How can we track changes to entitlement catlog custom attributes?

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

We have a custom attribute called certifiable in the entitlement catalog. How can we enable better logging and reporting for changes made to this attribute?

I have observed that the default workflow, “Entitlement Update”, is launched whenever modifications are made through the UI. However, this workflow is not triggered when updates are performed via batch request or Run Rule tasks.

Additionally, I checked the default audit event that is created when changes are made to the entitlement catalog. While it provides the objectSummary, it does not capture the old and new values of the modified attributes. How can we modify the audit event to include both the old and new values?

Here are the specific questions:

1.How can we update the audit event to capture and populate the old and new values for the modified custom attribute (e.g., certifiable)?

2.How can we track changes to the custom attribute? Is there a way to create a report or an alert whenever the certifiable flag is updated?

3.How can we enable detailed logging for changes to the entitlement catalog, regardless of whether updates are made via UI, batch processes, or Run Rule tasks?

2

To my knowledge, you should find out in the codebase where the attribute is being modified and inject audit logic there to track the change. Also, restrict the admins to use the entitlement catalog import feature to modify this flag, as that won’t create any audit. If required, you can create a rule runner task to update the certifiable lag for input entitlements through feed file and generate an audit for each. This way operations team will have the traceable functionality to chagne the flag.