Skip Headers
Oracle® Identity Manager Administrative and User Console Guide
Release 9.0.3

Part Number B32450-01
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
View PDF

14 Reports

Based on whether you access current operational data or historical data, the reports you can generate using Oracle Identity Manager are divided into Operational Reports and Historical Reports. These reports describe the resources available to users.

This chapter discusses the following topics:

Overview of Operational Reports

The following sections describe the out-of-box operational reports in Oracle Identity Manager. These reports can be used by administrators and auditors for operational and compliance purposes.

Resource Access List

Queries all existing users provisioned to a resource.

Policy List

Displays a list of policies for a specified group.

Policy Detail

Displays complete details about specified policies.

Oracle Identity Manager Password Expiration

Lists user password expiration settings.

User Resource Access

Queries access rights for users that match specified query parameters.

Entitlements Summary

Lists the number of users for each status within each resource.

Attestation Requests by Process

Lists attestation requests by process.

Attestation Request Detail

Returns complete details of a specified attestation request.

Resource Password Expiration

Returns a list of users whose resource passwords are about to expire.

Group Membership

Lists the number of users in each group.

Attestation Process List

Lists all defined attestation processes.

Attestation Requests by Reviewer

Lists attestation requests by reviewer.

Group Membership Profile

Lists user group memberships.

Overview of Historical Reports

The following sections describe the out-of-box historical data reports in Oracle Identity Manager. These reports can be used by administrators and auditors for compliance and forensic auditing purposes.

User Membership History

Displays a istory of a user's group memberships.

User Resource Access History

Lists a user's resource access history over the lifecycle of the account.

Group Membership History

Displays a history of a group's memberships.

User Profile History

Lists a user's profile history over the lifecycle of the account.

Resource Access List History

Queries all users provisioned to a resource over its lifecycle.

Running Reports

To run a report:

  1. Expand the Reports link and click Operational Reports or Historical Reports.

    The resulting screen displays a list of all the reports of that type that are available to the user. The reports are listed in a table with the following fields:

    Field Description
    Report Name Shows the unique name of the operational report, which is also a link to input parameters for that report
    Report Code Identifies a unique alpha numeric code for the report
    Report Type Identifies the report type to help administrators organize their reports
    Description Provides a short description of the report

  2. Select a report by clicking on its name.

    The Report Input Parameters screen appears. This screen displays the input parameters that need to be provided to run a report. In some cases, at least one or more input parameter fields will be required fields. If this is not the case, you must populate at least one of the fields to run a report.

  3. Enter the information required to identify what information the report contains.

  4. Click the Submit button to run the report.

    The Report Display page appears.

Report Display

This page shows the report contents. Several display formats are available. The format information is included in the report metadata associated with each report. The display formats are:

By default, only 50 records appear on each page. This limit can be changed in the properties file. If there are multiple pages, the First, Previous, Next, and Last navigation links at the top and bottom of the page are active.

Filters

You can use a filter to narrow the search criteria for a report. By default, three filters appear as a menu and a text field. Select the type of data from the menu, then enter a filter string in the text field. The asterisk (*) wildcard character can be used in the filter text box. An asterisk represents any number of characters. For example, S*t will match Slashdot and Sat. Filter criteria that represent lookup fields such as user status, employee type, and so on have boxes from which you can select values.

Filters narrow down the existing report, they do not generate a new report. For example, if the report is run with input parameter as [First Name=j*] (return all records where the first name starts with 'j'), and it is filtered again with [Last Name=Smith], this returns only records that have a first name starting with j and a last name of Smith.

For historical reports that include user status as a filtering parameter, the search is performed on historical data. For example, specifying a filter criteria of [User Status=Active] returns all users who were active at some point in the past, even if they are currently disabled.

After creating the filter and clicking the Filter button, the resulting report is displayed on the same Report Display Page. The filter menu and text boxes will reflect the filter values that were provided. The Clear button clears the filter fields.

Change Input Parameters

The Change Input Parameters button returns you to the Input parameters page. The input parameter fields contain the information you already entered.

CSV Export

You can export all the report information as a single Comma Separated Values file, or CSV. Click the CSV Export button and at the prompt, choose to save the CSV file locally on your computer. By default, the name of the file is <report code>.csv.

Detail Page Links

The resource names and user IDs listed in the report may be links. Clicking these links opens a new Detail Page with more detailed information on that resource or user id.

Creating Reports Using Third-Party Software

Oracle Identity Manager supports the creation of reports using third-party tools such as Crystal Reports. You can use a third-party tool to create the operational reports listed in "Overview of Operational Reports" or the historical reports listed in "Overview of Historical Reports".

Note:

To learn how to create reports using third-party software, refer to the software documentation.