Monitor Permissions Change Logs

Overview

Permissions change audit logs functionality within Moveworks Setup allows Admins to get a real-time view of roles & permission changes done within their org's instance.

With Permissions change audit logs, Admins can:

  1. Investigate any unintended revocations of app access for any employee
  2. Track and audit any RBAC changes done by specific App Admins or any Moveworks employee.

How to access Permissions Change Logs?

  1. Log in to Moveworks Setup.
  2. Navigate to "Audit Logs" in the left navigation menu.
  3. Select "Permissions Audit Logs" from the sub-menu of Audit Logs.

Audit Logs column details

  1. Audit ID: Unique ID corresponding to the config change
  2. Time (in UTC): Time at which config change was made. Note, this is UTC time format.
  3. Action: Represents whether a role was Added or Revoked for a specific user.
  4. Initiated By: Email of the user who made the config change. Note: If you come across [email protected] in the Initiated By column, this means the change was made by a Moveworks employee.
  5. Roles Updated For: Email of the user for which roles were updated.
  6. Role Updates: Details of Roles & Permission

Additionally, Admins can filter by date, initiated by, role updated for for narrowing down or auditing specific roles & permission changes.

FAQs

Q:How long are Permissions Change Logs in MW Setup retained for?

A: Permissions Change Logs will be retained for 60 days in Moveworks Setup.

Q: Can we export data from the Permissions Change Logs?

A: Export functionality is currently not supported.

Q: I am unable to search for a specific User from the filters?

A: Currently support of search within filters is not available. We plan to enhance the filtering capabilities in the near future.