[
https://issues.apache.org/jira/browse/NIFI-14930?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18017684#comment-18017684
]
David Handermann commented on NIFI-14930:
-----------------------------------------
Thanks [~korribu], that's helpful. Those Users and Groups are for the purposes
for mapping to authorization policies.
In terms of the logging you would like to see, is it sufficient if the details
were logged in standard application or user logs?
> Enhance Logging for Local User Account Creation/Deletion in Apache NiFi
> -----------------------------------------------------------------------
>
> Key: NIFI-14930
> URL: https://issues.apache.org/jira/browse/NIFI-14930
> Project: Apache NiFi
> Issue Type: Wish
> Reporter: Tatiana Malinina
> Priority: Minor
> Labels: security
> Attachments: image-2025-09-02-16-38-02-935.png
>
>
> Currently, Apache NiFi does not provide sufficient logging details for
> operations involving the creation and deletion of local user accounts. There
> is no clear record in the logs indicating:
> * *Which user account* was created or deleted
> * *Who performed* the operation
> * *When* the action occurred
> This information is critical for auditing and security purposes.
> *Proposed Enhancement:*
> Enhance NiFi's logging mechanism so that when a local user account is created
> or deleted, the system logs the following information at an appropriate log
> level (e.g., INFO):
> * Timestamp of the event
> * Username of the account being created or deleted
> * Identity of the user who performed the operation (e.g., admin username or
> identity provider information)
> * Operation type: creation or deletion
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
