The Authorization Notification action expresses information about notifications issued during an authorization activity by the system or authorization engine. Authorization activity includes setting up permission on objects, systems, applications for subjects like user or system accounts, hosts, and so forth. Any type of notification from the Authorization can be mapped to this action if the event cannot be mapped to a more specific action. Use the Authorization Status action if the event describes the status of an Authorization activity.
|
Information |
Level |
|---|---|
|
Source - User Information |
Secondary |
|
Source - Host Information |
Secondary |
|
Source - Object Information |
Tertiary |
|
Source - Process Information |
Tertiary |
|
Source - Group Information |
Tertiary |
|
Dest - User Information |
Primary |
|
Dest - Host Information |
Primary |
|
Dest - Object Information |
Tertiary |
|
Dest - Group Information |
Tertiary |
|
Agent - Information |
Primary |
|
Agent - Host Information |
Primary |
|
Event Source - Host Information |
Primary |
|
Event Source - Information |
Tertiary |
|
Event - Information |
Primary |
|
Result - Information |
Primary |
|
Result |
event_result |
event_severity |
|---|---|---|
|
Success |
S |
2 |
|
Failure |
F |
3 |
|
Copyright © 2014 CA.
All rights reserved.
|
|