Previous Topic: Authorization Error ActionNext Topic: Authorization Status Action


Authorization Notification Action

The Authorization Notification action expresses information about notifications issued during an authorization activity by the system or authorization engine. Authorization activity includes setting up permission on objects, systems, applications for subjects like user or system accounts, hosts, and so forth. Any type of notification from the Authorization can be mapped to this action if the event cannot be mapped to a more specific action. Use the Authorization Status action if the event describes the status of an Authorization activity.

Information

Level

Source - User Information

Secondary

Source - Host Information

Secondary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Primary

Dest - Host Information

Primary

Dest - Object Information

Tertiary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Success

S

2

Failure

F

3