Security Report of Profile Changes

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Generate a report that shows profiles that have been modified within a designated period such as a month, quarter or year. Would like to look for for profiles that have had permissions added/revoked or ACIDS added or removed.

Environment

Product: Top Secret

Resolution

We don't have an exact report that you are looking for but you can create a user report to get what you want.

Two choices.

1. TSSUTIL CLASS(O)  reports but you need to have TSS Control Option LOG(CMDA or CMDS) depending where you want the TSS admin commands logged. This will produce a report of all TSS admin changes.

Need to get backups of your Audit Tracking File or SMF dataset for the time range you are interested in as input for the TSSUTIL.

Then need to create a user written report that reads in the the output produced by the TSSUTIL to extract the information you need and generate a report.

2. Run a TSSAUDIT CHANGES report which will produce a report of all the TSS admin changes which were recorded from the TSS recovery file.

Will need to get backups of your TSS Recovery File for the time range you are interested in as input for the TSSUTIL.

Then need to create a user written report that reads in the output produced by the TSSAUDIT CHANGES and extract the information needed and generate a report.