cancel
Showing results for 
Search instead for 
Did you mean: 

Tracking when a user is added or removed from a group

Joe_Pineda
Star Collaborator
Star Collaborator

In the his.securitylog table, I can see when a user logs on or off a specific client, when an admin creates or deletes a user, when an admin changes a user's password... But I don't see when an admin adds or removes a user to/from a group.

Is this not being tracked? Does anyone know of a way to do this via sql query?

Thanks in advance,

Joe

1 REPLY 1

Rodger_Thomann
Confirmed Champ
Confirmed Champ

Joe,

I believe the adding of a user to a user group is an action of 4, subaction of 12, and removal of a user from a user group is an action of 4, subaction of 13. 

Some sample SQL for the security log table:

select top 5 * from hsi.securitylog SL1

where SL1.messagetext like '%added to % group%'

select top 5 * from hsi.securitylog SL1

where SL1.actionnum = 4 and SL1.subactionnum = 12

select top 5 * from hsi.securitylog SL1

where SL1.messagetext like '%removed from % group%'

select top 5 * from hsi.securitylog SL1

where SL1.actionnum = 4 and SL1.subactionnum = 13