User modifications within CAM groups are now captured in the TM1 audit log

The TM1 database updates group membership in TM1 based on information from Cognos Authentication Manager when a user logs into TM1 using CAM. These events are now captured in the TM1 audit log.

The audit log now captures events such as:

user creation in CAM
user deletion in CAM
user addition to a CAM group
user removal from a CAM group

This sample audit log extract shows multiple events where user modifications in CAM are written to the TM1 audit log.

<Commit ts="20210318202610" client="Cognos Users/user1 user1">
"45","CAMID(""CognosEx:u:uid=tester2"")","Client 'CAMID(""CognosEx:u:uid=tester2"")' was deleted."
</Commit>

<Commit ts="20210318202817" client="Cognos Users/tester1 tester1">
"31","CAMID(""::All Authenticated Users"")","Cognos Users/tester1 tester1","Client 'Cognos Users/tester1 tester1' was assigned to group 'CAMID(""::All Authenticated Users"")'."
"31","CAMID(""::Everyone"")","Cognos Users/tester1 tester1","Client 'Cognos Users/tester1 tester1' was assigned to group 'CAMID(""::Everyone"")'."
"31","CAMID("":Analytics Administrators"")","Cognos Users/tester1 tester1","Client 'Cognos Users/tester1 tester1' was assigned to group 'CAMID("":Analytics Administrators"")'."
"144","Cognos Users/tester1 tester1","9.30.77.16","User 'Cognos Users/tester1 tester1' successfully logged in from address '9.30.77.16'."
</Commit>

<Commit ts="20210318203231" client="Cognos Users/tester7 tester7">
"31","CAMID("":Analytics Users"")","Cognos Users/tester7 tester7","Client 'Cognos Users/tester7 tester7' was assigned to group 'CAMID("":Analytics Users"")'."
"144","Cognos Users/tester7 tester7","9.30.77.16","User 'Cognos Users/tester7 tester7' successfully logged in from address '9.30.77.16'."
</Commit>

<Commit ts="20210318204344" client="Cognos Users/tester5 tester5">
"32","CAMID("":TM1 Group 3"")","Cognos Users/tester5 tester5","Client 'Cognos Users/tester5 tester5' was removed from group 'CAMID("":TM1 Group 3"")'."
"32","CAMID("":Tm1 Role 1"")","Cognos Users/tester5 tester5","Client 'Cognos Users/tester5 tester5' was removed from group 'CAMID("":Tm1 Role 1"")'."
"144","Cognos Users/tester5 tester5","9.30.77.16","User 'Cognos Users/tester5 tester5' successfully logged in from address '9.30.77.16'."
</Commit>

<Commit ts="20210318205451" client="Cognos Users/tester5 tester5">
"144","Cognos Users/tester5 tester5","9.30.77.16","User 'Cognos Users/tester5 tester5' successfully logged in from address '9.30.77.16'."
</Commit>

<Commit ts="20210318205520" client="Cognos Users/tester7 tester7">
"32","10000","Cognos Users/tester7 tester7","Client 'Cognos Users/tester7 tester7' was removed from group '10000'."
"32","10100","Cognos Users/tester7 tester7","Client 'Cognos Users/tester7 tester7' was removed from group '10100'."
"144","Cognos Users/tester7 tester7","9.30.77.16","User 'Cognos Users/tester7 tester7' successfully logged in from address '9.30.77.16'."
</Commit>

<Commit ts="20210318210127" client="Cognos Users/tester8 tester8">
"32","10000","Cognos Users/tester8 tester8","Client 'Cognos Users/tester8 tester8' was removed from group '10000'."
"32","10100","Cognos Users/tester8 tester8","Client 'Cognos Users/tester8 tester8' was removed from group '10100'."
"32","10110","Cognos Users/tester8 tester8","Client 'Cognos Users/tester8 tester8' was removed from group '10110'."
"144","Cognos Users/tester8 tester8","9.30.77.16","User 'Cognos Users/tester8 tester8' successfully logged in from address '9.30.77.16'."
</Commit>

<Commit ts="20210318210142" client="Cognos Users/user1 user1">
"144","Cognos Users/user1 user1","9.30.77.16","User 'Cognos Users/user1 user1' successfully logged in from address '9.30.77.16'."
</Commit>

You can disable the capture of user modifications within CAM groups in the TM1 audit log. Set CheckCAMClientAlias =F in Tm1s.cfg if you do not want CAM user modification information to be written to the audit log.

For more details on using the audit log, see the Audit Log.