Skip to main content

Group membership consistency

Purpose: Identifies group memberships with a consistency score based on comparing users by attribute values.

Executable: consistencygroups

Table 1. Group membership consistency report search criteria

Criteria

Description

User ID

Search for one or more users for which you want to run the report. All users are included by default. Alternatively, you can type the short ID of a user or a pattern of user IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character

Group ID

Search for the group you want to report on. Alternatively, you can type the long ID of a group or a pattern of group IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character. All groups are included by default.

Target system ID

Type a comma-and-space-delimited list of target system IDs for which you want to run the report. Alternatively, you can search for one or more target systems.

User attributes to collect users into peer groups

Select at least one attribute to collect users into peer groups. A peer group is a group of users with some attribute in common; for example, users working at the same location or department, or having the same manager.

Minimum size of a user peer group

Specify the size of a peer group. If a peer group has fewer members than this, their entitlement consistency will not be calculated. Instead, an information icon will be displayed in the consistency column for these users in the report. Default value is 2: The value should be 2 or greater.

Mark items as inconsistent if fewer than this percent of peers share the item

Edit the value to determine how out-of-pattern entitlements will be highlighted. By default, if consistency calculations are enabled and fewer than 20% of users share an entitlement, it will be highlighted in the review.

Mark items as consistent if at least this percent of peers share the item

Edit the value to determine how in-pattern entitlements will be highlighted. By default, if consistency calculations are enabled and at least 80% of user share an entitlement, is will be highlighted in the review.



This report can be a bit slow when you try to run for a lot of data, in order to generate a report, you can schedule the report to run at a later time, with options to email or export the output.