BTP - User added to Cloud Identity Service privileged Administrators list

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Identifies when a user is granted privileged administrator permissions in SAP Cloud Identity Service. These permissions include managing Identity Providers, Service Providers, Users, Groups, and Access controls.

Attribute Value
Type Analytic Rule
Solution SAP BTP
ID 7d4e9f2a-8b1c-4a5d-9e3f-6c2b1a0d8e7f
Severity High
Status Available
Kind Scheduled
Tactics LateralMovement, PrivilegeEscalation
Techniques T0859, T1078
Required Connectors SAPBTPAuditEvents
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
SAPBTPAuditLog_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Analytic Rules · Back to SAP BTP