Option to opt out of PII data export / sending the related fields to Grafana

[mec0202]

Hello @nvuillam,

is there a way to configure that the automation / export will not retrieve PII Data for the User object like Fist Name, Last Name, User Name (which is in worst case the email address of the user)?
Especially for the sending of this data to Grafana for monitoring reason (active users, not active users), it would be absolutely great to have the option to not retrieve this fields from the user object and therefore to not include this information to make sure (if needed) that no PII data is included in the monitoring files.

What do you think about that?

Thank you and Greetings

[nvuillam]

Hi @mec0202 :)

You can simply disable this indicator (the command won't be run, so no notifications send anywhere ^^) by defining either:

in .sfdx-hardis.yml:

monitoringDisable:
  - UNUSED_USERS

Example in environment variables:

MONITORING_DISABLE=UNUSED_USERS

https://sfdx-hardis.cloudity.com/salesforce-monitoring-config-home/#monitoring-commands

Maybe you would like to send the indicators anyway, but not the details ?

(if so, a small evolution is necessary ^^)

[mec0202]

I now changed in the bitbucket-pipelines.yml on every related line from "sf plugins install sfdx-hardis" to "sf plugins install sfdx-hardis@beta".
It is now running.
I will let you know.

Regarding your note: LastName, FirstName and Username should be in my eyes the excluded fields from the soql query

[nvuillam]

@mec0202 noted :)
indeed sf plugins install sfdx-hardis@beta is the way to test it on bitbucket :)
Do you have expected results ? (you should also see in the console log that log notifs has not been sent to grafana because of env vars)

[mec0202]

@nvuillam sry for the late response.
As far as I can interpret it correctly, it has not been sent to Grafana, but actually nothing for "Unused Users" has been sent at all

If I understood you correctly, the pure numbers of inactive users at least should have been sent, correct?

[nvuillam]

yes, can you check in the job log if you see something about it ?

[mec0202]

Here are the three lines where "NOTIF_API_SKIP_LOGS" was found in the log (beside the definition of the variable in the beginning of the log.

[sfdx-hardis] Running monitoring command Detect active users without recent logins (key: $NOTIF_API_SKIP_LOGS)

[sfdx-hardis][NotifProvider] Handling notification of type $NOTIF_API_SKIP_LOGS...

[sfdx-hardis][ApiProvider] Skipped posting logs to API and JSON file for notification type '$NOTIF_API_SKIP_LOGS' as NOTIF_API_SKIP_LOGS includes it

Please let me know if you are looking for something else.