Report classification: product reports and new reports

The RD module provides a large set of product reports.

The RD Administrator can assign these reports as they are, or modify their settings as needed. The list of product reports is continuously updated as the RD module evolves.

Note:

Modification of any product report is strictly forbidden.

Be careful with the batch-type reports. Their behavior is closely linked to the AG Core database. Any change might affect the report execution.

The RD Administrator can also create customized reports.

Report configuration is extremely flexible; a dedicated set of tabs (such as Details or Localization) offers several options to determine which set of data the report will display.

The Report wizard: how to design a report

Designing a report is very easy. A specific wizard organizes all the required steps. The following figure shows the conceptual scheme of the wizard:

The wizard is composed by five fixed settings and two variable settings.

The Fixed Settings (FS) tabs are available and visible in all report configurations, while the Variable Settings (VS) tabs are associated only to specific reports:

Details
Scopes
Columns
Filters
Additional Data
Chart
Localization Tab

Using the wizard specific tabs, the RD Administrator can configure the scopes and filters present in a query.

The RD Administrator can also write a simple query without defining any additional settings; in that case the report configuration will not display such settings.

Below are shown all steps of a generic report wizard, along with all characteristics of the main configuration frame.

Details tab

The Details tab is present in all report configuration wizards and consists of:

A box with the associated query information.
A text area for selecting a report name, writing a brief report description.
An Add button for adding report category.
A text area for selecting an inventoried report category.
A text area for configuring the report status (New, Assigned, Locked).

The following figure describes the layout of the Details tab:

Details tab layout — Figure 2. The Details tab of the Report Configuration wizard

Scope configuration: Visibility tabs

After the Details tab, the wizard displays a subset of tabs based on the number of scopes that are linked to the report aggregated query.

The following figure shows some possible scope subset tabs:

Picture: Three combinations of scope subsets — Figure 3. Scope subsets: some combinations

The model has a Scope tab for any available, distinct Scope Entity. The following table shows the complete list of entities:

Table 1. Available entities
Scope	Description
Activity	This entity is related to the business activity concept of the IBM Security Identity Governance data model.
Application	This entity is related to the application concept of the IBM Security Identity Governance data model.
Entitlement	This entity is related to the entitlement concept of the IBM Security Identity Governance data model.
Organization unit	This entity is related to the organization unit concept of the IBM Security Identity Governance data model.
Password configuration	This entity is related to the environment configuration defined in the Access Governance core module.
User	This entity is related to the user concept of the IBM Security Identity Governance data model.

To set the entity visibility for each Scope Entity, the RD administrator can click the related radio button from a fixed list, as the next figure shows:

List for configuring entity visibility — Figure 4. Entity visibility configuration

The following table shows the visibility options for all available Scope Entities:

Table 2. Visibility options for each entity
Visibility	Description
All entities of type entity with no selection	The authorized user can view all entities but cannot select any of them.
All entities of type entity with selection	The authorized user can select the desired entities.
Admin scope of entity with no selection	By default, the visibility is ALL.
Admin scope of entity with selection	Authorized users can select from entities within their visibility (Applications, Entitlements, Organization Unit, and so on).
List entities of type entities with no selection	The authorized user cannot select any entity from the limited list (defined by the administrator).
List entities of type entities with selection	The authorized user can select any entity from the limited list (defined by the administrator).

Columns tab

From this tab, the RD administrator can choose which columns to display in the report.

The following table shows eight parameters that characterize each item:

Table 3. Report columns configuration
Column	Description
Visible	If this check box is selected, the report will show the column.
Order	With the up arrow/down arrow is possible to choose the column position.
Name	Column name
Localization Code	The localization code is defined in this field.
Type	The data type is set in this field.
Column Width	The column width is defined in this field.
Order By	Column sorting order

The RD Administrator can click the Information icon Localization Help button, near the Localization Code text area, to verify that a localization code exists and is correct. From the Localization Help window, the RD Administrator can only search for the localization code and its aggregated localized messages but cannot perform any operation.

The RD Module displays these codes according to the chosen default language.

The Localization Help window opens and, if the localization code is registered, the Localization Code and Code Type fields are automatically populated with the specified value. If the localization code is not registered, the search operation does not show any results. In this case, see Edit Labels.

To order the columns in ascending or descending order, click Order By icon Order By.

The Column to order pane (right) lists columns available for insertion in the frame, Column to use for order condition (left). Select the column to order and click the Add button Add icon . The Order condition window opens. Click the Ascending or Descending radio buttons to choose the sorting order.

The Column to use for order condition frame on the left is now automatically populated with the selected column.

Click Ok. The columns are now displayed with the Order by icon.

The Order By heading indicates the sorting order of the columns in a given report. If the Descending Order icon icon (Descending order) is present, the number in parenthesis next to the icon indicates the column element that is listed as first. If the Ascending Order icon icon (Ascending order) is present, the number in parenthesis next to the icon indicates the column element that is listed as last.

