Oracle® Identity Manager Administrative and User Console Guide Release 9.0.3 Part Number B32450-01 |
|
|
View PDF |
Based on whether you access current operational data or historical data, the reports you can generate using Oracle Identity Manager are divided into Operational Reports and Historical Reports. These reports describe the resources available to users.
This chapter discusses the following topics:
The following sections describe the out-of-box operational reports in Oracle Identity Manager. These reports can be used by administrators and auditors for operational and compliance purposes.
Queries all existing users provisioned to a resource.
Displays a list of policies for a specified group.
Displays complete details about specified policies.
Oracle Identity Manager Password Expiration
Lists user password expiration settings.
Queries access rights for users that match specified query parameters.
Lists the number of users for each status within each resource.
Attestation Requests by Process
Lists attestation requests by process.
Returns complete details of a specified attestation request.
Returns a list of users whose resource passwords are about to expire.
Lists the number of users in each group.
Lists all defined attestation processes.
Attestation Requests by Reviewer
Lists attestation requests by reviewer.
Lists user group memberships.
The following sections describe the out-of-box historical data reports in Oracle Identity Manager. These reports can be used by administrators and auditors for compliance and forensic auditing purposes.
Displays a istory of a user's group memberships.
Lists a user's resource access history over the lifecycle of the account.
Displays a history of a group's memberships.
Lists a user's profile history over the lifecycle of the account.
Queries all users provisioned to a resource over its lifecycle.
To run a report:
Expand the Reports link and click Operational Reports or Historical Reports.
The resulting screen displays a list of all the reports of that type that are available to the user. The reports are listed in a table with the following fields:
Field | Description |
---|---|
Report Name | Shows the unique name of the operational report, which is also a link to input parameters for that report |
Report Code | Identifies a unique alpha numeric code for the report |
Report Type | Identifies the report type to help administrators organize their reports |
Description | Provides a short description of the report |
Select a report by clicking on its name.
The Report Input Parameters screen appears. This screen displays the input parameters that need to be provided to run a report. In some cases, at least one or more input parameter fields will be required fields. If this is not the case, you must populate at least one of the fields to run a report.
Enter the information required to identify what information the report contains.
Click the Submit button to run the report.
The Report Display page appears.
This page shows the report contents. Several display formats are available. The format information is included in the report metadata associated with each report. The display formats are:
Simple Table Format
Sectional Format
Sectional Format with Report Header
By default, only 50 records appear on each page. This limit can be changed in the properties file. If there are multiple pages, the First, Previous, Next, and Last navigation links at the top and bottom of the page are active.
You can use a filter to narrow the search criteria for a report. By default, three filters appear as a menu and a text field. Select the type of data from the menu, then enter a filter string in the text field. The asterisk (*) wildcard character can be used in the filter text box. An asterisk represents any number of characters. For example, S*t
will match Slashdot
and Sat
. Filter criteria that represent lookup fields such as user status, employee type, and so on have boxes from which you can select values.
Filters narrow down the existing report, they do not generate a new report. For example, if the report is run with input parameter as [First Name=j*]
(return all records where the first name starts with 'j'), and it is filtered again with [Last Name=Smith]
, this returns only records that have a first name starting with j and a last name of Smith.
For historical reports that include user status as a filtering parameter, the search is performed on historical data. For example, specifying a filter criteria of [User Status=Active]
returns all users who were active at some point in the past, even if they are currently disabled.
After creating the filter and clicking the Filter button, the resulting report is displayed on the same Report Display Page. The filter menu and text boxes will reflect the filter values that were provided. The Clear button clears the filter fields.
The Change Input Parameters button returns you to the Input parameters page. The input parameter fields contain the information you already entered.
You can export all the report information as a single Comma Separated Values file, or CSV. Click the CSV Export button and at the prompt, choose to save the CSV file locally on your computer. By default, the name of the file is <
report code
>.csv.
The resource names and user IDs listed in the report may be links. Clicking these links opens a new Detail Page with more detailed information on that resource or user id.
Oracle Identity Manager supports the creation of reports using third-party tools such as Crystal Reports. You can use a third-party tool to create the operational reports listed in "Overview of Operational Reports" or the historical reports listed in "Overview of Historical Reports".
Note:
To learn how to create reports using third-party software, refer to the software documentation.