Require e-signature for critical actions

Admins can require an e-signature by enabling the configuration record com.cerebro.domino.eSignatureWorkflowEnabled. E-signatures can be viewed in the Unified Audit Trail.

Options for requiring e-signature

There are three options in Domino for requiring an e-signature:

  • Global: Global requirement enables the e-signature workflow across the entire Domino deployment. Critical actions outlined below will require an e-signature, regardless of the project or user.

  • PerProject: Projects will have a new setting that specifies whether the critical actions within the project will require an e-signature.

  • Disabled: No e-signature is required for any actions.

Critical actions that require e-signature

If Global or PerProject is enabled, the following actions will require an e-signature:

  • Dataset events:

    • Download a file or dataset

    • Edit dataset name and description

    • Edit permissions to datasets (both users and admins)

    • Create a snapshot

    • Delete dataset

  • Project actions:

    • Download artifact

View e-signatures

E-signature events can be viewed in the Unified Audit Trail. In the Audit Trail logs, admins can add columns to see the reason for the changes, the user who e-signed, and any additional information entered by the user.

Next steps

  • The Audit Trail Data Glossary has a complete list of events being tracked. You can use these in the event filter to search for events.

  • Export audit trail data using the Audit trail API. The data is in JSON format but can be parsed and stored in other formats like CSV.

  • Data Source audit logs create an audit trail for Data Source activity and records the WHO, WHERE, WHEN, and WHAT for user activity.