Configuring permissions for an audit store

If you are the Master Auditor or have Change Permission rights, you can modify the rights granted to Active Directory users or groups. When you enable rights for designated users and groups, you make them “trustees” with permission to perform specific operations.

To configure permissions for managing the audit store:

  1. Open Audit Manager.
  2. Expand the installation node, then expand Audit Stores and select a specific audit store name.
  3. Right-click, then select Properties.
  4. Click the Security tab.
  5. Click Add to add Active Directory users or groups to the list of trustees who granted any type of rights on this audit store.
  6. Select a user or group listed, then select the appropriate rights for that trustee, then click OK.

    The following table lists the rights available.

    Select this permissionTo grant these rights to a trustee

    Full Control

    • All operations on the audit store.

    Change Permissions

    • Modify permissions on this audit store.

    Modify Name

    • Modify display name for this audit store.

    Manage Scopes

    • Add a subnet or Active Directory site to the audit store.
    • Remove a subnet or Active Directory site from the audit store.

    Manage SQL Logins

    • Set the allowed incoming collectors for this audit store’s databases.
    • Set the allowed incoming management databases for this audit store’s databases.

    Manage Collectors

    • Enable a trusted group of collectors for this audit store.
    • Add a collector to the trusted group of collector in this audit store.
    • Remove collector from the trusted collectors in this audit store.
    • Remove disconnected collector records from this audit store.

    Manage Audited Systems

    • Enable trusted group of audited computers for this audit store.
    • Add a computer to the trusted group of audited computers in this audit store.
    • Remove a computer from the trusted group of audited computers in this audit store.
    • Remove disconnected audited computer records from this audit store.

    Manage Databases

    • Add audit store databases to this audit store.
    • Attach audit store databases to this audit store.
    • Detach an audit store database from this audit store.
    • Change the active database in this audit store.
    • Modify the display name of an audit store database.

    Manage Database Trace

    • Enable or disable database trace.
    • Export database trace.