Note: The module save any changes made in this window, allowing the administrator to verify the label localization.

Filters tab

After writing the query, the RD administrator can set and customize the Filters. To display the filters, select the related check box in the Visible column, as the following figure shows:

Displaying the filters — Figure 5. Filters tab

An authorized user can now configure these filters (event_operation and target_name) when executing the report from a generic IBM Security Identity Governance application.

The RD module provides a set of custom filters. The administrator can assign these custom filters directly as they are, or modify their settings as needed. The following table lists all custom filters delivered with the product:

Table 4. Product custom filters
Filter name	Custom filter description
Target-list	List of targets
EventIN-operation	EventIN codes
EventTarget-operation	EventTarget codes
SoD Type	Names of SoD types

The RD Administrator can modify the current localization code in the Localization Code field. If the localization is unsuccessful, it is displayed in red in the Report Filters Localization section of the Localization tab. The administrator can add a filter value in the Fixed Value text field.

This option is a suggested filter structure for the authorized user executing the report from a generic IBM Security Identity Governance application. The user can also modify this value as needed.

For example, might be configured the filter user_code with a fixed value of 03* and type Text. The report available will have a preset filter value of 03*, meaning that the report will contain all users whose user code begins with 03.

However, the user can change this preset value in the Type area, as the following table outlines:

Table 5. Filter type
Item	Description
Custom	Relabeled filter
Date (DD/MM/YYYY)	Only date format allowed for this filter type
Extended Date	Both `hh:mm:ss` and `DD/MM/YYYY` formats allowed for this filter type (Inserting hour before date automatically populates the current `hh:mm:ss`, which you can modify)
Number	Only number format allowed for this filter type
Text	Only text format allowed for this filter type

Additional data tab

The RD Administrator can configure additional information in the following three panes:

Send Email pane
Additional Information pane
Report Output Format pane

The following figure shows these panes:

Panel with additional data tab — Figure 6. Additional data tab

In the Send Email pane, the RD Administrator can choose to select the Enable Email Notification check box to enable the email notification. The following table lists the available email options:

Table 6. Send email pane details
Available options	Description
Email of User Consulting the Report	A default setting to send an email notification to the user executing the report.
Predefined Email List	List of email addresses to send notifications to: Separate multiple addresses by a semi colon.
Predefined Email List Fixed by User consulting the Report	This option allows the user executing the report to define the list of email addresses to send notifications to.

The following table lists the options available in the Additional Data pane:

Table 7. Additional data pane details
Available options	Description
Maximum Number of Records	Allows a maximum limit to be set on the amount of data drawn by the report.
Page Orientation	Allows to choose the orientation of the page for the report output: Vertical Horizontal

The RD Administrator can choose one or more of the following output formats in the Report Output Format pane:

CSV
HTML
RTF
DOCX
PDF
XLSX

Note: To proceed with the report configuration, the RD Administrator must choose at least one report output format.

Chart tab

Under this tab, the RD Administrator can configure the following summary chart types:

Bar Chart
3D Pie Chart

as shown:

Panel with Chart tab — Figure 7. Chart tab

To enable the chart, the RD Administrator can select the Enable Chart check box. The columns available in the Column to order box, depend on which columns the RD Administrator selects in the Columns tab.

To make a given column visible in the report, the RD Administrator must select that column in the Column to order box. The RD Administrator cannot choose more than one column.

The following figure shows a sample bar chart in the Report5.20-Status/Report Visibility:

Example of bar chart — Figure 8. Bar chart

This example illustrates a chart that summarizes the type (horizontal axis) and quantity (vertical axis) of the entitlements that are involved in the report. The chart shows that the report involves Business Role and IT Role entitlements. Four are Business Role entitlements and seventy-seven are IT Role entitlements.

The report output format in the example is an XLSX file. The RD Administrator can configure a report output format under the Additional Data tab.

Localization tab

The following figure shows how to use the Localization tab to edit and localize:

Report labels
Column labels
Filter labels

Panel with Localization tab — Figure 9. Localization tab

To edit and localize labels, click Localization.

The localization process is based on two main elements:

The localization code
The localization message

For each configured language, the RD Administrator must associate each localization code to a specific localization message (Languages button in Edit Labels section). If the localization message is not configured, the module automatically populates the corresponding language field with the localization code.

Insert the appropriate localization message in the field and click Ok to update and automatically save it. Or, if needed, keep the default localization code.

Note: You should first set your preferred language in the Languages window of the Edit Labels tab.

If the localization message is not localized in any languages, the localization code will be displayed in red.

In this case, the field in the Localization windows displays the localization code. If the codes are not correct, write the appropriate localization message. Otherwise, keep the localization code and click Ok to complete the configuration. The color of the localization code changes to black.

Scroll down the list to verify that all values are localized. If, after saving the transaction, some values are not localized, a Warning window provides suggestions.

Note: The field values are automatically refreshed but the Refresh button is still active.