access-sap-audit-log-viewer-service-af26206.md

Access SAP Audit Log Viewer service

Context

To retrieve the audit logs for your subaccount using the Audit Log Viewer service, you need to have proper authorizations. See https://docs.cloudfoundry.org/concepts/roles.html#permissionsInformation, published on a non-SAP site.

Procedure

1. Create a RoleCollection.

2. Search for roles with the name "Auditlog_Auditor" and select both entries with the following application identifiers:

   • auditlog-management!b*
   • auditlog-viewer!t*

3. Assign the role to a user or create a rule to assign it to users based on the SAML Assertion coming from the IDP.

   Note:

   Only account members with the Security Administrator role are authorized to edit application authorizations.