Fabric OS Message Reference v7.0.0 (53-1002149-01, April 2011)

Fabric OS Message Reference 803
53-1002149-01
SEC-3025
136
SEC-3025
Message AUDIT, <timestamp>, [SEC-3025], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>] added. Role: [<Role Type>], Password [<Password Expired or not>],
Home Context [<Home AD>], AD/VF list [<AD membership List>].
Probable Cause Indicates a new user account was created.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security
policy.
Severity INFO
SEC-3026
Message AUDIT, <timestamp>, [SEC-3026], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>], role changed from [<Old Role Type>] to [<New Role Type>].
Probable Cause Indicates a user account role was changed.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security
policy.
Severity INFO
SEC-3027
Message AUDIT, <timestamp>, [SEC-3027], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>] [<Changed Attributes>].
Probable Cause Indicates user account properties were changed.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security
policy.
Severity INFO
SEC-3028
Message AUDIT, <timestamp>, [SEC-3028], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>] deleted.
Probable Cause Indicates the specified user account was deleted.