Skip to content

Identity and User Reports

Account Attributes Live Report

This report shows the account attributes for every application account held by every identity (according to filters applied). Each account attribute and value combination is listed on a separate line of the report results.

This report can be filtered to include accounts for a subset of identities based on values specified for core identity attributes, extended identity attributes, and other extended properties of identities such as the capabilities assigned to them and the groups to which they belong. If one or more applications are selected, only accounts on those applications are included in the report.

The detailed results of this report can be exported to a CSV or PDF file.

The Account Attributes Live Report consists of the following sections:

Note

Based on how IdentityIQ was set up for your enterprise, other attributes may be available. Extended attributes may include items such as region, location, department, and other attributes specific to your deployment.

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Identity Attributes

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Note

Use the Shift and Crtl keys to select multiple items from lists.

Option Description
User Attributes The user attributes on which to filter. Only users with the listed attributes are included in the report. This information is discovered during identity aggregation.

Identity attributes can be configured. The attributes that display can vary for each instance of the product.
First Name Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John.
Last Name Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith.
Display Name Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith.
Email Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com.
Manager The manager list to include in this report. Only users who report to the selected managers are included in the report.

Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.
Inactive Choose how the report handles inactive users. Select No selection to include both inactive and active users, True to include only inactive users, or False to not include inactive users.

Identity Properties

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Note

Use the Shift and Crtl keys to select multiple items from lists.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications or enter a few letters in the field to display a list of applications that start with that letter string.
Capabilities Select the capabilities to include in the report.
Groups The groups or populations to include in the report.
Click the arrow to the right of the field and select a group to create the inclusion list for this report.
Last Refresh Date Select a date range to filter users based on when the user was last refreshed.
Last Login Date Specify a login date range manually or click the calendar icon and select one using the calendar options.
Show authorized scopes and capabilities Select this option to include authorized scopes and capabilities for each identity in the report.

Application Account Summary Report

This report shows counts of the number of accounts on each application, the number of identities with accounts on each application, and the number of identities with more than one account on each application.

The detailed results of this report can be exported to a CSV or PDF file.

The Application Account Summary Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports

Report Options

The following criteria determines what information is included in this report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.
Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Note

Use the Shift and Crtl keys to select multiple items from lists.

Application Account by Attribute Report

This report shows each account aggregated from the selected application and the Identity to which each account is linked. This report can be run for only one application at a time, so the Application filter is required. Other filters are determined by the configured extended account attributes for the installation. Boolean attributes offer the option to select either value or none (to include accounts with either value set); date attributes can be constrained by a start or end date or both. String attributes are analyzed for an exact match to the entered filter value.

The detailed results of this report can be exported to a CSV or PDF file.

The Application Account by Attribute Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Account Properties

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.
Inactive Account Choose how the report handles inactive accounts. Select No selection to include both inactive and active accounts, True to include only inactive accounts, or False to not include inactive accounts.
Privileged Account Choose how the report handles privileged accounts. Select No selection to include both privileged and standard accounts, True to include only privileged accounts, or False to not include privileged accounts.
Service Account Choose how the report handles service accounts. Select No selection to include both service and standard accounts, True to include only service accounts, or False to not include service accounts.
Last login Specify a login date range manually or click the calendar icon and select one using the calendar options.

Identity Effective Access Live Report

This report lists all entitlements, including account group memberships, found for identities meeting the filter criteria specified. When an entitlement is encapsulated in a detected role and / or is granted to the user based on an assigned role, the associated roles are also shown on the report row for that entitlement.

This report can be filtered to include entitlements for a subset of identities based on values specified for core identity attributes, extended identity attributes, and extended properties of identities such as the capabilities assigned to them, and the groups to which they belong. If one or more applications are selected, only accounts on those applications are included in the report.

The detailed results of this report can be exported to a CSV or PDF file.

The Identity Effective Access Live Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports

Identity Attributes

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
First Name Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John.
Last Name Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith.
Display Name Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith.
Email Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com.
Manager The manager list to include in this report. Only users who report to the selected managers are included in the report.
Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.
Inactive Choose how the report handles inactive identities. Select No selection to include both inactive and active identities, True to include only inactive identities, or False to not include inactive identities.

