Skip to main content
Question

Regarding recording the executing account in AdminEvents

  • February 25, 2026
  • 3 replies
  • 44 views

Forum|alt.badge.img+3

The following URL states: [Any action an Administrator performs within IAM can be recorded for auditing purposes.]
https://docs.ifs.com/techdocs/24r2/030_administration/010_security/040_iam_settings/080_authentication_auditing/030_auditing_events/

We need to explain AdminEvents logs to customers, but there is no clear explanation.
Customers cannot understand AdminEvents logs.

[Confirmation Point 1]
Does “Administrator” refer to a specific account in the Users function?
Example: IFSADMIN

[Confirmation Point 2]
Does “Administrator” refer to an account possessing the permissionset: FND_ADMIN in the Users function?

[Confirmation Point 3]
Does the AdminEvents log record information identifying the executing account?

Best Regards.

3 replies

Dharmendra
Hero (Employee)
  • Hero (Employee)
  • February 25, 2026

Hi ​@KeyYasusW,
 

You will see the entry when someone performs any of the activities listed below. For example, if an IAM client user is created, updated, deleted, if you set temp password for a user or Expire Password…..etc, this action will be recorded in the Admin Events screen, as described in the IFS technical documentation.

Admin Event types:

  • CLIENT_DELETE
  • CLIENT_INFO
  • CLIENT_INITIATED_ACCOUNT_LINKING
  • CLIENT_LOGIN
  • CLIENT_REGISTER
  • CLIENT_UPDATE
  • CUSTOM_REQUIRED_ACTION
  • DELETE_ACCOUNT
  • EXECUTE_ACTIONS
  • EXECUTE_ACTION_TOKEN
  • FEDERATED_IDENTITY_LINK
  • GRANT_CONSENT
  • INVALID_SIGNATURE
  • REMOVE_FEDERATED_IDENTITY
  • REVOKE_GRANT


I hope this information is helpful. Thank you!


Best Regards,
Dharmendra


Forum|alt.badge.img+3
  • Author
  • Do Gooder (Partner)
  • February 26, 2026

Thank you for sharing this information.

I understand that logs are recorded when these events occur, as described in the manual.

However, I still do not understand because [Confirmation Point 1] through [Confirmation Point 3] remain unclear.
Please share information regarding [Confirmation Point 1] through [Confirmation Point 3].

Best Regards.


Forum|alt.badge.img+16

Hi ​@KeyYasusW 

Admin Events are an audit trail of administrative actions performed inside the IAM and They record what kind of IAM operation occurred.

The term Administrator refers to an actor performing IAM administration, but does not define this as a specific user account or permission set.
Admin Events are therefore best interpreted as IAM activity tracking, not a full Who did what security audit comparable to database or application audit logs.