BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AU-06(07) Permitted Actions

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded AU part of AU-6

Title

Permitted Actions

Control

Specify the permitted actions for each [Selection (one or more): system process; role; user] associated with the review, analysis, and reporting of audit record information.

Discussion

Organizations specify permitted actions for system processes, roles, and users associated with the review, analysis, and reporting of audit records through system account management activities. Specifying permitted actions on audit record information is a way to enforce the principle of least privilege. Permitted actions are enforced by the system and include read, write, execute, append, and delete.

Parameters

au-06.07_odp: [system process; role; user]

Assessment objective

AU-06(07) the permitted actions for each [Selection (one or more): system process; role; user] associated with the review, analysis, and reporting of audit record information are specified.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).