Identity Extended Attributes

You can use the identity extended attributes that have been defined for your installation as criteria for this report. Because these are custom-defined attributes, the specific criteria options you have here will be specific to your own installation of IdentityIQ. Any identity extended attributes defined as searchable or as multi-valued are included as possible filters for the report.

Additional Identity Properties

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.
Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.
Capabilities Select the capabilities to include in the report.
Roles The roles to include in the report.
Click the arrow to the right of the field and select a role to create the inclusion list for this report.
Groups The groups or populations to include in the report.
Click the arrow to the right of the field and select a group to create the inclusion list for this report.
Last Refresh Date Select a date range to filter users based on when the user was last refreshed.
Last Login Date Select a date range to filter users based on when the user was last logged in.

Identity Entitlements Detail Report

Note

Including classifications in the Identity Entitlements Detail Report can impact performance. By default, classifications are included in this report, but you can remove them in the Report Layout dialog.

This report lists all identity entitlements – assigned and aggregated application entitlements, assigned and detected roles – and details about them. Some columns apply only to application entitlements, some apply only to roles, and some relate to both.

  • For application entitlements, the data displayed includes the application name and instance (if applicable), the attribute name and value, the account name, and whether it was directly assigned (e.g. requested through LCM) or whether it was granted indirectly by one or more of the Identity's roles.

  • For roles, the Attribute columns shows whether it was assigned or detected, and the Entitlement column shows the role name; the Allowed column is only ever "true" for detected roles which are allowed or required by an assigned role for the Identity.

Information about when they were last certified for the identity is shown for both types of records, as is the Source data (how the entitlement / role was granted to or found for the identity).

The detailed results of this report can be exported to a CSV or PDF file.

The Identity Entitlements Detail Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Identity Entitlements Report Arguments

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Note

Use the Shift and Crtl keys to select multiple items from lists.

Option Description
Identities Type in manually or use the dropdown list to select the identities to include in the report. If no identities are specified, all identities are included.
Applications Type in manually or use the dropdown list to select the applications to include in the report. If no applications are specified, all applications are included.
Attributes Type in manually or use the dropdown list to select the attributes to include in the report. If no attributes are specified, all attributes are included.
Entitlements Type in manually or use the dropdown list to select the entitlements to include in the report. If no entitlements are specified, all entitlements are included.
Accounts Type in manually or use the dropdown list to select the accounts to include in the report. If no accounts are specified, all accounts are included.
Instances Type in manually or use the dropdown list to select the instances to include in the report. If no instances are specified, all instances are included.
Assigners Type in manually or use the dropdown list to select the assigners to include in the report. If no assigners are specified, all assigners are included.
Source Type in manually or use the dropdown list to select the sources to include in the report. If no sources are specified, all sources are included.
Exists on account Select Include All to include all entitlements True to include only entitlements that were found on the last aggregation, or False to not include entitlements that were found on the last aggregation. The default is to include both.
Entitlement Type Select from Include All, Entitlements, or Permissions.
Allowed by an assigned role Select True to report only detected roles that are permitted or required by an assigned role (no entitlements or assigned roles will appear in the report). Select False to omit these detected roles from the report. By default, they are included alongside account entitlements and assigned roles.
Additional Entitlements only Select True to include only entitlements that are not encapsulated in a role held by the identity. Select False to include only entitlements that are granted by a role assigned to the identity. By default, additional entitlement and role-based entitlements are both included.
Has been certified Select Include All to include all entitlements True to include only entitlements that have been certified, or False to not include entitlements that have been certified.
Has pending certification Select Include All to include all entitlements True to include only entitlements that have a pending certification, or False to not include entitlements that have a pending certification.
Has been requested Select Include All to include all entitlements True to include only entitlements that have been requested, or False to not include entitlements that have been requested.
Has pending request Select Include All to include all entitlements True to include only entitlements that have a pending request, or False to not include entitlements that have a pending request.

Identity Forwarding Report

The Identity Forwarding Report shows identities that currently have a forwarding user set to redirect IdentityIQ work items to another system user. It shows the forwarding user and the date range for which forwarding is set.

The detailed results of this report can be exported to a CSV or PDF file.

The Identity Forwarding Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Identity Attributes

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
First Name Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John.
Last Name Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith.
Display Name Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith.
Email Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com.
Manager The manager list to include in this report. Only users who report to the selected managers are included in the report.

Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.
Inactive Choose how the report handles inactive identities. Select No selection to include both inactive and active identities, True to include only inactive identities, or False to not include inactive identities.

Identity Extended Attributes

You can use the identity extended attributes that have been defined for your installation as criteria for this report. Because these are custom-defined attributes, the specific criteria options you have here will be specific to your own installation of IdentityIQ. Any identity extended attributes defined as searchable or as multi-valued are included as possible filters for the report.

Additional Identity Properties

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.
Capabilities Select the capabilities to include in the report.
Roles The roles to include in the report.

Click the arrow to the right of the field and select a role to create the inclusion list for this report.
Groups The groups or populations to include in the report.

Click the arrow to the right of the field and select a group to create the inclusion list for this report.
Last Refresh Date Select a date range to filter users based on when the user was last refreshed.
Last Login Date Select a date range to filter users based on when the user was last logged in.

Identity Status Summary Report

This report is a simple count report that shows the number of active identities, inactive identities, and total identities defined in the system. It offers no filters.

The detailed results of this report can be exported to a CSV or PDF file.

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For more information on Standard Properties, see Standard Report Properties.

For more information on Report Layout, see Report Layout.

For step by step instructions on creating or editing a report, see Working With Reports.

Privileged Access Report

This report lists accounts that are marked as privileged accounts on the selected application(s), specifically the display name of those accounts. It also shows the identity to which the account is linked, the identity's manager, and the risk score assigned to the identity. This report returns a list of all accounts meeting the specified criteria. To make this function as a privileged access report, an account attribute must be defined for the installation to designate privileged accounts, and that attribute and privileged-account-designating value must be specified as a filter criterion for the report.

The detailed results of this report can be exported to a CSV or PDF file.

The Privileged Access Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

  • At least one Privileged Account Attribute

For step by step instructions on creating or editing a report, see Working With Reports.

Privileged Account Attributes

The Privileged Account Attributes age of filter criteria shows all defined account attributes, which vary by installation. The report creator must choose the attributes and values that designate a privileged account for the system. Note that if additional account attributes are selected on this filter page, this report will be constrained to show only accounts meeting those criteria, which could make this report something other than a "privileged access" report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Note

Use the Shift and Crtl keys to select multiple items from lists.

Account Applications

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report. Use the Shift and Crtl keys to select multiple items from lists.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.

Identity Attributes

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report. Use the Shift and Crtl keys to select multiple items from lists.

Option Description
First Name Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John.
Last Name Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith.
Display Name Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith.
Email Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com.
Manager The manager list to include in this report. Only users who report to the selected managers are included in the report.

Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.
Inactive Choose how the report handles inactive users. Select No selection to include both inactive and active users, True to include only inactive users, or False to not include inactive users.

Identity Extended Attributes

You can use the identity extended attributes that have been defined for your installation as criteria for this report. Because these are custom-defined attributes, the specific criteria options you have here will be specific to your own installation of IdentityIQ. Any identity extended attributes defined as searchable or as multi-valued are included as possible filters for the report.

Uncorrelated Accounts Report

This report shows accounts on non-authoritative applications which have not yet been correlated to authoritative identities in IdentityIQ. It can be filtered to show only accounts for selected applications or to show all uncorrelated accounts.

This report includes a summary section with a table showing the statistics of correlated identities vs. uncorrelated identities and a chart which indicates the percentage of uncorrelated accounts coming from each application in the report. These statistics and chart are based only off identities with accounts on the applications selected for the report; they do not necessarily indicate total counts in the whole system.

The detailed results of this report can be exported to a CSV or PDF file.

The Uncorrelated Accounts Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Uncorrelated Accounts Parameters

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Option Description
Correlated Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Correlated Applications are applications that are to be compared with the authoritative application. Any identity that has an account on the correlated application but not on the authoritative application is considered uncorrelated.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.

User Account Attributes Report

This report shows all accounts on the selected application and the identity to which each is correlated. This report can only be run for one application at a time.

The attributes that can be included in this report may vary depending on which application you choose to report on. The report can include any attributes from the selected application that have been mapped to the account attributes defined for your installation. These attributes are mapped in Global Settings > Account Mappings. Attributes are selected for inclusion in the report on the Report Layout page.

