you have specified the time interval for rolling over the audit file against each Audit DB Name. If the time interval is always reached before the maximum size is reached, the time interval is used for rollover and the size restriction is ignored.

    • Filters: Filters vary based on the report type. You can combine filters with AND logic or OR logic.

      • AND combines two criteria and displays the matching report data only if both the criteria are matched.

      • OR combines two criteria and finds a matching if either of the criterion is matched.

        Select Criteria from the list. You can also Add Criteria or Add Group, if necessary. For more information, see Filtering the Viewable Records.

  9. Click Preview to confirm if the information is correct. Preview takes you to the Administrator Activities details page.

  10. Click Save. You can export the details using Export to CSV.