Identity reports
The identity reports show information regarding identities in the system.
WID001 Identities
The Identities shows name, job title and status of each identity with the report scope. This report is an entry report for identity related reports and links to the Identity details report.
The report contains a trend graph, trend matrix, and an identities list:
- The identities trend graph shows changes to the number of identities in the period chosen for the report.
- The identities list trend matrix allows you to drill down to see number of identities per status and period chosen.
- The identity list shows the identities for the system.
WID001 fields
| Field | Description |
|---|---|
| Unique ID | The unique ID of the account. This field links to the Account details report. |
| First name | Name of the identity |
| Last name | Full name of the account |
| Job title | The job title. |
| Status | The status of the identity. |
WID001 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
| Max. items | The maximum number of returned items. By default this parameter is set to 100 items. Change to view more results. |
| Trend from | The from time used for the trend graph and matrix. Change the time to see data in another period. Click View Report to refresh after changing this parameter. |
| Category | This is the category for anything in the source system, for example “Employee” or “Contractor”. |
| Status | The status of the identity. This is anything that is imported from the source system, for example “Active” or “Disabled” or “Deleted”. |
| Type | The identity type, which is imported from the source system. |
| Unique ID | Use the unique ID parameter to search for an Identity unique ID of an identity. Click View Report to refresh after changing this parameter. Supports wildcards. |
| Last name | Use the Last name parameter to search for last name of an identity. Click View Report to refresh after changing this parameter. Supports wildcards. |
| The e-mail address of the identity. | |
| Job title | The job title of the identity. |
WID002 Identity details
The Identity details report shows details of an identity. The identity details report contains a trend graph, trend matrix, details section, accounts list, context assignments list, identity owner list, owned identities list, owned resources list and owned contexts lists. Not all these sections will be visible for each identity.
info
The Identity details report can be accessed from any report that contains a reference to an identity.
WID002 fields
| Field | Description |
|---|---|
| Unique ID | The unique ID of the account. This field links to the Account details report. |
| First name | Name of the identity |
| Last name | Full name of the account |
| The email address. | |
| Job title | The job title. |
| Country | The country. |
| Company | The company |
| Employee ID | The employee ID. |
| Status | The status of the identity. |
| Risk level | The identity’s risk level, based on the risk score calculated |
| Risk score | Risk score calculated for the identity |
| Valid from | The date the identity is valid from. |
| Valid to | The date the identity is valid to. |
| Category | Identity category, for example, “Employee or “Contractor, but can be any category used in the HR source system. |
| Type | Identity type, for example, “Primary” or “Secondary”, but can be any type used in the HR source system. When identities have been imported through SAP, type is mapped to the SAP employee field INF01EGROUP. |
| Resource assignments | Shows number of resource assignments the identity had at the effective time. This field links to the Resource assignments list. |
| Classification | The classification of the identity. |
WID002 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
| Trend from | The from time used for the trend graph and matrix. Change the time to see data from another period. Click View Report after changing this parameter to refresh. |
| Include indirect resources assignments | Default value is set to False. |
| Show trend | Default value is set to False. |
WID003 Identity change log
This report shows changes to attributes for an identity during a chosen period.
info
The report can only be accessed from Identity details report.
WID003 fields
| Field | Description |
|---|---|
| Change time | Shows the change time of the identity. |
| Attribute | This column lists the attributes that were changed for the identity at the change time. |
| Old value | Shows the old values of the identity, before its attributes were changed. |
| New value | Shows the new value of the attribute. |
WID003 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time. Click View Report to refresh after changing this parameter. |
WID004 Identity resource assignment list
The identity resource assignments list report shows all resource assignments (within the scope of the report) for an identity. The Identity resource assignments list report contains a resource assignments list.
info
The report can only be accessed from the Identity details report.
