Fortinet black logo

Handbook (HTML)

Privilege policies

Copy Link
Copy Doc ID 73ac471a-9afd-11ea-8862-00505692583a:724416

Privilege policies

The target database monitoring and auditing features use privilege policies monitor or track changes to privilege settings in selected databases.

You cannot create privilege policies, but you can modify some of the settings of the pre-defined privilege policies.

To view predefined privilege policies, on the DAM Security Alert Policies or DAM Activity Auditing Policies page, from the View list, select Privilege Policies.

To configure a privilege policy
  1. Do one of the following:
    • To configure a policy that is available to add to multiple target monitoring configurations, go to Policy > DAM Alert Policies or Policy > DAM Audit Policies.
    • To configure a policy for a specific target, go to DB Activity Monitoring > Monitoring Management, and then click a target name. Then, click the Alert Policies or Audit Policies tab.
  2. To identify privilege policies, do one of the following:
    • If you are using the DAM Security Alert Policies or DAM Activity Auditing Policies page, from the View list, select Privilege Policies.
    • The View menu filters policies using the pre-defined Privilege Policies group, which include privilege policies for all database types. To view privilege policies for a specific database type, modify the filter of the Privilege Policies group or create a new policy group. For details about modifying a policy group, see Alert and audit policy groups on page 1.
    • If you are using the target monitoring configuration, under Type, look for the icon.
  3. Click the name of the policy you want to configure.
  4. On the Edit Audit Policy page, under Policy Info, enter an optional description, and then select Enable.
  5. If you are configuring an alert policy, for Severity, select one of the following options:
    • Informational (default, lowest severity level)
    • Cautionary
    • Minor
    • Major
    • Critical (highest severity level)
  6. Click Save.
See also

Privilege policies

The target database monitoring and auditing features use privilege policies monitor or track changes to privilege settings in selected databases.

You cannot create privilege policies, but you can modify some of the settings of the pre-defined privilege policies.

To view predefined privilege policies, on the DAM Security Alert Policies or DAM Activity Auditing Policies page, from the View list, select Privilege Policies.

To configure a privilege policy
  1. Do one of the following:
    • To configure a policy that is available to add to multiple target monitoring configurations, go to Policy > DAM Alert Policies or Policy > DAM Audit Policies.
    • To configure a policy for a specific target, go to DB Activity Monitoring > Monitoring Management, and then click a target name. Then, click the Alert Policies or Audit Policies tab.
  2. To identify privilege policies, do one of the following:
    • If you are using the DAM Security Alert Policies or DAM Activity Auditing Policies page, from the View list, select Privilege Policies.
    • The View menu filters policies using the pre-defined Privilege Policies group, which include privilege policies for all database types. To view privilege policies for a specific database type, modify the filter of the Privilege Policies group or create a new policy group. For details about modifying a policy group, see Alert and audit policy groups on page 1.
    • If you are using the target monitoring configuration, under Type, look for the icon.
  3. Click the name of the policy you want to configure.
  4. On the Edit Audit Policy page, under Policy Info, enter an optional description, and then select Enable.
  5. If you are configuring an alert policy, for Severity, select one of the following options:
    • Informational (default, lowest severity level)
    • Cautionary
    • Minor
    • Major
    • Critical (highest severity level)
  6. Click Save.
See also