Audit log is missing device protocol XML added/deleted

A more granular role based access control can help some but even inside a group of administrators it would be helpful to know who made what change. I was going to put another feature request in for post registration actions, because we have the same issue. We add reads to objects like model, hardware version, firmware version, and device type, then somebody else deletes that. We need to separate users that have the ability to add devices to the system vs. having what I'd call tenant setup privileges ... this would include (1) Modifying the device type XML files (2) Installing/modifying applications or microservices (3) Modifying post registration operations.

However, as noted earlier if I have 5 people with this role and 1 of them got their account compromised and somebody made a malicious modification such as deleting the server device type object which would cause all devices to fail registrations, I'd like to know which of the 5 people with access made that modification. =

Let me know if I should submit a separate feature request or if we can simply couple these operations together in this one.

HI John & Andrew, we discussed this toipic internally and believe that a more granular RBAC would solve you described pain here rahther than adding an audit log entry. Is that assumption correct? This is something we are indeed looking into from a strategical perspective. But with the required architectual changes we don't expect an implementation soon.

Hi John & Andrew,

thanks again for sharing! Like with your other idea – we will discuss it next week and come back to you.

Without Auditing definitions can be destroyed or incorrectly updated.