How to find the process which updated the security group name and description

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

The security group name was changed recently however every now and then the Name gets reverted back to what it was earlier. 

The last updated by is showing under admin account however no user has logged in as admin. So this should be happening via a process or job. 

Resolution

Use the below query to identify which process (gel script) has the Security Group ID in it and check the process script. 

select distinct d.id as PROC_DEF_ID, 
v.id as PROC_VER_ID,
ld.name,
d.process_code,
v.internal_status_code,
v.user_status_code,
v.start_option_code,
v.start_event_code,
s.step_code,
a.action_code
from bpm_def_processes d
join bpm_def_process_versions v on d.id = v.process_id
join bpm_def_stages g on g.process_version_id = v.id
join bpm_def_steps s on s.stage_id = g.id
join bpm_def_step_actions a on a.step_id = s.id
join cmn_custom_scripts gel on gel.id = a.script_id and lower(gel.script_text) like '%security_group_id%'
join cmn_captions_nls ld on d.id = ld.pk_id and ld.language_code = 'en' and ld.table_name = 'BPM_DEF_PROCESSES'
AND v.user_status_code = 'BPM_PUS_ACTIVE'