Issuing Audit Messages Audit Engine

Auditing 6-5 You configure the audit level in the System Configuration part of the Advanced Administration by using the XL.UserProfileAuditDataCollection system property. This section discusses the following topics: ■ Capture of User Profile Audit Data ■ Storage of Snapshots ■ Trigger for Taking Snapshots

6.3.1.1 Capture of User Profile Audit Data

Each time a user profile changes, Oracle Identity Manager takes a snapshot of the user profile and stores the snapshot in an audit table in the database. A snapshot is also generated when there is a change in a user profile that must be audited, even if an initial snapshot is missing. The current snapshot is treated as the initial snapshot. The following are the components of a user profile and the tables that store these components: ■ User Record: Contains the USR table, including all User Defined Fields UDFs. The USR table stores user attributes. When you create a user, Oracle Identity Manager adds an entry to this table. ■ User Role Membership: Contains the RUL, UGP, and USG tables, as listed in Table 6–1 . ■ User Policy Profile: Contains the following tables: See Also: Audit Levels on page 6-3 for more information about audit levels System Properties in Oracle Identity Manager in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager for information about the XL.UserProfileAuditDataCollection system property Note: For more information about the User Profile tables, such as the column names and how to use them, refer to the schema documentation provided with Oracle Identity Manager. Table 6–1 User Group Membership Tables Table Name Description RUL Stores rule definitions. UGP Defines groups and roles in the system. USG Defines which users are in which groups and lists priorities for the users in a specific group. Oracle Identity Manager might use these priorities when making task assignments for a group. For example, a process task might be assigned to the user having highest priority. In addition, if a rolegroup is granted through a rule, then it lists the specific rule.