Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Auditing record read and search in Dynamics CRM 2011 RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello everyone,

    What is the best way to log record reads and searches (i.e. through Quick Find or AF) for auditing purposes?

    Basically I am working on a system which contains citizen social security information and therefore we need to log not only update/create/deletes but also reads and lookups for citizen records. This is to ensure that customer service reps. do not lookup any other data then what they actually need - such as their neighbours/friends information in the system. :)

    Is the only option to build a custom audit plugin that fires on retrieve and retrievemultiple messages which then logs info to a custom audit entity?

    Thanks in advance

    I.

    Monday, August 13, 2012 3:04 PM

Answers

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    Correct - auditing only records changes to a field not views. You would need a custom audit entity as the SDK doesn't allow modifications/additions of audit records. 

    Microsoft Dynamics CRM 2011 – Auditing Wiki

    Jason Lattimer

    Monday, August 13, 2012 3:19 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    There is currently no way to do this out of the box, you would have to write something using the SDK.

    The current functionality audits Creates, Updates, and Deletes in the system.  In UR5 they added Access auditing, but that is only when a user access the system, not a record.

    Jamie Miley
    Check out my about.me profile!
    http://mileyja.blogspot.com
    Linked-In Profile
    Follow Me on Twitter!

    Monday, August 13, 2012 3:21 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the quick reply!

    Can I use Retrieve and RetrieveMultiple plugin messages in order to track who opened a record and who searched in the system for which Social Security number?

    I guess this will put quite a heavy load to the system though..Would there be any other methods/third party tools that would allow us auditing CRUD operations in the SQL level?

    Thanks,

    I.

    Tuesday, August 14, 2012 2:45 PM
  • Question
    Sign in to vote
    1
    Sign in to vote
    yes, plugins on Retrieve and RM would be one way to do it Isil.  There would be a little overhead.   There are also SQL auditing tools out there as you have mentioned also.

    Jamie Miley
    Check out my about.me profile!
    http://mileyja.blogspot.com
    Linked-In Profile
    Follow Me on Twitter!

    • Marked as answer by Isil AP Thursday, August 16, 2012 7:21 AM
    Tuesday, August 14, 2012 3:04 PM
    Moderator
  • Question
    Sign in to vote
    1
    Sign in to vote
    Be aware that SQL auditing tools would not be able to distinguish who executed any Read or Delete operations. All the SQL access is done via the same login, so that won't help. You could identify who executed a Create or Update, as the modifiedby field will be set

    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk


    Wednesday, August 15, 2012 12:52 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thanks everyone. Will let our customer about available options and potential drawbacks
    • Marked as answer by Isil AP Thursday, August 16, 2012 7:20 AM
    • Unmarked as answer by Isil AP Thursday, August 16, 2012 7:20 AM
    Thursday, August 16, 2012 7:20 AM