Tables in the Identity Audit Module

This chapter describes the tables that make up the Identity Audit module.

IDA_POLICIES Table

Structure

IDA_POLICIES PK ID U1 RULESET_ID POLICY_NAME EXCEPTION_SEVERITY OWNER OWNER_ID REMEDIATOR REMEDIATOR_ID

Index

Index PK Unique Keys PK_IDA_POLICIES      ✓ Yes ID IX_IDA_POLICY_NAMES Yes POLICY_NAME

Description

The Identity Audit (IDA) module identifies policy violations and the IDA_POLICES table stores a collection of rules defined by the RULE_SETS table. Every policy stored in this table has an OWNER and a REMEDIATOR.

Primary Keys

PK_IDA_POLICIES - primary key on column ID

Foreign Keys

None

Indexes

IX_IDA_POLICY_NAMES - unique index on column POLICY_NAME

IDA_POLICY_VIOLATIONS Table

Structure

IDA_POLICY_VIOLATIONS PK ID IDA_POLICY_ID USER_ID LASTDATE_DETECTED DETECTION_COUNT CLOSE_DATE MITIGATION_EXPIRATION_DATE COMMENTS POLICY_VIOLATION_STATE SEVERITY ASSIGNED_TO_DATE ASSIGNED_TO ASSIGNED_TO_ID CURRENT_TRAIL_ID CREATEUSER UPDATEUSER CREATEDATE UPDATEDATE REMINDER_COUNT LAST_REMINDER_DATE CREATE_SCAN_ID

Index

Index PK Unique Keys PK_IDA_POLICY_VIOLATIONS      ✓ Yes ID

Description

The IDA_POLICY_VIOLATIONS table holds information about policy violations detected by an identity audit scan. Each entry has a unique ID and the following fields: IDA_POLICY_ID, USER_ID, LASTDATE_DETECTED, DETECTION_COUNT, POLICY_VIOLATION_STATE, SEVERITY (1-High, 2-Medium, 3-Low), CREATEDATE, and UPDATEDATE. The POLICY_VIOLATION_STATE stores the state of the violation in the form of an integer that can have the following values: 1-Open, 2-Closed, 3-Remediated, or 4-Mitigated.

Primary Keys

PK_IDA_POLICY_VIOLATIONS - primary key on column ID

Foreign Keys

None

Indexes

None

IDA_POLICY_VIOLATION_CAUSES Table

Structure

IDA_POLICY_VIOLATION_CAUSES PK ID IDA_POLICY_VIOLATION_ID IDA_RULE_ID IDA_RULE_VERSION_ID RBACX_OBJECT_ID RBACX_OBJECT_TYPE DESCRIPTION STATUS

Index

Index PK Unique Keys PK_IDA_POLICY_VIOLATION_CAUSES      ✓ Yes ID

Description

The IDA_POLICY_VIOLATION_CAUSES table holds information about the causes behind policy violations as detected by an identity audit scan. Each entry has a unique ID. The IDA_POLICY_VIOLATION_ID field is derived from the IDA_POLICY_VIOLATION table. The IDA_RULE_ID and IDA_RULE_VERSION_ID fields contain information about the rule set that the policy was run against, whereas the RBACX_OBJECT_ID and RBACX_OBJECT_TYPE fields store information about the Oracle Identity Analytics object against which the policy violation was detected. Additional information, such as the DESCRIPTION of the policy violation cause and the policy violation STATUS are also stored in this table.

Primary Keys

PK_IDA_POLICY_VIOLATION_CAUSES - primary key on column ID

Foreign Keys

None

Indexes

None

IDA_SCANS Table

Structure

IDA_SCANS PK ID NAME SCAN_TYPE STATUS_ID RESULT_APPLIED DESCRIPTION CREATE_USER CREATE_DATE UPDATE_DATE RUN_COMPLETE_DATE NEXT_RUN_DATE CRON_EXPRESSION USER_COUNT VIOLATION_COUNT CONFIGURATION_XML DATA_XML

