AD_AccessChanges Job
The AD_AccessChanges Job highlights the type and number of resources in the environment affected by access changes. It also highlights groups that have historically caused the most access changes, revealing potential issues in access sprawl and provisioning.
Analysis Tasks for the AD_AccessChanges Job
Navigate to the Jobs > Active Directory > 6.Activity > Group Usage > AD_AccessChanges > Configure node and select Analysis to view the analysis tasks.
warning
Don't modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.
The following non-configurable analysis tasks are selected by default:
- Find Access Changes – Creates the SA_AD_AccessChanges_Details table accessible under the job’s Results node
- Group Summary – Creates the SA_AD_AccessChanges_GroupSummary table accessible under the job’s Results node
- Access Type Summary – Creates the SA_AD_AccessChanges_TypeSummary table accessible under the job’s Results node
In addition to the tables created by the analysis tasks, the AD_AccessChanges Job produces the following pre-configured reports:
| Report | Description | Default Tags | Report Elements |
|---|---|---|---|
| Access Changes | Highlights group membership additions that have created large changes in access within the environment. | CCPA GDPR SOX HIPPA PCI-DSS GLBA ITAR FERPA FISMA ISO27001 | This report is comprised of three elements:
|