Documentation forAccess Rights Manager

Set alerts for groups

Employees receive their access rights through group memberships. Sensitive groups grant access to their secret folders and other important resources. The AD Logga allows you to actively monitor specific Active Directory groups so an alert is received if new members are added.

Due to the nested group structures in Active Directory, monitor both direct group memberships and indirect memberships.

Create the report

  1. Log in to the Access Rights Manager application.

  2. Click Accounts in the toolbar.

  3. In the Search field, enter a search term to locate the desired group.

  4. In the center pane, right-click the targeted group and select Create alert.

  5. In the Create alert page under Alert Name, enter a name for the alert.

  6. Select whether direct only or direct and indirect group membership changes trigger an alert.

    SolarWinds recommends direct and indirect.

  7. Click Actions.

  8. Select at least one action that will execute when an alert is triggered.

    1. If an email should be sent when an alert is triggered, select the Send email checkbox and complete the fields.

      You can customize the email message. This is analogous to the recertification emails.

    2. To write the alert to the Windows Event Log using this categorization, select the Write to Windows event log checkbox.

      This option is useful if you are using a security information and event management (SIEM) tool that monitors the Windows Event Log.

    3. To execute a script, select the Execute script checkbox.

      To activate this option, configure a script for alerts. See Configure scripts for instructions.

    4. To write the event to a syslog server, select the Write to SysLog checkbox.

      The syslog server must be configured in the ARM Configuration application. See Set the syslog servers for instructions.

  9. Under Category, click the drop-down menu and select a category used when writing to the Windows Event Log and selecting the email subject.

  10. (Required) Enter a reason for the alert configuration.

  11. Click Create.

See the following sections for more information.