| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
*Note: Additional work needs to be done around the definitions of who is allowed to do the following. Some institutions use an admin, others a database administrator.
Audit trail viewing
Admin can search for all newly created/amended/deleted records
...
Admin can view/export all changes to a given record Admin can view/export all user profilesby procedure
Admin can view/export all user login/logout times over a specific period
...
Where do each of these viewings occur? Should viewing all the changes to a record be available for viewing within the record itself?
Does the system have a "flush" mechanism? How much archived data is too much (e.g. how long is every change to every field maintained?) What is realistic/expected?