Advanced Cloud Security Documentation
Index

Field Change Tracking

Field change tracking is the foundation of the Compliance module. It monitors designated fields for changes and captures detailed information about each modification attempt.

What is Field Change Tracking?

When tracking is enabled for a field:

  • Every modification attempt is detected
  • Old and new values are captured
  • User identity is recorded
  • Timestamp is recorded
  • Data is stored in the compliance log

Enabling Field Tracking

Prerequisites

  1. Table must be selected in Compliance Tables (Build phase)
  2. Extension must be regenerated
  3. Compliance license must be active

Configuration Steps

  1. Open Compliance Setup
  2. Select the table
  3. Click Fields action
  4. For each field, set Track Changes = Yes

What Gets Captured

For each tracked change:

Information Description
Table No. The table containing the field
Field No. The specific field changed
Record ID Primary key of the record
Old Value Value before the change
New Value Value after the change
User ID Who made the change
Timestamp When the change occurred
Company Which company

Tracking vs. Approval

Field tracking and approval are separate settings:

Track Changes Approval Required Result
Yes No Logged only, saved immediately
Yes Yes Logged, requires approval before save
No N/A No tracking or logging

Tracking Without Approval

Use for:

  • Audit trail requirements
  • Low-risk sensitive data
  • Monitoring without workflow interruption

Tracking With Approval

Use for:

  • High-risk changes
  • Regulatory requirements
  • Segregation of duties

Commonly Tracked Fields

Financial Fields

Table Fields
Customer Credit Limit, Payment Terms, Blocked
Vendor Payment Terms, Blocked, Priority
G/L Account Account Type, Blocked

Banking Fields

Table Fields
Customer Bank Account fields
Vendor Bank Account, IBAN, SWIFT
Employee Bank Account No.

Personal Data

Table Fields
Employee SSN, Birth Date, Address
Contact Personal fields

How Tracking Works

Detection Mechanism

User Opens Record
      ↓
User Modifies Tracked Field
      ↓
OnModify Trigger Fires
      ↓
ACS Captures Old/New Values
      ↓
Creates Log Entry
      ↓
If Approval Required: Hold Change
If Not: Save and Continue

Event Timing

Tracking happens at the table level:

  • Before the change is committed
  • All modifications are caught
  • Works with UI and code modifications

Viewing Tracked Changes

Compliance Log

All tracked changes appear in the Compliance Log:

  1. Search for Compliance Log
  2. View all tracked changes
  3. Filter by table, user, date, etc.

Log Fields

Column Description
Entry No. Unique identifier
Table Name Which table was modified
Field Name Which field was changed
Old Value Previous value
New Value New value
User ID Who made the change
Date/Time When it happened
Status Pending, Approved, Rejected, Logged

Record Context

Each log entry includes record context:

  • Primary key values
  • Record identification
  • Link to source record (if available)

Bulk Changes

When multiple fields are changed at once:

  • Each field is logged separately
  • Same timestamp and user
  • Grouped by transaction

Testing Field Tracking

Test Steps

  1. Enable tracking for a test field
  2. Modify the field value
  3. Check the Compliance Log
  4. Verify entry appears with correct data

Verify

  • Log entry created
  • Old value is correct
  • New value is correct
  • User is correct
  • Timestamp is correct

Excluding Changes

When Not to Track

Some changes shouldn't be tracked:

  • System-generated updates
  • Background job modifications
  • Import processes

Configuration Options

You may be able to configure:

  • Exclude certain operations
  • Exclude system users
  • Threshold-based tracking

Field Tracking Best Practices

Select Meaningful Fields

Track fields that:

  • Contain sensitive information
  • Have compliance requirements
  • Need audit trails
  • Represent significant business changes

Avoid Over-Tracking

Don't track:

  • Low-value fields
  • Frequently changing operational data
  • Generated/calculated fields

Document Your Tracking

Record:

  • Which fields are tracked
  • Why they're tracked
  • Retention requirements
  • Review schedule

Performance Considerations

Impact on Operations

Field tracking adds minimal overhead:

  • Trigger-based detection
  • Asynchronous logging (typically)
  • Indexed log tables

For High-Volume Tables

If tracking high-transaction tables:

  • Be selective with tracked fields
  • Monitor log growth
  • Plan archiving strategy

Data Retention

Log Growth

Compliance log grows over time:

  • Plan storage requirements
  • Consider archiving old entries
  • Meet retention requirements

Archiving

Consider:

  • How long to keep entries
  • Archive to external storage
  • Maintain audit trail integrity

Integration with Approval

When approval is also required:

  1. Change is tracked (log entry created)
  2. Approval request is created
  3. Change is held pending
  4. Approval/rejection is logged
  5. Final status updated

Troubleshooting

Changes Not Being Tracked

  1. Verify field tracking is enabled
  2. Check table is in Compliance Tables
  3. Confirm extension was regenerated
  4. Check compliance license

Log Entries Missing Data

  1. Verify field configuration
  2. Check for system user exclusions
  3. Review log entry details