Access Review Decision Report

The Access Review Decision Report includes information about the decisions made by certifiers for all items in non-archived access reviews that match the report criteria.

Report results are presented in several pages. The first page shows a summary, divided into two sections:

  • The Certification Statistics section shows a count of certifications of each type and the number of certification entities (e.g. identities, roles, account groups) and unique entities included in each certification category;

  • The Decision Statistics section shows the number of approved items, revoked items, allowed exceptions, and total decisions for each type of certification item type.

The pages following the summary show details of each access review in the report, displaying each certification entity and all certification items with the decisions that are currently recorded for each. The Decision Maker shows the user who actually made the certification decision, which may be someone other than the original certifier if the review was delegated, reassigned, or forwarded. The Decision column also indicates if the decision was made as part of a bulk certification, if that option was permitted by the installation's configuration.

This report is an archive-type report. Archive reports include end-of-period and task information that is formatted for easy dissemination of key audit information. Due to the large amount of data that is generated, the best option is to export the report results to a PDF file.

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For more information on Standard Properties, see Standard Report Properties.

For more information on Report Layout, see Report Layout.

For step by step instructions on creating or editing a report, see Working With Reports.

Report Criteria

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note: Selecting NO options from a list indicates that ALL options in the list are included in the report.

Option

Description

Creation Start and End Date(s)

The access review creation date range. The report includes all access reviews create on or after the start date and on or before the end date.
You can enter the date manually, or click the [...] icon to select a date from the calendar.

Signed Start and End Date(s)

The access review signed off on date range. The report includes all access reviews signed off on, on or after the start date and on or before the end date.
You can enter the date manually, or click the [...] icon to select a date from the calendar.

Due Start and End Date(s)

The access review due date range. The report includes all access reviews due on or after the start date and on or before the end date.
You can enter the date manually, or click the [...] icon to select a date from the calendar.

Tags

To filter access reviews based on their tags, select one or more tags. If multiple tags are selected, only access reviews that match all selected tags are included in this report.

Applications

Select the applications to include in the report. If no applications are specified, all applications are included.
Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.

Managers

The manager list to include in this report. If no managers are specified, access reviews for all managers are included.
Click the arrow to the right of the suggestion field to display a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.