You can filter Authentication Activity Monitor events based on administrator scope of authorization. Administrators with restricted scope permissions, such as Help Desk Administrators, are able to view only those events that are within the scoped security domain of the administrator.
Log on to the appliance using an SSH client.
Run one of the following commands:
To restrict logging to the scoped security domain of the Security Console administrator, type the following, and then press ENTER:
./rsautil store -a add_config auth_manager.activity_monitor.scope_security_domain true GLOBAL 500
To undo the change, type the following, and then press ENTER:
./rsautil store -a update_config auth_manager.activity_monitor.scope_security_domain false GLOBAL 500
When prompted, enter your Operations Console administrator User ID, and press ENTER.
When prompted, enter your Operations Console administrator password, and press ENTER.
Restart all Authentication Manager services on the primary instance and each replica instance: