[
https://issues.apache.org/jira/browse/NIFI-14930?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18018616#comment-18018616
]
David Handermann commented on NIFI-14930:
-----------------------------------------
I have submitted a pull request to add basic informational logging for User and
Group create, delete, and update operations, including the name of the entity,
and the actor in question. The timestamp information is present for all
standard logs. More detailed information would likely require custom Authorizer
implementations, but the addition logs support both troubleshooting and basic
auditing as described.
> Enhance Logging for Local User Account Creation/Deletion in Apache NiFi
> -----------------------------------------------------------------------
>
> Key: NIFI-14930
> URL: https://issues.apache.org/jira/browse/NIFI-14930
> Project: Apache NiFi
> Issue Type: Wish
> Reporter: Tatiana Malinina
> Assignee: David Handermann
> Priority: Minor
> Labels: security
> Attachments: image-2025-09-02-16-38-02-935.png
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Currently, Apache NiFi does not provide sufficient logging details for
> operations involving the creation and deletion of local user accounts. There
> is no clear record in the logs indicating:
> * *Which user account* was created or deleted
> * *Who performed* the operation
> * *When* the action occurred
> This information is critical for auditing and security purposes.
> *Proposed Enhancement:*
> Enhance NiFi's logging mechanism so that when a local user account is created
> or deleted, the system logs the following information at an appropriate log
> level (e.g., INFO):
> * Timestamp of the event
> * Username of the account being created or deleted
> * Identity of the user who performed the operation (e.g., admin username or
> identity provider information)
> * Operation type: creation or deletion
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
