Report on data user views during a session
Description of Issue
- Log of records viewed by a user/session Is it possible to report on any data a user or session has viewed
- Example, If user jsmith logs in, views employee data for employee 123, 234, 345 can we generate a log of all data that would have been exposed to the end users session? We need a way to understand data and PII exposure if an account has accessed un-authorized information.
Context
Security Permissions
Cause
Resolution
There is no audit that will show every record searched/viewed by a user. These reports can be used to compile some user activity data.
Ultimately, it is advised that the user permissions should be limited to the data necessary to complete job functions. Â
Additional Information