Topic

System Audit reporting for user and contact changes in the Manager Portal.

Description

The System Audit report provides change history for contacts and user accounts, including information about changes and when they occurred. The report can support common audit activities, such as reviewing user profile updates and password reset activity.

Accessing the System Audit report

The System Audit report is available at the Organization level in the Manager Portal.

To open the report:

• Open the Manager Portal and navigate to the Organization level.
• Open Reports & Analytics (or Reports, depending on the interface).
• Select Reports.
• Choose System Audit from the report list.

After the System Audit report opens, select an audit type and date range before running the search. For contact or user changes, select "Persons".

Running a System Audit report for user and contact changes

The System Audit report supports auditing different types of records. Use the "Persons" report type for user account and contact changes.

1. Open the Report Type drop-down in the System Audit report.
2. Select "Persons".
3. Set a date and time range that covers the period to review.
4. Select Search.

The results display the change history for affected records within the selected date and time range.

Key fields in the System Audit results

The following fields can help identify and interpret changes:

• Action such as "Current", "Update", or "Create", indicates the type of action recorded.
• Status such as "Active" or "Inactive", shows the account or contact status associated with the audit record.
• First Name / Last Name shows the person's name associated with the record.
• Recorded Name (User ID) identifies the user account or contact record.
• Web Updated provides information about the source associated with the change.
• When Updated / Created provides timestamps associated with the recorded action.

Review the Action, Status, Web Updated, and timestamp information together when investigating an account or contact change.

Auditing password reset activity

The System Audit report can assist with investigating password reset activity for a Manager Portal user.

1. At the Organization level in the Manager Portal, open Reports & Analytics or Reports, and select System Audit.
2. Select "Persons" from the report type drop-down.
3. Set a date and time range that includes the period when the password reset is believed to have occurred.
4. Select Search.
5. Locate the affected user in the results.
6. Review Action for relevant activity, such as "Create", "Update", or "Current".
7. Review Status for the account status associated with the audit record.
8. Review First Name / Last Name and Recorded Name (User ID) to confirm the account.
9. Review When Updated / Created to identify the time associated with the change.
10. Review Web Updated for available information about the source associated with the change.

To review communications associated with the activity, open Communications > Active/History and review the delivery details for the relevant message.

When the System Audit report is not available

The System Audit report may not be visible in the Reports area for some organizations.

If System Audit is unavailable, use the Event Log Report (Security audit) at Settings > Security > Event Log Report as an alternative for available security and activity information.

Available communications history can also provide information about messages associated with the activity.