Is there a log of permissions changes?

Get Help
1

We are trying to track down who or what changed "curate" permissions for a group's access to a collection. Is there some sort of log of permission settings for groups over time? We are running metabase v1.50.13.

Users log in with an sso identity provider run by another business unit. I bring this up because in the past we found out that users were being removed from a permission group due to a misspelling of the permission group name within that identity provider (azure AD). Would that be a possibility for removing curate permissions from groups as well?

2

There is no log for that unfortunately:

Are you elf hosting? Maybe you can get some insights from the permissions table in the application DB

3

Hey benlamb

As Tony mention, not an easy way and there's no report we have in our analytics collections at the moment.
If you're self-hosting you can cross reference with a couple tables in your application database.

permissions_revision
collection_permission_graph_revision

Thanks.

4

Thanks for the pointers!