Chat now with support
Chat with Support

On Demand Global Settings Current - Security Guide

Role Based Access Control

Quest On Demand is configured with default roles that cannot be edited or deleted, and also allows you to add custom roles to make permissions more granular. Each access control role has a specific set of permissions that determines what tasks a user assigned to the role can perform.

For more details, see Adding users to an organization in the On Demand Global Settings User Guide.

Auditing

On Demand Core provides an activity trail log for the following actions:

•
Adding and removing an Office 365 tenant
•
Granting of Admin Consent for the tenant
•
Adding and removing hybrid agents, domains and relevant capabilities
•
Authorizing and de-authorizing users as an On Demand administrator
•
Notification settings modification
•
Privileged actions on system objects for On Demand modules
•
Any role granted to users in the organization, not only OnDemand Administrator.
•
Changes in the subscription status in organization and offboarding events.
* 
NOTE:  
•
 
•
Audit data is stored in Azure SQL database and is available via JWT authenticated access to On Demand administrators only.
•
Account creation, password reset, and everything around authentication is not tracked by On Demand. This data is stored in the Microsoft Entra ID ID log found in the tenant Audit Logs.

Notification Service

On Demand Notification Service (ODNS) is a cloud based service that provides core services to other Quest Software as a Service (SaaS) product solutions. The core service provided is email notifications. Every email sent by the Notification Service is scanned for viruses and malware.

This service is delivered through Amazon Web Services.

Figure 4. Notification architecture diagram

Data Egress Service

On Demand Data Egress Service (ODDE) is a cloud based service delivered through Azure Services, which provides functionality to transfer incoming events to given destination.

Data egress service enables customers to set up event forwarding to SIEM Tools like Splunk, Sentinel or via Email Notifications.

Email forwarding leverages Notification Service (ODNS) to deliver emails.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating