Auditing

You can audit permission changes using DeliverPoint.

Enabling auditing

To configure auditing, complete the following steps:

1. Click Settings and then click DeliverPoint to display the DeliverPoint dashboard, ensure the Farm Centric view is selected.
   
   
2. In the tree view, select the checkbox to the left the Web Application, Managed Paths or site collections.
   
   
3. On the Commands tab, select the Audit Permissions split button down arrow, and then Auditing Settings.
   
   
   
   The Operation: Auditing Settings page is displayed in the results pane of the DeliverPoint dashboard. A list of the site collections included in the selected scope are displayed.
   
   
   
   
4. Select or de-select site collections which you wish to audit and specify the number of days to retain the audit logs for that site collection.
   

*Auditing, can only be configured at a site collection level.

Removing permission auditing

To remove permission auditing:

1. Click Settings and then click DeliverPoint to display the DeliverPoint dashboard, ensure the Farm Centric view is selected.
   
   
2. In the tree view, select the checkbox to the left of one or more Web Application, Managed Paths or site collections.
   
   
3. On the Commands tab, select the Audit Permissions split button down arrow, and then Auditing Settings.
   
   
   
   The Operation: Auditing Settings page is displayed in the results pane of the DeliverPoint dashboard. A list of the site collections included in the selected scope are displayed.
   
   
4. Deselect the check box to the right of the site collection.
   

Viewing auditing reports

To view the auditing reports:

1. Use DeliverPoint dashboard tree view to select the site collection or a site within the site collection.
   
   
2. Click the Audit Permission button on the Commands tab to produce a report for the number of days the audit logs have been retained.
   
   
   
   The audit report displays which group members have been added or removed and users and/or groups that have been deleted. The person who performed the permission change, and when the change occurred are also displayed.