Audit on psLens

Full Access Permission Lists

Mon, 01 Jan 0001 00:00:00 +0000

Full Access Permission Lists Report

Report ID: security-full-access-permlists Category: Security Default Parameter: minMenuCount = 50

Nodes with No Password

Mon, 01 Jan 0001 00:00:00 +0000

Nodes with No Password Report

Report ID: security-nodes-no-password Category: Security

Recurring Processes Schedule Comparison

Mon, 01 Jan 0001 00:00:00 +0000

Recurring Processes Schedule Comparison Report

Report ID: recurring-processes-compare Category: Process Scheduler

Web Service Operation Access Audit

Mon, 01 Jan 0001 00:00:00 +0000

Web Service Operation Access Audit

Report ID: security-ws-access Category: Integration Broker

Stale Password Audit

Mon, 01 Jan 0001 00:00:00 +0000

Stale Password Audit Report

Report ID: security-stale-passwords Category: Security

User Full Access Report

Mon, 01 Jan 0001 00:00:00 +0000

User Full Access Report

Report ID: security-user-access Category: Security Parameters: oprid (required) — the PeopleSoft User ID to audit

IB Node Security Audit

Mon, 01 Jan 0001 00:00:00 +0000

IB Node Security Audit Report

Report ID: ib-node-security-audit Category: Integration Broker

Dangerous Permissions Audit

Mon, 01 Jan 0001 00:00:00 +0000

Dangerous Permissions Audit Report

Report ID: security-dangerous-permissions Category: Security

Active ANY to Local Node Routings

Mon, 01 Jan 0001 00:00:00 +0000

Active `ANY` to Local Node Routings Report

Report ID: ib-any-to-local-routing Category: Integration Broker

Active Service Operations Report

Mon, 01 Jan 0001 00:00:00 +0000

Active Service Operations Report

Report ID: ib-active-any-routes Category: Integration Broker

Active Service Operations with No Routings

Mon, 01 Jan 0001 00:00:00 +0000

Active Service Operations with No Routings

Report ID: ib-svcops-no-routing Category: Integration Broker

Unauthenticated Node Service Operations

Mon, 01 Jan 0001 00:00:00 +0000

Unauthenticated Node Service Operations

Report ID: ib-noauth-node-svcops Category: Integration Broker

Deep Linking

Mon, 01 Jan 0001 00:00:00 +0000

Shareable URLs

Every PeopleSoft object in psLens has a permanent, shareable URL. Copy the address bar, paste it into a ticket or Slack, and anyone with psLens access lands on the same object in the same database.

PeopleSoft’s native URLs are session-bound and cannot be shared or bookmarked reliably. psLens URLs can.

URL Structure

All object URLs follow the same pattern:

/resource/{identifier}?db={database}

resource — the object type (e.g., records, fields, permissionlists)
identifier — the object name as it appears in PeopleSoft (e.g., JOB, EMPLID, HCDPALL0100)
db — the configured database name, so the link is unambiguous about which environment it points to

Linkable Object Types

psLens provides direct URLs for over 25 PeopleSoft object types:

Permission Lists

Mon, 01 Jan 0001 00:00:00 +0000

Permission Lists

URL: /permissionlists

Permission lists (PSCLASSDEFN, sometimes called classes) are the lowest-level grantable security object. Every menu, component, page, and function authorization attaches to one.

What You Can Do

View Full Definitions: See description, last modified information, and general settings.
View Authorizations: See which menus and components the permission list authorizes.
View Assigned Roles: See which roles include this permission list.
Sign-on Settings: View allowed sign-on times and other access constraints.

When It’s Useful

Auditing what access a particular permission list grants before assigning it.
Incident response: what could a compromised permission list have touched.
Finding permission lists that are overly broad (see also the Full Access Permission Lists report).

Sync Operations Without Logging

Mon, 01 Jan 0001 00:00:00 +0000

Sync Operations Without Logging

Report ID: ib-sync-no-logging Category: Integration Broker

Customized Objects Inventory

Mon, 01 Jan 0001 00:00:00 +0000

Customized Objects Inventory Report

Report ID: objects-customized-inventory Category: Hygiene

Roles

Mon, 01 Jan 0001 00:00:00 +0000

Roles

URL: /roles

Roles (PSROLEDEFN) are named bundles of permission lists. Users get roles, not permission lists directly.

What You Can Do

View Included Permission Lists: See the list of permission lists assigned to the role.
View Assigned Users: See which users are assigned this role.
Metadata Inspection: See the role’s description and last modified information.

When It’s Useful

Understanding what an unfamiliar role grants.
Checking whether a role contains permission lists that are unexpectedly broad.
Finding all users who have a particular role.

Message Catalog Usages

Mon, 01 Jan 0001 00:00:00 +0000

Message Catalog Usages Report

Report ID: msgcat-usages Category: Objects / Development

Users

Mon, 01 Jan 0001 00:00:00 +0000

Users

URL: /users

Users (PSOPRDEFN, historically called operators) are login accounts. Each carries a set of roles, a primary permission list, a row-security permission list, and a process profile. Search supports both OPRID and name.

What You Can Do

View Assigned Roles: See the roles assigned to a user.
Core Security Attributes: See primary permission list, row security permission list, and process profile.
Account Metadata: View account status (active/inactive), last login, and email address.
Password Settings: See password-related settings (whether a password is set, when it expires).

When It’s Useful

Checking what access a specific user has.
Reviewing user accounts during security audits.
Finding accounts that are inactive but still have broad role assignments.
Investigating who has access to a sensitive area of the system.

Audit on psLens

Full Access Permission Lists

Full Access Permission Lists Report

Nodes with No Password

Nodes with No Password Report

Recurring Processes Schedule Comparison

Recurring Processes Schedule Comparison Report

Web Service Operation Access Audit

Web Service Operation Access Audit

Stale Password Audit

Stale Password Audit Report

User Full Access Report

User Full Access Report

IB Node Security Audit

IB Node Security Audit Report

Dangerous Permissions Audit

Dangerous Permissions Audit Report

Active ANY to Local Node Routings

Active ~~ANY~~ to Local Node Routings Report

Active Service Operations Report

Active Service Operations Report

Active Service Operations with No Routings

Active Service Operations with No Routings

Unauthenticated Node Service Operations

Unauthenticated Node Service Operations

Deep Linking

Shareable URLs

URL Structure

Linkable Object Types

Permission Lists

Permission Lists

What You Can Do

When It’s Useful

Sync Operations Without Logging

Sync Operations Without Logging

Customized Objects Inventory

Customized Objects Inventory Report

Roles

Roles

What You Can Do

When It’s Useful

Message Catalog Usages

Message Catalog Usages Report

Users

Users

What You Can Do

When It’s Useful

Active `ANY` to Local Node Routings Report