ocsf-schema icon indicating copy to clipboard operation
ocsf-schema copied to clipboard

Account Change missing group object

Open FluffySocks32 opened this issue 1 year ago • 2 comments

Hi,

When trying to transform a Group created event, the assumption is - this would belong in "Group Management 3006". However, this class does not contain activity events which show a direct creation/deletion/modification of a group.

The next class in which this event could belong too, is "Account Change 3001". However, this class looks to be predominately built around user activity and does not contain a group object. However, it specifically calls out user/role creation/deletion/modification.

Would it be possible to either?

  • Add a group object too Account Change 3001 OR
  • Add creation/deletion/modification activity events to Group Management 3006

Thank you

FluffySocks32 avatar Jan 08 '24 01:01 FluffySocks32

This raises a good point @FluffySocks32. We discussed a few options today, I will let Zach highlight most of them. Though, as for Group Management, I believe it was simply an oversight that activties are not present in that class for group creation and deletion. Though, one valid point that was discussed is that there may be some overlap between Group Management and Entity Management.

mikeradka avatar Jan 09 '24 18:01 mikeradka

I am of the opinion that the activity IDs associated w/ 3001 should mostly exist for 3006. I think that answers the mail here.

Does entity management need some clarifying language that indicates it is for use when a class does not exist for the required entity type? Or something to that effect?

k2niner avatar Jan 09 '24 20:01 k2niner