For more information on Account Mappings, see Account Mappings.

The detailed results of this report can be exported to a CSV or PDF file.

The User Account Attributes Report consists of the following sections:

All reports use a set of standard properties for basic information, such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

Name

For step by step instructions on creating or editing a report, see Working With Reports.

Account Properties

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Option Description
Applications Select the application to include in the report.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.
User Inactive Status Choose how the report handles inactive users.

Select Include All to include both inactive and active users, True to include only inactive users, or False to not include inactive users.

User Security Question Status Report

This report shows which identities have provided answers to the authentication questions which are required to log in through the Forgot Password feature of IdentityIQ. It also shows the last login date and the manager name for each user. It can be filtered by a broad set of identity attributes and data, so it can report on subsets of identities (e.g. by manager, by department, by users with accounts on a specific application, etc.).

The detailed results of this report can be exported to a CSV or PDF file.

The Account Authentication Question Status Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports

Identity Attributes

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
First Name Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John.
Last Name Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith.
Display Name Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith.
Email Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com.
Manager The manager list to include in this report. Only users who report to the selected managers are included in the report.

Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.
Inactive Choose how the report handles inactive identities.

Select No selection to include both inactive and active identities, True to include only inactive identities, or False to not include inactive identities.

Identity Extended Attributes

You can use the identity extended attributes that have been defined for your installation as criteria for this report. Because these are custom-defined attributes, the specific criteria options you have here will be specific to your own installation of IdentityIQ. Any identity extended attributes defined as searchable or as multi-valued are included as possible filters for the report.

Additional Identity Details

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.
Capabilities Include only identities assigned one or more of the selected capabilities.
Roles Include only identities who hold the selected role(s).
Groups Include only identities who are part of one or more of the selected group(s).
Last Refresh Date Select a date range to filter users based on when the user was last refreshed.
Last Login Date Select a date range to filter users based on when the user was last logged in.

User Details Report

This report shows each identity's name, first name, last name, and manager, plus a list of all roles assigned to or detected for each identity and a list of all applications on which each identity has accounts. If roles are specified as filters for the report, only users with those roles will be listed, but all roles connected to each listed identity will appear in their Roles column. Likewise, all applications on which the user has an account will appear in the Applications column, even if the report is filtered by a specific application.

The detailed results of this report can be exported to a CSV or PDF file.

The User Details Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Identity Attributes

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
First Name Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John.
Last Name Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith.
Display Name Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith.
Email Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com.
Manager The manager list to include in this report. Only users who report to the selected managers are included in the report.

Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string.
Inactive Choose how the report handles inactive identities.

Select No selection to include both inactive and active identities, True to include only inactive identities, or False to not include inactive identities.

Identity Extended Attributes

You can use the identity extended attributes that have been defined for your installation as criteria for this report. Because these are custom-defined attributes, the specific criteria options you have here will be specific to your own installation of IdentityIQ. Any identity extended attributes defined as searchable or as multi-valued are included as possible filters for the report.

Additional Identity Properties

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.
Capabilities Include only identities assigned one or more of the selected capabilities.
Roles Include only identities who hold the selected role(s).
Groups Include only identities who are part of one or more of the selected group(s)
Last Refresh Date Select a date range to filter users based on when the user was last refreshed. Date ranges can be open-ended in either direction (no start or no end date), as needed.
Last Login Date Select a date range to filter users based on when the user was last logged in. Date ranges can be open-ended in either direction (no start or no end date), as needed.

Users by Application Report

This report lists the identities connected to each account on one or more applications defined in the system. For each account, it shows the associated Identity name, the account native identity (as Account Id), and the account display name (as Account Name). By default, the report includes all applications, but it can be filtered to show only accounts for specific applications.

The detailed results of this report can be exported to a CSV or PDF file.

The Users by Application Detail Report consists of the following sections:

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

  • Name

For step by step instructions on creating or editing a report, see Working With Reports.

Report Options

The following criteria determines what information is included in this report. You can use any combination of options to build a report.

Note

Selecting NO options from a list indicates that ALL options in the list are included in the report.

Option Description
Applications Select the applications to include in the report. If no applications are specified, all applications are included.

Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string.