Privileged access configuration reports

Group set configuration

Purpose: Configuration of group sets.

Executable: managedgroupset

Table 1. Group set configuration report search criteria

Criteria	Description
Item type to display	Select the group set configuration item type to search by: All : Lists all of the configuration item types of group sets. This is the default setting. Target system hosting user accounts : Lists only the target systems of group sets. Explicitly attached groups : Lists only the explicitly attached groups of group sets. Group inclusion rules : Lists only the group inclusion rules of group sets.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, search for one or more policies.
Group set ID	Type the ID of a group set you want to include in the report. Alternatively, search for one or more group sets.
Target system ID	Type a comma-and-space-delimited list of target system IDs to include in the report. Alternatively, search for one or more target systems. This field is only visible when Item type to display is set to "Explicitly attached groups" , "Target system hosting user accounts" , or "All" .
Group ID	Type the ID of a group you want to include in the report. Alternatively, search for one or more groups. This field is only visible when Item type to display is set to "Explicitly attached groups" or "All" .
Rule ID	Type the ID of a group inclusion rule to include in the report. This field is only visible when Item type to display is set to "Group inclusion rules" or "All" .

Group set members - Missing on managed systems

Purpose: Groups that are defined in a group set but which do not exist on systems in the same managed system policy.

Executable: gsetfailure

Table 2. Group set members - Missing on managed systems report search criteria

Criteria	Description
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs you want to include in the report. Alternatively, you can search for one or more policies.
Group set ID	Type the ID of a group set you want to include in the report. Alternatively, search for one or more group sets.
Managed system ID	Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, you can search for one or more managed systems.
Group type	Choose all, "Explicitly attached", or "Attached by inclusion rule"

Account set configuration

Purpose: Allows you to query on the current configuration of existing account sets (both manually and automatically created). In the Request privileged access (PSW) module, the account set configuration is displayed within 3 tabs: "General", Explicitly attached accounts", and "Account inclusion rule". This report displays the account set information using three different modes, one for each Request privileged access (psw) module tab information.

Most of the fields displayed in the Request privileged access (PSW) module account set tabs are reflected in the filters and output from the report.

Account sets deleted from the system are not returned in the report. Furthermore, when deleting a managed system policy associated to an account set, the account set is automatically deleted.

Select the "report type" first (at the bottom of the search criteria). The search criteria will change based on the "report type" you select.

Executable: maqconfiguration

Table 3. Account set configuration report search criteria

Criteria	Description
Report type	There are three types of reports to select from: Details . All existing account sets should be returned in this mode. Explicitly attached accounts . Only existing account sets with explicitly attached accounts should be returned in this mode. Account inclusion rule and conditions . Only existing account sets with an account inclusion rule should be returned in this mode. The rule may or may not have conditions attached.
Account set ID	Type a comma-and-space-delimited list of account set IDs to include in the report. Leave the field blank to return all of the account sets or alternatively, search for one or more account set IDs.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Leave the field blank to search on all managed system policies or alternatively, search for one or more managed system policy IDs.
Creator ID	Type a comma-and-space-delimited list of creator IDs or leave it blank to search all creators. Alternatively, search for one or more creator IDs.
Shared	When queries are created, they can be shared with other users, or kept personal. Choose one of the following options: (All): all queries (default) Yes : shared queries only No : personal queries only
Managed account	Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character.
Managed system ID	Type a comma-and-space-delimited list of managed system IDs to include in the report. Alternatively, search for one or more managed system IDs.
Valid account	Accounts can become invalid for many reasons, including being deleted from the target system, being removed from the managed system policy or the target system has been removed. Choose one of the following options: (All): valid and invalid accounts (default) Yes : valid accounts only No : invalid accounts only
Rule ID	Type in a specific rule ID or leave it blank to return all of the rules attached to the account set.

Account set access log

Purpose: History of account set access.

