Documentation forAccess Rights Manager

Set alerts for user accounts

AD Logga allows you to monitor the password reset process. Within this process, there is an inherent security risk. For example, if a help desk employee secretly resets the password of a manager or executive, the employee can sign on with a temporary password and gain access to sensitive information. In this scenario, the designated users are informed.

  1. Log in to the Access Rights Manager application.

  2. Click Accounts in the toolbar.

  3. In the Search field, enter a search term to locate the desired user.

  4. Right-click on the user and select Create alert.

  5. Under Alert Name, enter a name for the alert.

  6. Click the drop-down menu and select an event type that triggers the alert.

  7. Click Actions.

  8. Select at least one action that will execute when an alert is triggered.

    1. If an email should be sent when an alert is triggered, select the Send email checkbox and complete the fields.

      The content of the emails can be customized. This is analogous to the recertification emails.

    2. To write the alert to the Windows Event Log using this categorization, select the Write to Windows event log checkbox.

      This option is useful if you are using a security information and event management (SIEM) tool that monitors the Windows Event Log.

    3. To execute a script, select the Execute script checkbox.

      To activate this option, configure a script for alerts. See Configure scripts for instructions.

    4. To write the event to a syslog server, select the Write to SysLog checkbox.

      The syslog server must be configured in the ARM Configuration application. See Set the syslog servers for instructions.

  9. Under Category, click the drop-down menu and select a category used when writing to the Windows Event Log and selecting the email subject.

  10. (Required) Enter a reason for the alert configuration.

  11. Click Create.

See the following sections for more information.