Shared Services Administrators and Provisioning Managers can use the reporting capabilities of the Shared Services Console to review the provisioning data of users and roles. Provisioning reports can contain information on users assigned to roles from selected applications, and roles from selected applications assigned to users. The report also contains inheritance information that shows the sequence of inheritance starting with the original group or role that was responsible for granting the provisioned role to the user.
Provisioning reports enable administrators to review the access rights and permissions granted to users across EPM System applications, which helps track user access for compliance reporting.
If the WORLD group of Native Directory is provisioned, roles inherited from the WORLD group are included in provisioning report only if the report is generated for users or groups.
To generate provisioning reports:
Log in to the Shared Services Console. See Launching Shared Services Console.
Select a user or role. See Searching for Users, Groups, Roles, and Delegated Lists.
Enter report generation parameters.
Table 15. View Report Screen
Label | Description |
---|---|
Find All | Select the object type (user, group, or role) for which the report is to be generated. |
For Users or For Roles | The label of this changes depending on what is selected in Find All. |
Filter By | The criterion to use to filter the report data. |
Show Effective Roles | Select Yes to report on all effective roles (inherited as well as directly assigned). Inherited roles (as opposed to directly assigned roles) are assigned to groups to which the user or group belongs. Select No to report only on directly assigned roles. |
Group By | Select how to group the data in the report. Available grouping criteria depend on the selection in Find All. |
Results Per Page | Number of report results to display in a page. Default is 500. |
In Application | Select the applications from which provisioning data is to be reported, or select Select All to report on all applications. Note: You can report only on the applications belonging to an application group. |
Optional: Click Export to CSV to export the report into a Comma Separated Value (CSV) file.