Executable: maqlog

Table 4. Account set access log report search criteria

Criteria	Description
Account set ID	Type a comma-and-space-delimited list of account set IDs to include in the report. Alternatively, search for one or more account set IDs. Leave blank if you want to search for all account sets.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, search for one or more managed system policy IDs. Leave blank if you want to search all managed system policy IDs.
Shared	When queries are created, they can be shared with other users, or kept personal. Choose one of the following options: (All): all queries (default) Yes : shared queries only No : personal queries only
Operation	Choose one or many (hold down the Ctrl key to select more than one) of the following options: Add an account set . This will display account sets that were created. Account set access revocation . This will display account set access requests that were revoked. Check in account sets . This will display account set access request check-ins. Check out account set access . This will display account set access request check-outs. Delete an account set . This will display account sets that were deleted. Update an account set . This will display account sets that were updated.
Operation date	Define a date range during which the operation was run.
User ID	Type a comma-and-space-delimited list of user IDs to include in the report. Alternately, search for one or many user IDs.

Account set saved commands

Purpose: Allows you to query detailed information about account sets saved commands.

Executable: maqsavedcommand

Table 5. Account set saved commands report search criteria

Criteria	Description
Command	Enter the saved commands executed with the account set access.
Account set ID	Type a comma-and-space-delimited list of account set IDs to include in the report. Leave the field blank to return all of the queries or alternatively, search for one or more account set IDs.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Leave the field blank to search on all managed system policies or alternatively, search for one or more managed system policy IDs.
Command creator ID	Type a comma-and-space-delimited list of "command creator IDs" or leave it blank to search all command creators. Alternatively, search for one or more command creator IDs.
Create date	Define a date range during which the command was created.
Shared command	When commands are created, they can be shared with other users, or kept personal. Choose one of the following options: (All): all commands (default) Yes : shared commands only No : personal commands only

Discovered system status

Purpose: Displays the status of discovered systems (managed or unmanaged).

Executable: discoveredsystemstatus

Table 6. Discovered system status report search criteria

Criteria	Description
Status	Select a status to run: All Managed Unmanaged
Discovered system name	Type a comma-and-space-delimited list of discovered system names to include in the report. Alternatively, search for one or more users.
Address	Enter the address of the discovered system.
Display attribute	Select one of the attributes from the drop-down list. The value of that attribute will be displayed in the report.
Filter attribute	Select one of the attributes from the drop-down list. The value specified by the corresponding Filter value will act as a search filter in the report.
Filter value	Value associated with the preceding filter attribute: which will act as the search filter.
Last connect time	Define a date range for the last connect time.

Managed system status

Purpose: Status of managed systems, including number of managed accounts, last connection time and failure counts.

Executable: managedsystemstatus

Table 7. Managed system status report search criteria

Criteria	Description
Report type	Select a report type from the drop-down list: View updated systems View systems that were not updated
Integration direction	Select one of the options from the drop-down list: Push mode Local service mode
Managed system ID	Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, you can search for one or more managed systems.
Status	Select one of the options from the drop-down list: All Attached to at least one policy Not attached to a policy
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, search for one or more policies.
Manual password randomization batches	Select one of the options from the drop-down list: All Show only systems where passwords have been randomized Show only systems where no passwords have been randomized Show only systems with at least one managed account whose password has not been randomized
Attribute	Select one of the attributes from the drop-down list. The value of that attribute will be displayed in the report.
Last connect time	Define a date range for the last connect time. This option will only be present when Report Type is set to "View updated systems".
Length of time without connection	Define a date range for the length of time without connection. This option will only be present when Report Type is set to "View systems that were not updated".

Managed system summary

Purpose: List information about managed systems.

Executable: resourcesummary

Table 8. Managed system summary report search criteria

Criteria	Description
Managed system ID	Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, you can search for one or more managed systems.
Managed system description	Type the description for a managed system you want to include in the report.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, you can search for one or more policies.
Display only managed systems not associated to any policy	Enable this checkbox to display only managed systems not associated to any managed system policy.
Number of days for inactive managed systems	Enter a positive number of days, and if a managed system has become inactive within the specified number of days, then it will be included in the report.
Choose last connection date	Define a date range of last contact between the managed system and Bravura Security Fabric .
Choose initial date	Define a date range during which the managed system was added to Bravura Security Fabric .

Account / Subscriber dependencies

Purpose: Show domain and local accounts and the objects that use them.

