1. Identify "Free Users" in the audit log. 2. Include data in the audit log that will provide more information about the data source (e.g. the server / database name or the location of the file from which the data has originated. The dashboard name is all well and good but it can be misleading. 3. Recipient email addresses are not always logged in the audit log when a dashboard is shared. This needs to be fixed.
3 Comments
- We are seeing a bit of an adoption roadblock for certain data classifications due to a lack of item #2 in this idea. We need auditing for compliance not just performance/onboarding.
- Not including the username for the free users who can take advantage of publish to web and share external if enabled for a legitimate reason is an unnecessary risk. Audit function must and should always link action to identity.
- Status added:Needs Votes