WID004 fields
| Field | Description |
|---|---|
| Color icon | Left side color coding indicates compliance status. If the Role and Policy Engine is not used, the color icon shows approval state.Red indicates rejected or not attested; green indicates approved. This field links to the Resource assignment details report. |
| Account | Account the assignment is for. This field links to the Account details report. |
| Account source | The system that contains the account. |
| Type | Account type. Shows whether the account is a personal account or not. |
| Status | The status of the resource assignment. |
| Compliance status | Shows the compliance status as calculated by the Omada Identity Role and Policy Engine. The possible values are: Explicitly Approved Implicitly Approved Not Approved Orphan Assignment Pending Deprovisioning In Violation Implicitly Assigned None |
| Reason | Shows the reason for the resource assignment, as calculated in the Role and Policy Engine. If the Role and Policy Engine is not used, the Reason field indicates if the resource assignment is implicit or explicit. n implicit resource assignment is associated with an identity through a reference, for example a context assignment. Assignments to resources that are child resources are also implicit resource assignments. |
| System | The name of the system the resource assignment is for. This field links to the system details report. |
| Source | The source system the resource has been imported through. |
WID004 parameters
| Parameter | Description |
|---|---|
| Effective time | The time the report is effective. Change the time to see a snapshot for another time.Click View Report to refresh after changing this parameter. |
| Trend from | The from time used for the trend graph and matrix.Change the time to see data from another period. Click View Report after changing this parameter to refresh. |
| Max.items | The maximum number of returned items.By default this parameter is set to 100 items. Change to view more results. |
| Resource | Use the Resource parameter to search for a resource assignment for a particular resource. This searches the Resource column.Supports wildcards. |
WID005 Accounts in period for identity
This report shows accounts for an identity within a given period.
info
The report can only be accessed from Identity details report.
WID005 fields
| Field | Description |
|---|---|
| Account | Account name. This field links to the Account details report. |
| System | The system the account belongs to. This field links to the System details report. |
| Status | Account status. |
| Approval state | Shows if the account has been recertified in an attestation survey. If recertified the field will show approval state (Approved or Rejected), approver and the time of recertification. |
| Compliance status | Shows the compliance status as calculated by the Omada Identity Role and Policy Engine. The possible values are: Explicitly Approved Implicitly Approved * Not Approved Orphan Assignment Pending Deprovisioning In Violation Implicitly Assigned None |
| Reason | Shows the reason for the resource assignment, as calculated in the Role and Policy Engine. If the Role and Policy Engine is not used the Reason field indicates if the resource assignment is implicit or explicit. An implicit resource assignment is associated with an identity through a reference, for example a context assignment.Assignments to resources that are child resources are also implicit resource assignments. |
WID005 parameters
| Parameter | Description |
|---|---|
| Effective time (to) (required) | The time the report is effective. Change the time to see data for another period. Click View Report to refresh after changing this parameter. |
| Effective time (from) (required) | The from time used for the report. Change the time to see data for another period. Click View Report to refresh after changing this parameter. |
| Max.items | The maximum number of returned items. By default this parameter is set to 100 items. Change to view more results. |
| Status | Account status, use the drop down list to filter the results to a particular status. The available values are Active, All, Disabled, Enabled and Inactive. Click View Report to refresh after changing this parameter. |
| Account | Use the Account parameter to search for a particular account. This searches the account column. Supports wildcards. |
WID006 Accounts log for identity
The Accounts log for identity shows any changes to accounts within the report scope. There may be more than one entry for the same account. Whenever a change is made to an account a new line is created, but the expired row is also shown in the report.
info
The report can only be accessed from the trend graph in the Identity details report. The report will have the time parameters set to the period chosen in the line. If no changes have been made in that period, the report will not show any data.
WID006 fields
| Field | Description |
|---|---|
| Action | Action for the row. Can be Created or Expired. |
| Account | Account unique ID. This field links to the Account details report. |
| System | System the account belongs to. This field links to the system details report. |
| Approval state | Shows if the account has been recertified in an attestation survey. If recertified the field will show approval state (Approved or Rejected), approver and the time of recertification. |
| Compliance status | Shows the compliance status as calculated by the Omada Identity Role and Policy Engine. The possible values are: Explicitly Approved Implicitly Approved Not Approved Orphan Assignment Pending Deprovisioning In Violation Implicitly Assigned None |
| Effective time | The time of the change. |
| Expiration time | The time the row expired, or the valid to date for effective rows. |