In this article:  

• Issue description

• Prerequisites

• Possible causes

• Resolution

• Related topics and articles

• How to reach support

Issue description  

In ADAudit Plus, reports for EMC Isilon devices may not display the Old and New Permissions fields. These fields might appear empty or be missing entirely for relevant audit events.

Prerequisites  

• ADAudit Plus should be licensed and running.

• EMC Isilon must be added and configured under File Audit > Configured Servers.

• The domain account used in Domain Settings should have administrative access to the Isilon share.

Possible causes  

• The Show detailed permission changes for NAS devices option is disabled in ADAudit Plus.

• The user account configured in ADAudit Plus lacks the necessary privileges to fetch permission data from the Isilon device.

Resolution  

1. Enable detailed permission change tracking

• Log in to the ADAudit Plus web console.

• Navigate to Admin > Configuration > Alert/Report Settings.

• Enable the Show detailed permission changes for NAS devices check box .

• Save the settings and check the report again for updated events.

2. Ensure user has sufficient access in EMC Isilon

• Log in to the Isilon Cluster UI (OneFS console).

• Go to Protocols > SMB Shares.

• Edit the configured SMB share used for auditing.

• Under the Members tab:

• Add the domain user configured in ADAudit Plus > Domain Settings.

• Assign the Run as root permission level for the configured share path.
  
  
  

• Save the changes and allow a few minutes for new events to populate.

Related topics and articles  

• Privileges required for effective EMC Isilon auditing

How to reach support  

If the issue persists after performing these steps, collect the following information and contact support@adauditplus.com:

• Screenshot of the report with missing permission details

• Isilon SMB share configuration details

• ADAudit Plus version and build number