Fabric OS Message Reference v6.4.0 (53-1001767-01, June 2010)

Fabric OS Message Reference 719
53-1001767-01
SEC-3025
125
SEC-3025
Message AUDIT, <timestamp>, [SEC-3025], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>] added. Role: [<Role Type>], Password [<Password Expired or not>],
Home AD [<Home AD>], AD list [<AD membership List>].
Probable Cause Indicates a new user account was created.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security
policy.
Severity INFO
SEC-3026
Message AUDIT, <timestamp>, [SEC-3026], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>], role changed from [<Old Role Type>] to [<New Role Type>].
Probable Cause Indicates a user account role was changed.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security
policy.
Severity INFO
SEC-3027
Message AUDIT, <timestamp>, [SEC-3027], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>] [<Changed Attributes>].
Probable Cause Indicates user account properties were changed.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security
policy.
Severity INFO
SEC-3028
Message AUDIT, <timestamp>, [SEC-3028], INFO, SECURITY, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: User account
[<User Name>] deleted.
Probable Cause Indicates the specified user account was deleted.