BTP - User added to Cloud Identity Service privileged Administrators list

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies when a user is granted privileged administrator permissions in SAP Cloud Identity Service. These permissions include managing Identity Providers, Service Providers, Users, Groups, and Access controls.

Attribute Value
Type Analytic Rule
Solution SAP BTP
ID 7d4e9f2a-8b1c-4a5d-9e3f-6c2b1a0d8e7f
Severity High
Status Available
Kind Scheduled
Tactics LateralMovement, PrivilegeEscalation
Techniques T0859, T1078
Required Connectors SAPBTPAuditEvents
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
SAPBTPAuditLog_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to SAP BTP