Working With Reports

New Reports

To create a new report, on the Reports tab, click an existing report or right-click and select Save As New Report display the New Report page. See How to Create a New Report.

Existing Reports

To edit an existing report on the My Reports tab, click a report name or right-click and select Edit to display the Edit Report page. See How to Edit a Report.

To edit reports based on searches on identity, activity, and audit information, see Search Results.

Running Reports

Once the report has been defined, you can run the report by right-clicking the report name and selecting Execute, or Execute in background. Execute displays a pop-up progress window and opens the Report Results page when it is complete. Execute in background launches the report in the background. To track progress or to view the finished report, navigate to the Report Results tab. See How to Run a Report.

Scheduled Reports

To schedule a report to run at a later time or on a recurring basis, right-click a report name and select Schedule from the dropdown list to display the New Schedule dialog. You can schedule reports to run once, hourly, daily, weekly, monthly, quarterly or annually to meet the requirements of your enterprise and auditors. See How to Schedule a Report.

Deleting Reports

To delete a report, right-click the report name and select Delete from the drop-down menu. Click Yes on the confirmation pop-up to delete the report. When you delete a report from the Reports table, all associated report results are deleted as well.

Exporting Reports

To export report results, select one of the export features to launch a report and export the results directly to an external file. Exported reports are not included in the list on the View Report Results page.

Report Work Items

Reports that require sign off generate work items and email notifications that are assigned to the designated signers. Sign off decisions are retained with the report results for tracking purposes. See How to Complete Report Work Items.

How to Create a New Report

Use the New Report page to create reports for your organization based on the reports provided. Reports can be as general (all users in your organization) or specific (one user) as required.

See Standard Report Properties for the complete list of reports provided with IdentityIQ.

Searches defined on the search pages can also be saved as reports. Reports created on the search pages are saved in the Search category on the My Reports tab.

Procedure

Select Intelligence > Reports from the navigation menu bar to access the Reports page.
Right-click a report on the My Reports or Reports tab and select Save As New Report.
Enter a name and brief description of the new report. This information is displayed on the My Reports table when the new report is saved.
Optional: You can require sign off on the report; the report results can not be viewed or downloaded until the signoff process is complete.
1. Check Require Signoff. This opens a Signoff Properties section.
2. Choose the required signers. Enter the first letter, or letters, of an identity to display a selection list of valid identities containing that letter string and select a signer. Then select Add to List to add the identity to the signers list. You can add as many signers as you need. Each signer will receive a work item for signing off on the report.
3. Select an email notification template from the Initial Notification Email dropdown list. For example, the Report Result Signoff template. Templates are created and defined when the application is configured.
4. Specify the escalation criteria for the signoff request.
  - None – no reminder emails are sent and no escalation is performed for this work item.
  - Send Reminders – send email reminders the configured interval.
  - Reminders then Escalation – send the configured number of reminders, after which the work item is escalated to the signer's manager.
  - Escalation only – escalate the signoff work item after the configured interval, with no reminders being sent.
  - Escalation intervals are set when the application is configured.
Select a Previous Result Action from the dropdown list. Rename Old is select by default. Previous result actions determine how subsequent runs of this report react to existing report results.
1. Delete – overwrite the previous report results with the new information.
2. Rename Old – append a numeral to the name of the old report result and preserve both.
3. Rename New – append a numeral to the name of the new report result and preserve both.
4. Cancel – cancel the new run of the report.
Optional: Select the Allow Concurrency checkbox to enable two identical reports to run at the same time.
- If enabled, allow concurrency appends a numeric value to the name of the report that started second.
- If disabled, the second report is canceled and an exception sent to the requestor.
Optional: Assign an email recipient to receive notification of report completion. Enter the first letter, or letters, of an identity to display a selection list of valid identities containing that letter string, or click the arrow to the right of the field to display a list of all users. To prevent an email being sent if the report is empty, select Don't email empty reports.
Optional: Enter the maximum number of results to display in the report results.
Optional: Enter a scope for the report results. Enter the first few letters of a scope name to display the select box, or click the arrow to the right of the field to display all of the scope you control. Only identities that control the assigned scope can view the results of a scoped report. If scope is active and you do not explicitly assign a scope, the results are given your assigned scope.
Specify the report options required for the report you are creating.
Each report type displays unique report options. See IdentityIQ Standard Reports for details on each report type.
Specify how the information will display in the report results.
Choose an option to save and / or run the report:
- Select Save to save the report without running it.
- Select Save and Execute to save the report to the My Reports table and run it immediately. The Report Results page displays when the report completes.
- Select Save and Preview to preview the report results.
- Select Execute to run the report without saving it.

For more information on report results, see Report Results Tab.

How to Edit a Report

Use the Edit Report page to make changes to an existing report.

