Page History

User Auditing

Groups are often used to control access to resources or to target communications. Group attributes, memberships and privileges may change at any time with potentially important consequences, so simply knowing how a group last changed is insufficient to investigate why, for example, an individual lost access to a resource.  Grouper 1.5 and above provides an audit log of high level user actions which allows administrators to understand the history of groups, group types and stems. Audit entries may be queried by object or the subject responsible for a change.

...

You can import/export auditing data, but this is a different file than the normal Grouper export file, with the same command.  You will see two different XML files.

More information on user auditing, including gsh commands. is available.

The user audit log can be queried using the Grouper UI. Slides illustrating the UI functionality are also available.

Here is a movie(xvid codec required) demoing user auditing.  Note this is from April 2009 and might be a little dated.