Log Admin activity - SolidWorks PDM

Installation, PDM, standards, training, support, part numbering, rev schemes, etc.
Austin Schukar
Posts: 98
Joined: Thu Mar 18, 2021 11:19 am
Answers: 1
Location: St. Louis, MO
x 288
x 56

Log Admin activity - SolidWorks PDM

Unread post by Austin Schukar »

Hey all,

Does SolidWorks PDM (Professional) track changes, made by any PDM administrator, to vault settings/permissions via an auditable log?

Austin
Austin
Austin Schukar
Posts: 98
Joined: Thu Mar 18, 2021 11:19 am
Answers: 1
Location: St. Louis, MO
x 288
x 56

Re: Log Admin activity - SolidWorks PDM

Unread post by Austin Schukar »

Okay - so I am just seeing the "System History," vault command and it does seem adequate, though it isn't as detailed as I'd like it to be.
Austin
User avatar
jcapriotti
Posts: 1868
Joined: Wed Mar 10, 2021 6:39 pm
Answers: 30
Location: The south
x 1211
x 1998

Re: Log Admin activity - SolidWorks PDM

Unread post by jcapriotti »

Yeah, just says what module was edited but not what actually changed. You'll need a change process, which you could manage with PDM or a number of other tools.
Jason
Austin Schukar
Posts: 98
Joined: Thu Mar 18, 2021 11:19 am
Answers: 1
Location: St. Louis, MO
x 288
x 56

Re: Log Admin activity - SolidWorks PDM

Unread post by Austin Schukar »

jcapriotti wrote: Fri Oct 22, 2021 1:55 pm Yeah, just says what module was edited but not what actually changed. You'll need a change process, which you could manage with PDM or a number of other tools.
In our case, we are worried about "malicious" PDM administrators granting permissions that they shouldn't be, and want to be able to track the changes made, when it was made, etc. For context, this is particularly about granting access to folders that are meant to be hidden (confidential/classified).

The rogue admin could just delete the history and everyone would be clueless. In my mind, if you have a rogue admin, you have other problems as well, and this type of activity would have to be pretty dang malicious, but you can't rule it out, I suppose. Thoughts on this?

Currently, the only solution that I can think of is, like you said, a change process, to have the super-admin go into the system to update permissions, and restrict general PDM admins (3 of us).
Austin
User avatar
jcapriotti
Posts: 1868
Joined: Wed Mar 10, 2021 6:39 pm
Answers: 30
Location: The south
x 1211
x 1998

Re: Log Admin activity - SolidWorks PDM

Unread post by jcapriotti »

Not a lot of options here. You could create a "Lite Admin" group but just giving them "Administrate Users" allows them to give themselves any other ability, such as purging history. And managing users is a basic task.

Just make sure you have frequent backups.
Jason
Post Reply