Executable: discoveredaccounts

Table 9. Account / Subscriber dependencies report search criteria

Criteria	Description
Report type	Select the type of report to run: Domain account : Domain accounts running local server/workstation objects Local account : Local accounts running server/workstation objects Object : Subscribers/Security groups
Observed account	Type the observed account ID to include in the report. The ID must exactly match the format that was provided to the object.
Associated account	Type the short ID of an account to include in the report.
Associated account status	Select the type of accounts to include: (All) : managed and unmanaged accounts Managed : managed accounts only Unmanaged : unmanaged accounts only
Associated target system ID	Type a comma-and-space-delimited list of IDs of target systems from which accounts are associated. For local accounts, this is also where the objects are associated from. Alternatively, search for target systems.
Discovered target system	Type a comma-and-space-delimited list of IDs of target systems from which objects are run by domain accounts. This option is only available for the domain account report. Alternatively, search for target systems.
Object name	Type the name of the object.
Object type	Select one or more object types to include in the report: Used to run a service Used in IIS Application Pool, Virtual Directory or FTP Site Used to run a scheduled task Used to run a DCOM object Custom account usage Sharepoint service account
Associated target system status	Select the type of target systems to include: (All) : managed and unmanaged target systems Managed : managed target systems only Unmanaged : unmanaged target systems only
Associated target system integration method	Select the type of target system integration to include: (All): push and local service mode target systems Push mode Local service mode
Last load time	Define a date range during which the object was last loaded.
Account is associated	Select this option to include accounts that are associated with a target system. This field is visible when Report type is Object.
Associated account is valid	Select this option to include valid associated accounts. This field is only visible when Account is associated is selected.
Summarize report	Select this if you prefer to have a numerical summary of the report.

Discovered subscribers

Purpose: Show discovered subscribers and its attributes.

Executable: discoveredsubscribers

Table 10. Discovered subscribers report search criteria

Criteria	Description
Report type	Select the type of report to run: Domain account : Domain accounts running local server/workstation objects Local account : Local accounts running server/workstation objects Subscriber not associated : Objects not currently associated to a target system
Associated target system ID	Type a comma-and-space-delimited list of IDs of target systems from which accounts are associated. For local accounts, this is also where the objects are associated from. Alternatively, search for target systems.
Discovered target system	Type a comma-and-space-delimited list of target systems from which objects are run by domain accounts. Alternatively, search for target systems.
Observed account	Type the observed account ID to include in the report. The ID must exactly match the format that was provided to the object.
Object type	Select one or more object types to include in the report: Used to run a service Used in IIS Application Pool, Virtual Directory or FTP Site Used to run a scheduled task Used as identity for a DCOM object Custom account usage Sharepoint service account
Object name	Type the name of the object.
Associated account	Type the short ID of an account to include in the report.
Associated account status	Select the type of accounts to include: (All): managed and unmanaged accounts Managed : managed accounts only Unmanaged : unmanaged accounts only
Last load time	Define a date range during which the object was last loaded.
Subscriber attributes	Select one or more subscriber attributes to include in the report.

Managed systems and accounts - Import method

Purpose: Show whether managed systems or managed accounts were added manually or created using an import rule.

Executable: managedmethod

Table 11. Managed systems and accounts - Import method report search criteria

Criteria	Description
Report type	Select the type of report to run: Managed accounts : Lists managed accounts and how they were managed. Managed systems : Lists managed systems and how they were managed.
Method	Select the type of method the managed accounts or systems were added: Added automatically or manually set : Lists managed accounts or systems that have been added manually or using import rules. Manually set : Lists managed accounts or systems that have been added manually. Added automatically : Lists managed accounts or systems that have been added using import rules.
Managed account	Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character. This field is only visible when Report type is set to Managed accounts .
Managed system ID	Type a comma-and-space-delimited list of IDs of managed systems to include in the report. Alternatively, search for one or more users.
Managed systems rule ID	Type a comma-and-space-delimited list of IDs of managed system import rules to include in the report. This field is only visible when Report type is set to "Managed systems" . Alternatively, search for one or more users.
Managed system policy ID	Type a comma-and-space-delimited list of IDs of managed system policies to include in the report. This field is only visible when Report type is set to "Managed systems" . Alternatively, search for one or more users.

Managed account attributes

Purpose: Displays discovered system attributes, managed system resource attributes, managed account resource attributes and account attributes of a managed account.

