New Suggested 5/22/2023 by Jonathan Craddock

5

votes

Audit Trail for Permission Changes and/or Role Based Access

The “Reports > Audit Log” screen provides some useful info on users’ actions, but it doesn’t show changes to user/technician permissions, such as a technician being granted access to another category.

It’s mostly fine, but we have some categories where tickets may often contain sensitive personal data. (I’m thinking payroll ticket categories, or HR ticket categories that might reference a medical condition, and so on.) It would be good practice, and would help organisations' security compliance, if all changes of permissions were recorded for audit purposes.

I see several “Ideas” in this forum in which permission improvements are a theme. I would like to add that implementing proper Role Based Access would be *HUGE*. I’m certain explicitly naming multiple individual technicians (some of whom might have similar names) across multiple combinations of categories, must be an admin headache for all sorts of reasons. Having the option to apply permissions via pre-defined Roles would be a massive improvement.


Log in to comment...