Skip to content

Certification Campaign Status Information and Reports

Viewing Certification Campaign Reports

You can review various reports about a certification campaign to learn more about it. All reports remain available to you indefinitely as long as the campaign remains in either the Active or Completed tab. Once you delete the campaign, the reports are deleted as well.

  1. In the Admin interface, go to Certifications > Campaigns. A list of campaigns is displayed.

  2. In the Reports column of the campaign you want to review, select View.

    The Campaign Reports dialog box is displayed and might include any of the following reports. Select Generate to create a report that reflects the most recent status of the campaign.

  3. To view the report, select CSV or PDF to open your preferred file type.

    Note

    Uncorrelated accounts are not included in certification campaigns. To resolve uncorrelated accounts, see Managing Uncorrelated Accounts.

Campaign Composition Report

This report describes the configuration of the certification campaign, including the name, description, due date, email settings, and campaign filter used for any certification campaign. This report is not available for campaigns that use exclusion rules created by SailPoint support.

Column Description
Campaign ID A unique identifier for the campaign.
Campaign Name The campaign name you entered when you created the campaign. This field cannot be empty.
Type The reviewer of the campaign. If you use the original campaign creation method, this will either show Manager or Source Owner. If you create a campaign using search, this will show either Access Owner or Manager.
Date of Creation The date the campaign was created.
Date of Activation The date the campaign was activated.
Description The description you entered when you created the campaign. This field can be empty.
Deadline The date by which the reviewer is supposed to review certifications.
Email Notifications Whether email notifications to the reviewer are enabled or disabled.
Campaign Filter Name The name of campaign filter used. The default is Exclude Uncorrelated Accounts.
Filter Type A configuration option on the campaign filter. Will always be either Inclusion or Exclusion.
Search Terms If the campaign was created using the original process, this field will show NA. If the campaign was created using Search, this field will show the query you used.
Filter Description Description of the campaign filter used. This field can be empty.
Sources For source owner certification campaigns, a list of the sources included. For all other campaigns, this field will be All.
Undecided Access Selection The selection made at the time of campaign creation to maintain access to undecided items or to choose to maintain or revoke access to undecided items. For campaigns created before February 14, 2018, this column will default to Approve.

Campaign Exclusion Report

This report contains a list of all entitlements that were excluded from the campaign by a campaign filter,as well as details about these entitlements.

The Campaign Exclusion Report is disabled by default but can be enabled by API. For more information on APIs and campaign reports, see the API Reference Guide.

Campaign Status Report​

This report contains the status of all access items in the campaign.

Column Description
Campaign Name The name of the campaign.
Access Review The name of the certification; this refers to the collection of access review items specific to the reviewer in a campaign.
Reviewer The person currently assigned to review the certification.
Identity The person whose access is being reviewed.
Type The type of item being certified: Entitlement, Access Profile, or Role.
Source The source of the account being reviewed.
Owner The administrator responsible for the source.
Account Name The display name of the account the entitlement belongs to.
Entitlement Name The attribute name for the entitlement; often Groups or memberOf. If the Type is Access Profile, this column is blank.
Display Name The display name of the entitlement or access profile being certified. If there is no display name for an entitlement, it shows the entitlement value.
Description The description of the entitlement.
Status The status of the access item under review: Open, Complete, or Error.
Decision Indicates whether the reviewer approved, revoked, or acknowledged the access item.
Decision Maker This is typically the same as the reviewer, with the following exceptions: If the entitlement was reviewed by someone and then the certification was reassigned to someone else, this could be the name of the original reviewer. Or, if a Cert Admin or Org Admin makes a decision on a certification item, they are listed as the decision maker for audit purposes, even if they are not the assigned reviewer.
Revoke Completed Indicates whether a revoked item has been removed from the user's access. Roles will always be false as they cannot be revoked.
Comments This column clarifies any issues with the status of the report. For example, if the account was deleted or changed before the campaign was completed, that would be denoted here.
Decision Comments This column contains any comments left by the reviewer about their Approve, Revoke, or Acknowledge decisions.

Campaign Remediation Status Report​

This report is available after an administrator has completed a campaign. It contains the current state of any items that were disapproved during the certification campaign.

Column Description
Identity The person whose access is being reviewed.
Type The type of item being certified: Entitlement or Access Profile.
Source The source of the account being reviewed.
Account Name The name of the account the entitlement belongs to.
Reviewer The person currently assigned to review the certification.
Entitlement Name The attribute name for the entitlement; often Groups or memberOf. If the Type is Access Profile, this column is blank.
Display Name The display name of the entitlement or access profile being certified. If there is no display name for an entitlement, it shows the entitlement value.
Description A description of the entitlement.
Status Whether the access item has been revoked on the source.
Recipient The person the revoked item has been assigned to. This is the source owner.
Requester The person who decided to revoke the item in the certification. This is either the manager or the source owner.
Completed The time when the system verified the remediation via the remediation scan. The scan uses Greenwich Mean Time (GMT).
Comments This column clarifies any issues with the status of the report. For example, if the account was deleted or changed before the campaign was completed, that would be denoted here.
Revoke Completed Indicates whether a revoked item has been removed from the user's access. Roles will always be false as they cannot be revoked.
Decision Comments This column contains any comments left by the reviewer about their Approve, Revoke, or Acknowledge decisions.

Certification Sign Off Report​

This report lists each active and completed certification. Certifications that have been approved are listed at the top of the report and include the reviewer and the date they signed off on the certification.

Column Description
Name The name of the certification
Reviewer The person who signed off on the certification. This is usually the owner. It could be the administrator if: the administrator reassigned the certification, the administrator completed the campaign after the due date, or if a certification is generated, but empty.
Sign Off Date The date and time the reviewer selected the Sign Off button. This is displayed in Greenwich Mean Time (GMT).
Start Date The date the administrator began the campaign.
Owner The person to whom the certification is assigned.
Entitlement Name The attribute name for the entitlement; often Groups or memberOf. If the Type is Access Profile, this column is blank.
Display Name The display name of the entitlement or access profile being certified. If there is no display name for an entitlement, it shows the entitlement value.
Description A description of the entitlement.
Status Whether the access item has been revoked on the source.
Recipient The person the revoked item has been assigned to. This is the source owner.
Requester The person who decided to revoke the item in the certification. This is either the manager or the source owner.
Completed The time when the system verified the remediation via the remediation scan. The scan uses Greenwich Mean Time (GMT).
Comments This column clarifies any issues with the status of the report. For example, if the account was deleted or changed before the campaign was completed, that would be denoted here.
Revoke Completed Indicates whether a revoked item has been removed from the user's access. Roles will always be false as they cannot be revoked.
Decision Comments This column contains any comments left by the reviewer about their Approve, Revoke, or Acknowledge decisions.