14 Working with Reports

You can generate operational and historical data reports by using Oracle Identity Manager. These reports provide information about the resources available to Oracle Identity Manager users.

This chapter discusses the following topics:

Note:

The Oracle Identity Manager reporting engine is not meant to be a replacement for enterprise reporting solutions. The Oracle Identity Manager reporting engine is not optimized for very large data volume and does not provide the rich features you would find in an enterprise reporting application.

For large-scale deployments, especially those taking advantage of the extensive auditing capabilities of Oracle Identity Manager, it is highly recommended that you deploy a dedicated enterprise-class reporting solution. A solution based on tools such as Oracle Business Intelligence Enterprise Edition can provide the flexibility, automation, and performance required for a large-scale organization.

Overview of Operational Reports
Overview of Historical Reports
Running Reports
Display of Data in Report
Using Report Filters
Change Input Parameters
CSV Export
Detail Page Links
Creating Reports Using Third-Party Software

14.1 Overview of Operational Reports

The following sections describe the default operational reports in Oracle Identity Manager. These reports can be used by Oracle Identity Manager administrators and auditors for operational and compliance purposes.

Table 14-1 lists the operational reports available in the Administrative and User Console.

Table 14-1 List of Operational Reports

Name	Description
Entitlements Summary	Lists the number of users for each status type within each resource.
Policy List	Displays a snapshot of all policies defined within the system.
Delegated Administrators By Organization	Lists all the delegated administrator user groups for organizations.
Attestation Requests by Reviewer	Lists attestation requests by reviewer.
Approval Status By Approver	Provides a summary of all approval tasks.
User Resource Access	Lists the access rights to resources for selected users.
Resource Access List	Lists all users who have access to a selected resource.
Policy Detail	Lists complete details about specific policies defined within the system.
Group Membership Profile	Lists the number of users in different numbers of groups.
OIM Password Expiration	Lists users whose Oracle Identity Manager passwords are about to expire.
Group Membership	Provides a snapshot of users in each group.
Resource Password Expiration	Lists users whose resource passwords are about to expire (as determined by Oracle Identity Manager).
Organization Structure	Lists the hierarchical organization structure and user memberships.
Requests Initiated	Lists all requests initiated in a specified time interval.
Requests Details By Status	Returns details of all requests with a specified status.
Attestation Process List	Provides a snapshot of all defined attestation processes.
Attestation Requests by Process	Lists attestation requests by process.
Attestation Request Detail	Lists complete details of selected attestation requests.
Financially Significant Resources	Lists complete details of financially significant resources.
Delegated Administrators & Permissions By Organization	Lists all administrator user groups and permissions for organizations.
Delegated Administrators & Permissions By Resource	Lists all administrator user groups and permissions for resources.
Delegated Administrators By Resource	Lists all administrator and authorizer user groups for resources.

14.2 Overview of Historical Reports

The following sections describe the historical data reports in Oracle Identity Manager. These reports can be used by administrators and auditors for compliance and auditing purposes.

Table 14-2 lists the historical reports that are available in the Administrative and User Console.

Table 14-2 List of Historical Reports

Name	Description
User Resource Access History	Returns the history of a user's resource access.
Resource Access List History	Returns a history of all users who have had access to a selected resource.
User Profile History	Returns the history of a user's profile.
User Membership History	Returns the history of a user's memberships in a user group.
Group Membership History	Returns the history of a group's memberships.
Resource Activity	Returns the history of all provisioning and approval activities for a resource.
Task Assignment History	Returns the history of all task assignment based on the tasks.
Password Reset Success Failure	Returns the password change metrics for Oracle Identity Manager users.
Account Activity In Resource	Lists all account activities in each resource.
Rogue Accounts By Resource	Lists all the rogue accounts in each resource. Note: This report is available only if the exception reporting feature is enabled. For more information, see Chapter 5, "Oracle Identity Manager Reporting" of Oracle Identity Manager Audit Report Developer's Guide.
Fine Grained Entitlement Exceptions By Resource	Lists all fine-grained entitlement exceptions associated with a resource. Note: This report is available only if the exception reporting feature is enabled. For more information, see Chapter 5, "Oracle Identity Manager Reporting" of Oracle Identity Manager Audit Report Developer's Guide.
Users Created	Lists all users created in a specified time interval.
Users Deleted	Lists all users deleted in a specified time interval.
Users Disabled	Lists all users disabled in a specified time interval.
Users Unlocked	Lists all users (accounts) unlocked in a specified time interval.

14.3 Running Reports

To run a report:

In the left navigation pane, click Reports, and then click Operational Reports or Historical Reports.

The resulting page displays a list of all the reports of that type that are available to the user. The reports are listed in a table with the following fields:

Field	Description
Report Name	Shows the unique name of the operational report, which is also a link to input parameters for that report
Report Code	Identifies a unique alpha numeric code for the report
Report Type	Identifies the report type to help administrators organize their reports
Report Description	Provides a short description of the report

Select a report by clicking its name.

The Report Input Parameters page is displayed. This page displays the input parameters that must be provided to run a report. In some cases, at least one or more input parameter fields are required fields. If this is not the case, then you must populate at least one of the fields to run a report.

Note:
A few reports, for example, the Delegated Administrators & Permissions By Resource and Delegated Administrators & Permissions By Organization reports do not require any input parameters to run.
Enter the information required to identify what information the report contains.
Click Submit to run the report.

The Report Display page is displayed.

14.4 Display of Data in Report

The Report Display page shows the report contents. Several display formats are available. The format information is included in the report metadata associated with each report. The display formats are:

Tabular Format
Sectional Format
Sectional with Header Format

By default, only 50 records appear on each page. This limit can be changed in the properties file. If there are multiple pages, the First, Previous, Next, and Last navigation links at the top and bottom of the page are active.

14.5 Using Report Filters

You can use a filter to narrow the search criteria for a report. By default, the filters appear as a menu and a text field. Select the type of data from the menu, and then enter a filter string in the text field. The asterisk (*) wildcard character can be used in the filter field. An asterisk represents any number of characters. For example, S*t will match Slashdot and Sat. Filter criteria that represent lookup fields, such as user status and employee type, have boxes from which you can select values.

Filters narrow down the existing report, they do not generate a new report. For example, if the report is run with the input parameter as [First Name=j*] (return all records where the first name starts with 'j'), and it is filtered again with [Last Name=Smith], then the report returns only records that have a first name starting with j and a last name of Smith.

For historical reports that include user status as a filtering parameter, the search is performed on historical data. For example, specifying a filter criterion of [User Status=Active] returns all users who were active at some point in the past, even if they are currently system administrators.

After you create the filter and click Filter, the resulting report is displayed on the same Report Display page. The filter menu and fields reflect the filter values that were provided. Clicking Clear empties the filter fields.

14.6 Change Input Parameters

Click Change Input Parameters to return to the Input Parameters page. The input parameter fields contain the information you already entered.

14.7 CSV Export

You can export all the report information as a single Comma Separated Values file, or CSV. Click CSV Export and at the prompt, choose to save the CSV file locally on your computer. By default, the name of the file is report code.csv.

14.8 Detail Page Links

The resource names and user IDs listed in the report may be links. Clicking these links opens a new Detail page with more detailed information about that resource or user ID.

14.9 Creating Reports Using Third-Party Software

Oracle Identity Manager supports the creation of reports by using third-party tools such as Crystal Reports. You can use a third-party tool to create the operational reports listed in "Overview of Operational Reports" or the historical reports listed in "Overview of Historical Reports".

Note:

To learn how to create reports by using third-party software, see the third-party software documentation.