AU-06(07) Permitted Actions

Specify the permitted actions for each au-06.07_odp associated with the review, analysis, and reporting of audit record information.

Parameter ID Definition
au-06.07_odp

Selection (one-or-more):

  • system process
  • role
  • user

Baselines

Guidance

Organizations specify permitted actions for system processes, roles, and users associated with the review, analysis, and reporting of audit records through system account management activities. Specifying permitted actions on audit record information is a way to enforce the principle of least privilege. Permitted actions are enforced by the system and include read, write, execute, append, and delete.