IBM Security Join our 16,000+ members as we work together to overcome the toughest challenges of cybersecurity. Join the Community
You all know there is a feature in MaaS360 to present all the administrator actions as audit reports under the category “Admin Audit reports”. The following sections in the MaaS360 Portal display the administrator audit report data:
Enrolments, devices, and users
Portal administration
Policies and rules
Settings and services
But what if you want all these different categories of reports’ data & any other changes you made in Setup -> settings or compliances rules or groups (both changes to settings & differnet actions taken) to be emailed to you for further processing? We received this request from many customers and we’ve addressed it in the latest release of MaaS360 elevated in March 2023. This feature is called “Admin Audit Data”. This blog talks about what this new feature is about & how to generate those data and get them emailed to yourselves.
Under this feature, you can request administrator audit data for different report types & settings, actions that were taken in the last 60 days. The requested audit data is generated in CSV file format and sent to your email address(es) within 30 minutes. Currently, you can generate any combinations of these reports data 3 times a day.
Follow these steps to generate administrator audit data & email them to the admins:
From the MaaS360® Portal Home page, select Reports > Audit > Administrators.
The Administrator Audit Report window is displayed. All you have to do is pick and choose the reports that you want to generate the data for, along with From and To Date and your email IDs as shown below and you’ll get the reports data in CSV files as emails within 30 minutes.
All these following reports provide admin audit history data for the previous 60 days:
Administrator Login report - The Administrator Login report provides the history of the login and logout status of all the administrators. The respective report for this is accessible through the navigation Setup > Administrator logins report.
Administrator Changes report - The Administrator Changes report provides the change history details of all the administrator accounts that were added, modified, or deleted. Setup > Administrators, select the administrator's name, and click History.
Administrator Roles report - The Administrator Roles report provides the change history details for all the changes made to the administrator's role. You can also access this report from the MaaS360 Portal at Setup > Roles, select the role name, and click History.
Group Changes report - The Group Changes report provides the change history details for all the changes made to the groups. All the User -> Group - > Edits & actions are captured here.
Rules Changes report - The Rule Changes report provides the change history details for all the changes made to the rules. Security -> Compliance rules
Services report - The Services report provides the change history details for all the changes made to the services.
Deployment Settings report - The Deployment Settings report provides the change history of all the changes made to the deployment settings. These can be accessed under “Directory and enrolment” in Setup -> settings.
Login Settings report - The Login Settings report provides the change history of all the changes made to the login settings. These map to the administrator settings under Setup -> Administrator Settings.
End User Notification Settings report - The End User Notification Settings report provides the change history of all the changes made to the end user notification settings. Setup -> Settings -> User Settings -> Basic -> End User Notification settings.
Policies Changes report - The Policies Changes report provides the change history of all the changes that were applied to policies. Access this data from the MaaS360 Portal at Setup> Policies, select the policy name, and click History.
Hope you find this feature useful. If you are already using the feature, let us know how you like it and share any feedback if you may have.
By
Prasad Balasubramanian
posted