Access the Reports page from the navigation menu bar. Go to Intelligence > Reports.
Navigate to the My Reports tab to view a list of your saved reports.
Click a report, or right-click a report and select Edit from the dropdown list to open the Edit Report page.
Edit the Name and Description section as needed.
Select a Previous Result Action from the dropdown list. Rename Old is select by default. Previous result actions determine how subsequent runs of this report react to existing report results.
- Delete – overwrite the previous report results with the new information.
- Rename Old – append a numeral to the name of the old report result and preserve both.
- Rename New – append a numeral to the name of the new report result and preserve both.
- Cancel – cancel the new run of the report if a report result with the same name exists.
Optional: Allow concurrency. Activate the Allow Concurrency checkbox to enable two identical reports to run at the same time.
- If enabled, allow concurrency appends a numeric value to the name of the report that started second.
- If disabled, the second report is canceled and an exception sent to the requestor.
Optional: Assign an email recipient to receive notification of report completion. Enter the first letter, or letters, of an identity to display a selection list of valid identities containing that letter string, or click the arrow to the right of the field to display a list of all users. To prevent an email being sent if the report is empty, select Don't email empty reports.
Optional: Require sign off.
1. Activate Required sign off to expand the Signoff Properties section.
2. Specify the required signers.
  Enter the first letter, or letters, of an identity to display a selection list of valid identities containing that letter string and select a signer.
3. Click Add to List to add the identity to the signers list.
  You can add as many signers as are required.
4. Select an email notification template from the Initial Notification Email dropdown list. For example, the Report Result Signoff template.
  Templates are created and defined when the application is configured.
5. Specify the escalation criteria for the sign off request.
  None – no reminder emails are sent and no escalation is performed for this work item.
  Send Reminders – email reminders are sent at the configured interval.
  Reminders then Escalation – the configured number of reminders are sent and then the work item is escalated to the signers manager.
  Escalation only – this work item is escalated after the configured interval with no reminders being sent. Escalation intervals are set when the application is configured.
Optional: Enter the maximum number of results to display in the report results. This option is available on a limited number of reports.
Optional: Enter a scope for the report results. Enter the first few letters of a scope name to display the select box, or click the arrow to the right of the field to display all of the scope you control.
Only identities that control the assigned scope can view the results of a scoped report.
If scope is active and you do not explicitly assign a scope, the results are given your assigned scope. See IdentityIQ Standard Reports for details on each report type.
Choose an option to save and / or run the report:
- Click Save to save the new report to the My Reports table.
- Click Save and Execute to save the report to the My Reports table and run it immediately. The Report Results page displays when the report completes.
- Click Save and Preview to preview the report results.
- Click Execute to run without saving.
Click Save to save the new report to the My Reports table.
- Click Save and Execute to save the report to the My Reports table and run it immediately.
  The Report Results page displays when the report completes.
- Click Save and Preview to preview the report results.
- Click Execute to run without saving.

How to Run a Report

Select Intelligence > Reports.
Navigate to the My Reports tab to view a list of your saved reports.
Right-click a report and select Execute or Execute in background. Execute displays a pop-up progress window and opens the Report Results page when it is complete. Execute in background launches the report in the background.
To track progress or to view the finished report, navigate to the Report Results tab.

For additional details and options for previewing, saving, and running reports, see Saving, Previewing, and Running Reports.

For more information on report results, see Report Results Tab.

How to Schedule a Report

Use the Schedule Report dialog to schedule reports to run at slow processing times or on a recurring basis as need to maintain compliance in your enterprise.

The New Schedule dialog enables you to assign a unique name and description to the report being run at the schedule time. The unique schedule name and description display on the Report Results table so that a report run from the Reports page does not overwrite the scheduled report. For example, if you define and schedule a Weekly All Violations Report that you download and archive for auditing purposes, someone running the All Violations Report mid-week does not overwrite the information in your scheduled report.

Access the Reports page from the navigation menu bar. Go to Intelligence > Reports.
Right-click a report name on the My Reports or Reports tabs and select Schedule from the dropdown list to open the New Schedule dialog.
Enter a unique name and description for this schedule report.
This is the name and description that display in the Report Results table and distinguish this scheduled version of the report from the same report executed from the reports tables. Defining a unique name on this page ensures that scheduled reports are not overwritten by mistake.
Enter the date and time to launch the first execution of this report. You can enter the date manually, or click the [...] icon to select a date from the calendar.
— OR —
Select the Run Now field to run the report immediately after clicking Schedule. For recurring reports, the report runs at the current time at the specified Execution Frequency.
Specify how often this report should run with the Execution Frequency dropdown list. Subsequent executions of this report occur at the time specified in the First Execution fields.
Click Schedule to save this scheduled report.
Navigate to the Scheduled Reports Tab to view a list of all scheduled reports in the IdentityIQ application.

How to Complete Report Work Items

Report work items, also called sign-off work items, are generated by reports that require someone to sign off on the results they create and by sign-off requests that may be forwarded by a designated signer.

Sign off decisions are retained with the report results for tracking purposes.

Select My Work > Work Items in the Navigation menu to view your current work items.
Select the View button to the right of a sign-off work item to display the request.
Review the work item information in the Summary section.
Review the Comments section for any information associated with this work item.
Use the Add Comment button to add additional information to the work item if necessary.
Select the Click to View Report Results link in the Details section to review the Report Results. After reviewing the report results, select Return to Work Item.
Select an action button to open the associated comments dialog and conclude this work item. Action options are Signoff, Reject, Forward, Save, or Cancel.

Note

If you sign off or reject the sign-off request, the status of the report results is updated to reflect that decision. If you forward the work item, you must specify a recipient.