Index

Index PK Unique Keys PK_IDA_SCANS      ✓ Yes ID

Description

The IDA_SCANS table saves information about the audit scans that are run in Oracle Identity Analytics. Every scan is identified by a unique ID from the IDA_SCANS table. This table also saves information like NAME, SCAN_TYPE, STATUS_ID, and DESCRIPTION. The RESULT_APPLIED field indicates if the scan was executed (run) or just previewed. When the scan is scheduled to run periodically, information is maintained in this table in the following fields: CREATE_USER, CREATE_DATE, UPDATE_DATE, RUN_COMPLETE_DATE, and NEXT_RUN_DATE. The USER_COUNT field contains the number of users that were scanned, whereas the VIOLATION_COUNT field contains the number of violations detected as a result of the scan run. The configuration information regarding each scan is saved as XML in the CONFIGURATION_XML field, and the scan data information is saved in the DATA_XML field.

Primary Key

PK_IDA_SCANS - primary key on column ID

Foreign Key

None

Indexes

None

IDA_POLICY_VIOLATIONS_TRAILS Table

Structure

IDA_POLICY_VIOLATIONS_TRAILS PK ID IDA_POLICY_VIOLATIONS_ID COMMENTS POLICY_VIOLATION_STATE ASSIGNED_TO CREATEUSER CREATEDATE

Index

Index PK Unique Keys PK_IDA_POLICY_VIOLATIONS_TRAILS      ✓ Yes ID

Description

The IDA_POLICY_VIOLATIONS_TRAILS table stores the steps taken by an actor (that is, the Oracle Identity Analytics user) to resolve a policy violation detected during an identity audit scan.

Primary Keys

PK_IDA_POLICY_VIOLATIONS_TRAILS - primary key on column ID

Foreign Keys

None

Indexes

None

IDA_POLICY_VIOLATION_PREVIEWS Table

Structure

IDA_POLICY_VIOLATION_PREVIEWS PK ID IDA_POLICY_VIOLATION_ID IDA_POLICY_ID USER_ID SEVERITY POLICY_VIOLATION_STATE CREATEDATE CREATE_SCAN_ID

Index

Index PK Unique Keys IDA_POLICY_VIOLATION_PREVIEWS      ✓ Yes ID

Description

The IDA_POLICY_VIOLATION_PREVIEWS table saves violation information that the user can preview without running the actual scan. Each entry has the following fields: IDA_POLICY_VIOLATION_ID, IDA_POLICY_ID, USER_ID, POLICY_VIOLATION_STATE, SEVERITY (1-High, 2-Medium, 3-Low), CREATEDATE, and CREATE_SCAN_ID. The POLICY_VIOLATION_STATE field stores the state of the violation in the form of an integer that can have the following values: 1-Open, 2-Closed, 3-Remediated, or 4-Mitigated.

Primary Keys

PK_IDA_VIOLATION_PREVIEWS - primary key on column ID

Foreign Keys

None

Indexes

None

IDA_VIOLATION_PREVIEW_CAUSES Table

Structure

IDA_VIOLATION_PREVIEW_CAUSES PK ID IDA_POLICY_VIOLATION_ID IDA_RULE_ID IDA_RULE_VERSION_ID RBACX_OBJECT_ID RBACX_OBJECT_TYPE DESCRIPTION STATUS

Index

Index PK Unique Keys PK_IDA_VIOLATION_PREVIEW_CAUSES      ✓ Yes ID

Description

The IDA_VIOLATION_PREVIEW_CAUSES table saves information about the causes behind policy violations as detected during identity audit policy previews. Each entry has a unique ID. The IDA_POLICY_VIOLATION_ID field is derived from the IDA_POLICY_VIOLATION_PREVIEW table. The IDA_RULE_ID and IDA_RULE_VERSION_ID fields contain information about the rule set that the policy was run against, whereas the RBACX_OBJECT_ID and RBACX_OBJECT_TYPE fields give information about the Oracle Identity Analytics object against which the policy violation was detected. Additional information, such as the DESCRIPTION of the policy violation cause and the STATUS of the policy violation, is also stored in this table.

Primary Keys

PK_IDA_VIOLATION_PREVIEW_CAUSES - primary key on column ID

Foreign Keys

None

Indexes

None