User Details Report
This report shows each identity's name, first name, last name, and manager, plus a list of all roles assigned to or detected for each identity and a list of all applications on which each identity has accounts. If roles are specified as filters for the report, only users with those roles will be listed, but all roles connected to each listed identity will appear in their Roles column. Likewise, all applications on which the user has an account will appear in the Applications column, even if the report is filtered by a specific application.
The detailed results of this report can be exported to a CSV or PDF file.
The User Details Report consists of the following sections:
-
Identity Attributes
-
Identity Extended Attributes
-
Additional Identity Properties
All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.
You must enter the following before running this report:
-
Name
For step by step instructions on creating or editing a report, see Working With Reports.
Identity Attributes
The following criteria determines what information is included in this report. You can use any combination of options to build a report.
Option |
Description |
First Name |
Input the first name of the identity you wish the report to include. For example, if you input "John" in the field, the report includes information on identities whose first name is John. |
Last Name |
Input the last name of the identity you wish the report to include. For example, if you input "Smith" in the field, the report includes information on identities whose last name is Smith. |
Display Name |
Input the display name of the identity you wish the report to include. For example, if you input "John_Smith" in the field, the report includes information on identities whose display name is John_Smith. |
|
Input the email address of the identity you wish the report to include. For example, if you input "John@email.com" in the field, the report includes information on identities whose email address is name is John@email.com. |
Manager |
The manager list to include in this report. Only users who report to the selected managers are included in the report. Click the arrow to the right of the suggestion field to a list of all managers, or enter a few letters in the field to display a list of managers that start with that letter string. |
Inactive |
Choose how the report handles inactive identities. Select No selection to include both inactive and active identities, True to include only inactive identities, or False to not include inactive identities. |
Identity Extended Attributes
You can use the identity extended attributes that have been defined for your installation as criteria for this report. Because these are custom-defined attributes, the specific criteria options you have here will be specific to your own installation of IdentityIQ. Any identity extended attributes defined as searchable or as multi-valued are included as possible filters for the report.
Additional Identity Properties
The following criteria determines what information is included in this report. You can use any combination of options to build a report.
Option |
Description |
Applications |
Select the applications to include in the report. If no applications are specified, all applications are included. Click the arrow to the right of the suggestion field to display a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string. |
Capabilities |
Include only identities assigned one or more of the selected capabilities. |
Roles |
Include only identities who hold the selected role(s). |
Groups |
Include only identities who are part of one or more of the selected group(s) |
Last Refresh Date |
Select a date range to filter users based on when the user was last refreshed. Date ranges can be open-ended in either direction (no start or no end date), as needed. |
Last Login Date |
Select a date range to filter users based on when the user was last logged in. Date ranges can be open-ended in either direction (no start or no end date), as needed. |