Skip to main content
Version: Cloud

Access Navigator

Overview​

The purpose of the Access Navigator dashboard is to analyze the overall access that identities have.

This dashboard is divided into six tabs that let you gain insight into the access information from the perspective of:

Widgets​

Each tab contains different kinds of widgets that display valuable access information in the form of charts and tables.

jumpable widgets

Whenever there is an opening icon on a widget, it means it is jumpable, that is, it lets you jump from a particular item to a different tab in order to access more details:

To jump from a widget to a dashboard, right-click on an item, select Jump to >, and select the dashboard you want to view.

Widgets differ on every tab. The only widget that appears on every tab is Identity list, a jumpable table from which you can access, for example, the Identity Details dashboard.

For instance, if you select the Systems tab, go to the Identity list table, and select an item (by right-clicking on it), you can jump to the Identity Details dashboard:

Identity Details dashboard​

info

This was previously a separate dashboard named Identity Details, and now is a jump-to dashboard as part of the Access Navigator.

Within the Identity Details dashboard, you can view a variety of charts and tables grouped into three tabs:

Overview

Account Overview

Identity Details

tip

Some of the widgets displayed on these tabs are also jumpable, allowing you to drill into even more details.

Filtering​

The information displayed on each tab changes according to the filtering that you apply. For example, if you select any job title on the Identities tab, or any system on the Systems tab, the information on other tabs reflects the same filtering (until you change or clear it).

Filtering options

You can enable filtering:

  • by clicking on any chosen item (on any widget or chart), for example, a particular job title

  • by right-clicking on an item and clicking Select:

    tip

    If you want to select more than one item to filter by, press the Control button and select as many items as you need:

  • by selecting an item in the right pane:

You can also edit filters by clicking on the pencil icon which appears when you hover over the top right corner of the rectangle:

Then, you can select from a variety of options such as "Is not", "Contains", or "Is not empty":

You can also disable filtering in a number of ways, for example:

  • By disabling the toggle:

  • By selecting Clear selection, which appears in the top right corner of a widget when you hover over it:

When your filtering is applied, the data immediately gets rearranged according to the filter, for example:

You can also reset filtering in the right pane:

Tabs​

Identities tab​

This tab shows information related to identities that have particular access.

It contains 4 widgets:

  • Identity status – shows the percentage of active and other identities.

  • Identity category – shows the number of identities belonging to particular categories (for example, employee, contractor, N/A).

  • Identity type – shows the number of identities belonging to particular types.

  • Job title – shows statistics related to job titles.

  • Identity list – a widget that shows the same data as above and more, including the Identity UID, number of assignments, accounts, resources, and contexts.

note

This is a jumpable widget. Within it, you can select an item (by right-clicking on it) and jump to a number of other dashboards, where you can access even more details about identities as well as their accounts and assignments:

  • Identity Details (described in the Widgets section)
  • Identity Change Log
  • Accounts on Date
  • Accounts Log for Identity
  • Assignments in Period
  • Assignments Change Log

Systems tab​

This tab shows information related to the systems that the identities have access to.

It contains 4 widgets:

  • Systems – shows how many identities have access to particular systems.

  • System classifications – divides systems into critical and non-critical in terms of compliance.

  • Identity list (system) – a jumpable widget that shows a list of identities having a particular number of assignments within a particular number of systems.

    note

    You can jump from this widget to the Identity Details dashboard (described in the Widgets section) and to two more dashboards: Identity Change Log and Accounts on Date.

  • Systems overview – This table displays the last import date of a particular system, the number of identities, accounts, resources, and assignments in that system, and the percentage of compliance.

    note

    You can jump from this widget to the System Details dashboard:

Resource Assignments tab​

This tab shows information related to the resource assignments that the identities have.

info

This tab was previously a separate dashboard named Resource Assignments.

It contains 8 widgets:

  • Total resource assignments – shows the total number of assignments and assigned resources.

  • Assignment history – displays the dates on which assignments were made. In the drop-down menu, you can switch from days to weeks, months, quarters, and years.

  • Identity list (assignments) – a jumpable widget that shows a list of identities having a particular number of assignments and resources.

    note

    You can jump from this widget to the Identity Details dashboard (described in the Widgets section) and to two more dashboards: Identity Change Log and Accounts on Date.

  • Overall compliance level – shows the percentage of compliance.

  • Compliance status – shows how compliant the implicitly approved and explicitly approved resource assignments are.

  • Reasons – shows the statistics related to reasons of assignments (including actual direct, policy, direct).

  • Resource clasifications – shows the statistics related to the classifications of resources.

  • Assignment details – a jumpable widget that displays all the details related to assignments: the Identity UID, Identity Name, System Name, Resource Name, Compliance Status, and more.

    note

    You can jump from this widget to two dashboards: Assignments in period and Assignments Change Log, where you can access even more details about assignments.

Contexts tab​

This tab shows information related to the contexts in which there are particular assignments.

It contains 4 widgets:

  • Context type – shows the percentage of context types (for example, OrgUnit) to which particular assignments belong.

  • Top contexts by number of context assignments – shows the statistics related to contexts to which context assignments belong.

  • Identity list (context) – a jumpable widget that shows a list of identities having a particular number of assignments in a particular number of contexts.

    note

    You can jump from this widget to the Identity Details dashboard (described in the Widgets section) and to two more dashboards: Identity Change Log and Accounts on Date.

  • Context details - a jumpable widget that lists all the details related to contexts: context name, context short name, context type, context subtype, parent context name, context owner name, context owner UID, number of assignments.

    note

    You can jump from this widget to the Context Details dashboard:

Accounts tab​

This tab shows information related to the accounts that have particular access.

It contains 4 widgets:

  • Account type – shows the percentage of account types (for example, personal accounts).

  • Account compliance status – shows the percentage of compliance of assignments made to particular accounts (for example, orphan assignments, pending deprovisioning, or not approved).

  • Identity list (account) – a jumpable widget that shows a list of identities that have a particular number of assignments and particular number of accounts.

    note

    You can jump from this widget to the Identity Details dashboard (described in the Widgets section) and to two more dashboards: Identity Change Log and Accounts on Date.

  • Account list – a jumpable widget that lists all the details related to accounts: account Unique ID, account name, account owner, account type, account category, account compliance status, reasons.

    note

    You can jump from this widget to four dashboards: Account Details, Account Log, Assignments in Period, and Assignments Change Log, where you can access even more details.

Resources tab​

This tab shows information related to resources.

It contains 4 widgets:

  • Resource category – shows the percentage of resource categories.

  • Resource types – shows the numbers of particular resource types.

  • Identity list (resource) – a jumpable widget that shows a list of identities that have a particular number of assignments and particular number of resources.

    note

    You can jump from this widget to the Identity Details dashboard (described in the Widgets section) and to two more dashboards: Identity Change Log and Accounts on Date.

  • Resources – a jumpable widget that lists all the details related to resources: resource name, system name, resource category, resource type, number of assignments, percentage of compliance.

    note

    You can jump from this widget to three dashboards: Resource Details, Assignments in Period, Assignments change Log, where you can access even more details.