Permissions to View Logs

To provide access to logging information, you need to grant users appropriate permissions with the help of Security Roles.

To allow viewing all operations performed in Adaxes (the General Service Log), you need to delegate the Read General Service Log permission. The permission is available for the ServiceLog object type only, and to take effect, it should be assigned on Configuration Objects.

To allow viewing logging information for operations performed on specific objects (Management History) or operations initiated by specific users (Management Activity), the permission called Read Logging Information should be delegated. This permission can be delegated on specific resources, such as organizational units, containers, groups, Business Units or entire domains, thus allowing users to view the Management Activity and History only for objects within the scope of these resources. Assigning the permission over Configuration Objects allows you to grant the permission to view the Management History for Adaxes Configuration Objects (such as, for example, Business Rules or Security Roles) and the activity history of Scheduled Tasks.

The following built-in Security Roles can facilitate delegation of permissions to view logging information:

Service Log Inspector - allows viewing the General Service Log. To take effect, the Role must be assigned on Configuration Objects.
Super Manager - allows viewing the Management History of the objects and the Management Activity of the users included in the Role's Activity Scope. When assigned to All Objects or Configuration Objects, also allows viewing the General Service Log.
User Self-Service - delegates permissions to view own logging information to all users. It means that users can view the operations they perform and track how their user accounts are managed.