Report classification: product reports and new reports
The RD module provides a large set of product reports.
Modification of any product report is strictly forbidden.
Be careful with the batch-type reports. Their behavior is closely linked to the AG Core database. Any change might affect the report execution.
The RD Administrator can also create customized reports.
Report configuration is extremely flexible; a dedicated set of tabs (such as Details or Localization) offers several options to determine which set of data the report will display.
The Report wizard: how to design a report
The wizard is composed by five fixed settings and two variable settings.
Using the wizard specific tabs, the RD Administrator can configure the scopes and filters present in a query.
The RD Administrator can also write a simple query without defining any additional settings; in that case the report configuration will not display such settings.
Below are shown all steps of a generic report wizard, along with all characteristics of the main configuration frame.
Details tab
- A box with the associated query information.
- A text area for selecting a report name, writing a brief report description.
- An Add button for adding report category.
- A text area for selecting an inventoried report category.
- A text area for configuring the report status (New, Assigned, Locked).
Scope configuration: Visibility tabs
After the Details tab, the wizard displays a subset of tabs based on the number of scopes that are linked to the report aggregated query.
Scope | Description |
---|---|
Activity | This entity is related to the business activity concept of the IBM Security Identity Governance data model. |
Application | This entity is related to the application concept of the IBM Security Identity Governance data model. |
Entitlement | This entity is related to the entitlement concept of the IBM Security Identity Governance data model. |
Organization unit | This entity is related to the organization unit concept of the IBM Security Identity Governance data model. |
Password configuration | This entity is related to the environment configuration defined in the Access Governance core module. |
User | This entity is related to the user concept of the IBM Security Identity Governance data model. |
Visibility | Description |
---|---|
All entities of type entity with no selection | The authorized user can view all entities but cannot select any of them. |
All entities of type entity with selection | The authorized user can select the desired entities. |
Admin scope of entity with no selection | By default, the visibility is ALL. |
Admin scope of entity with selection | Authorized users can select from entities within their visibility (Applications, Entitlements, Organization Unit, and so on). |
List entities of type entities with no selection | The authorized user cannot select any entity from the limited list (defined by the administrator). |
List entities of type entities with selection | The authorized user can select any entity from the limited list (defined by the administrator). |
Columns tab
From this tab, the RD administrator can choose which columns to display in the report.
Column | Description |
---|---|
Visible | If this check box is selected, the report will show the column. |
Order | With the up arrow/down arrow is possible to choose the column position. |
Name | Column name |
Localization Code | The localization code is defined in this field. |
Type | The data type is set in this field. |
Column Width | The column width is defined in this field. |
Order By | Column sorting order |
The RD Administrator can click the Localization Help button, near the Localization Code text area, to verify that a localization code exists and is correct. From the Localization Help window, the RD Administrator can only search for the localization code and its aggregated localized messages but cannot perform any operation.
The RD Module displays these codes according to the chosen default language.
The Localization Help window opens and, if the localization code is registered, the Localization Code and Code Type fields are automatically populated with the specified value. If the localization code is not registered, the search operation does not show any results. In this case, see Edit Labels.
To order the columns in ascending or descending order, click Order By.
The Column to order pane (right) lists columns available for insertion in the frame, Column to use for order condition (left). Select the column to order and click the Add button . The Order condition window opens. Click the Ascending or Descending radio buttons to choose the sorting order.
The Column to use for order condition frame on the left is now automatically populated with the selected column.
Click Ok. The columns are now displayed with the Order by icon.
The Order By heading indicates the sorting order of the columns in a given report. If the icon (Descending order) is present, the number in parenthesis next to the icon indicates the column element that is listed as first. If the icon (Ascending order) is present, the number in parenthesis next to the icon indicates the column element that is listed as last.
Filters tab
An authorized user can now configure these filters (event_operation and target_name) when executing the report from a generic IBM Security Identity Governance application.
Filter name | Custom filter description |
---|---|
Target-list | List of targets |
EventIN-operation | EventIN codes |
EventTarget-operation | EventTarget codes |
SoD Type | Names of SoD types |
The RD Administrator can modify the current localization code in the Localization Code field. If the localization is unsuccessful, it is displayed in red in the Report Filters Localization section of the Localization tab. The administrator can add a filter value in the Fixed Value text field.
This option is a suggested filter structure for the authorized user executing the report from a generic IBM Security Identity Governance application. The user can also modify this value as needed.
For example, might be configured the filter user_code with
a fixed value of 03*
and type Text
.
The report available will have a preset filter value of 03*
,
meaning that the report will contain all users whose user code begins
with 03.
However, the user can change this preset value in the Type area, as the following table outlines:
Item | Description |
---|---|
Custom | Relabeled filter |
Date (DD/MM/YYYY) | Only date format allowed for this filter type |
Extended Date | Both hh:mm:ss and DD/MM/YYYY formats allowed for this
filter type (Inserting hour before date automatically populates the current
hh:mm:ss , which you can modify) |
Number | Only number format allowed for this filter type |
Text | Only text format allowed for this filter type |
Additional data tab
- Send Email pane
- Additional Information pane
- Report Output Format pane
Available options | Description |
---|---|
Email of User Consulting the Report | A default setting to send an email notification to the user executing the report. |
Predefined Email List | List of email addresses to send notifications to: Separate multiple addresses by a semi colon. |
Predefined Email List Fixed by User consulting the Report | This option allows the user executing the report to define the list of email addresses to send notifications to. |
The following table lists the options available in the Additional Data pane:
Available options | Description |
---|---|
Maximum Number of Records | Allows a maximum limit to be set on the amount of data drawn by the report. |
Page Orientation | Allows to choose the orientation of the page for the report output:
|
The RD Administrator can choose one or more of the following output formats in the Report Output Format pane:
- CSV
- HTML
- RTF
- DOCX
- XLSX
Chart tab
- Bar Chart
- 3D Pie Chart
To enable the chart, the RD Administrator can select the Enable Chart check box. The columns available in the Column to order box, depend on which columns the RD Administrator selects in the Columns tab.
To make a given column visible in the report, the RD Administrator must select that column in the Column to order box. The RD Administrator cannot choose more than one column.
This example illustrates a chart that summarizes the type (horizontal axis) and quantity (vertical axis) of the entitlements that are involved in the report. The chart shows that the report involves Business Role and IT Role entitlements. Four are Business Role entitlements and seventy-seven are IT Role entitlements.
The report output format in the example is an XLSX file. The RD Administrator can configure a report output format under the Additional Data tab.
Localization tab
- Report labels
- Column labels
- Filter labels
To edit and localize labels, click Localization.
The localization process is based on two main elements:
- The localization code
- The localization message
For each configured language, the RD Administrator must associate each localization code to a specific localization message (Languages button in Edit Labels section). If the localization message is not configured, the module automatically populates the corresponding language field with the localization code.
Insert the appropriate localization message in the field and click Ok to update and automatically save it. Or, if needed, keep the default localization code.
If the localization message is not localized in any languages, the localization code will be displayed in red.
In this case, the field in the Localization windows displays the localization code. If the codes are not correct, write the appropriate localization message. Otherwise, keep the localization code and click Ok to complete the configuration. The color of the localization code changes to black.
Scroll down the list to verify that all values are localized. If, after saving the transaction, some values are not localized, a Warning window provides suggestions.