From ee0c8cbbc05a8eada4d4362072925cacb2caa48a Mon Sep 17 00:00:00 2001 From: Tay Caliguiri Date: Thu, 26 Feb 2026 11:35:56 -0500 Subject: [PATCH 1/3] Update okta.md (#318) "WsFederationMetadata" was listed twice instead of "WsFederationReply" --- docs/accessanalyzer/12.0/install/application/reports/okta.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/accessanalyzer/12.0/install/application/reports/okta.md b/docs/accessanalyzer/12.0/install/application/reports/okta.md index 6d1492972b..4d3ffa765f 100644 --- a/docs/accessanalyzer/12.0/install/application/reports/okta.md +++ b/docs/accessanalyzer/12.0/install/application/reports/okta.md @@ -82,7 +82,7 @@ Access Analyzer Okta application. Analyzer server and port into the **Webserver.exe.config** file as: ``` - + ``` **Step 4 –** Restart the Access Analyzer Web Server. From 06a3a0b4e2214d27a083fcd6e86406302b387776 Mon Sep 17 00:00:00 2001 From: pavelshabanov2025 Date: Fri, 27 Feb 2026 00:05:54 +0500 Subject: [PATCH 2/3] Update 'When' field description with datetime formats (#315) * Update 'When' field description with datetime formats Clarified the datetime formats supported for the 'When' field in the Activity Record reference. * Apply suggestion from @github-actions[bot] Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Apply suggestion from @github-actions[bot] Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: Konstantin Melnikov Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- docs/auditor/10.8/api/activityrecordreference.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/auditor/10.8/api/activityrecordreference.md b/docs/auditor/10.8/api/activityrecordreference.md index c7e30d4c70..4d19baaa7a 100644 --- a/docs/auditor/10.8/api/activityrecordreference.md +++ b/docs/auditor/10.8/api/activityrecordreference.md @@ -18,9 +18,9 @@ Records. | Who | Yes | nvarchar 255 | A specific user who made the change (e.g., _Enterprise\ Administrator_, _Admin@enterprise.onmicrosoft.com_). | | Action | Yes | — | Activity captured by Auditor (varies depending on the data source). | | What | Yes | nvarchar max | A specific object that was changed (e.g., _NewPolicy_). | -| When | Yes | dateTime | The moment when the change occurred. When supports the following datetime formats. | -| Where | Yes | nvarchar 255 | A resource where the change was made (e.g., _Enterprise-SQL_, _FileStorage.enterprise.local_). The resource name can be a FQDN or NETBIOS server name, Active Directory domain or container, SQL Server instance, SharePoint farm, VMware host, etc. | -| ObjectType | Yes | nvarchar 255 | A type of affected object or its class (e.g., user, mailbox). | +| When | Yes | dateTime | The moment when the change occurred. This field supports the following datetime formats: `YYYY-MM-DDTHH:mm:ssZ` (UTC), `YYYY-MM-DDTHH:mm:ss+HH:mm` (positive UTC offset), and `YYYY-MM-DDTHH:mm:ss-HH:mm` (negative UTC offset). | +| Where | Yes | nvarchar 255 | A resource where the change was made (e.g., _Enterprise-SQL_, _FileStorage.enterprise.local_). The resource name can be a FQDN or NetBIOS server name, Active Directory domain or container, SQL Server instance, SharePoint farm, VMware host, etc. | +| ObjectType | Yes | nvarchar 255 | A type of affected object or its class (e.g., _user_, _mailbox_). | | Monitoring Plan | No | nvarchar 255 | The Auditor object that is responsible for monitoring a given data source and item. Sub-elements: Name and ID. If you provide a monitoring plan name for input Activity Records, ensure the plan is created in Auditor, the Netwrix API data source is added to the plan, and enabled for monitoring. This ensures data is written to the database associated with this plan. | | DataSource | No | nvarchar max | IT infrastructure monitored with Auditor (e.g., _Active Directory_). For input Activity Records, the data source is automatically set to Netwrix API. | | Item | No | nvarchar max | The exact object that is monitored (e.g., a domain name, SharePoint farm name) or integration name. Sub-element: Name. The item type is added inside the name value in brackets (e.g., _enterprise.local (Domain)_). For input Activity Records, the type is automatically set to Integration, you do not need to provide it. The output Activity Records may contain various item types depending on the monitoring plan configuration:
  • AD container
  • NetApp
  • Computer
  • Office 365 tenant
  • Domain
  • Oracle Database instance
  • EMC Isilon
  • SharePoint farm
  • Dell VNX/VNXe
  • SQL Server instance
  • Integration
  • VMware ESX/ESXi/vCenter
  • IP range
  • Windows file share. If you provide an item name for input Activity Records, ensure this item is included in the monitoring plan within the Netwrix API data source. If you specify an item that does not exist, data will be written to the plan's database anyway but will not be available for search using the Item filter.
| From 88a23ea7ce193c0943cab58f9743c731ef299872 Mon Sep 17 00:00:00 2001 From: james-haytko_nwx Date: Thu, 26 Feb 2026 14:01:54 -0600 Subject: [PATCH 3/3] Switch documentation reviewer to claude-opus-4-6 Opus is significantly more thorough at careful editorial work than Sonnet, which should reduce the number of preexisting issues missed in each review. Generated with AI Co-Authored-By: Claude Code --- .github/workflows/claude-documentation-reviewer.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/claude-documentation-reviewer.yml b/.github/workflows/claude-documentation-reviewer.yml index e570d326dc..d6c6602d28 100644 --- a/.github/workflows/claude-documentation-reviewer.yml +++ b/.github/workflows/claude-documentation-reviewer.yml @@ -108,7 +108,7 @@ jobs: Then fix ALL issues directly in the files using the Write and Edit tools. Do not post a PR comment. Do not commit or push. claude_args: | - --model claude-sonnet-4-5-20250929 + --model claude-opus-4-6 --allowedTools "Read,Write,Edit,Bash(gh pr view:*),Bash(gh pr diff:*)" --append-system-prompt "${{ steps.read-prompt.outputs.prompt }}"