Executable: managedaccountattributes

Table 12. Managed account attributes report search criteria

Criteria	Description
Managed system ID	Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, you can search for one or more managed systems.
Managed system description	Type the description for a managed system you want to include in the report.
Discovered system attribute to display	Choose which discovered system attributes to display.
Discovered system attribute to search	Select a discovered system attribute on which to filter. You can select up to four attributes. The union of all attributes configured will be returned.
Managed system resource attribute to display	Choose which managed system resource attributes to display.
Managed system resource attribute to search	Select a managed system resource attribute on which to filter. You can select up to four attributes. The union of all attributes configured will be returned.
Managed account	Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character.
Account attribute to display	Choose which account attributes to display.
Account attribute to search	Select an account attribute on which to filter. You can select up to four attributes. The union of all attributes configured will be returned.
Managed account resource attribute to display	Choose which managed account resource attributes to display.
Managed account resource attribute to search	Select a managed account resource attribute on which to filter. You can select up to four attributes. The union of all attributes configured will be returned.
Comparison	This field is displayed if the Managed system resource attribute to search or Managed account resource attribute to search field is something other than "Attribute not required". Comparators available depend on the resource attribute type. Select: is empty - if you want Bravura Security Fabric to search on empty values. is not empty - if you want Bravura Security Fabric to search on non empty values. is equal to - if you want Bravura Security Fabric to search on values equal to a specified string. is not equal to - if you want Bravura Security Fabric to search on values not equal to a specified string. is less than - if you want Bravura Security Fabric to search on values that are less than a specific integer. is less than or equal to - if you want Bravura Security Fabric to search on values that are less than or equal to a specific integer. is greater than - if you want Bravura Security Fabric to search on values that are greater than a specific integer. is greater than or equal to - if you want Bravura Security Fabric to search on values that are greater than or equal to a specific integer. is greater than or equal to - if you want Bravura Security Fabric to search on values that are greater than or equal to a specific integer. is later than today + N days - if you want Bravura Security Fabric to search on dates that are later than N days after today. is earlier than, or equal to, today - N days - if you want Bravura Security Fabric to search on dates that are earlier or equal to N days before today.
Value	Type or select the value to compare. Required if Discovered system attribute to search or Account attribute to search field is something other than "Attribute not required" , or Comparison field is set to something other than is empty or is not empty .

If you do not specify any search criteria, the report output includes all managed accounts.

Managed system policies

Purpose: Lists information about managed system policies.

Executable: resgroup

Table 13. Managed system policies report search criteria

Criteria	Description
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, you can search for one or more policies.
Managed system policy description	Type the description of the managed system policy to include in the report.
Managed system policy type	Select one or more managed system policy types.
Managed by	Select one or more node IDs.
Push mode managed system policy status	Select one or more managed system policy statuses.
Scope of password synchronization	Select one or more password synchronization methods: No password synchronization Synchronize accounts with same ID Synchronize all accounts in policy
Authentication type	Select one or more authentication types. This option is only available if Report type = Summary . Group set Password SSH key
Report type	Select what type of report to generate: Summary List managed accounts List target type summary Display managed system policy password policies Display password randomization schedule details List managed system import rules List managed system policies authorizers

Privileged password synchronization conflicts

Purpose: Identify potential misconfiguration of accounts in managed system policies some of which employ password synchronization and others that do not.

Executable: syncmngsyspolicy

Table 14. Privileged password synchronization conflicts report search criteria

Criteria	Description
Report type	Select the type of report to run: Display managed system policy account conflicts - summary : Lists a summary of conflicts. A conflict exists if a managed account on a managed system belongs to more than one managed system policy, and at least one of those policies has password synchronization enabled. Display managed system policy account conflicts - details : Lists full details for the conflicts described in the summary above. Display accounts with synchronized passwords : Lists managed accounts with synchronized passwords. Display accounts with unsynchronized passwords : Lists managed accounts that are configured for password synchronization but are actually unsynchronized.
Managed account	Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, you can search for one or more policies. This option only appears if Report type is set to either "Display accounts with synchronized passwords" or "Display accounts with unsynchronized passwords".
Scope of password synchronization	Select the scope of password synchronization to include in the report. This option only appears if Report type is set to either "Display accounts with synchronized passwords" or "Display accounts with unsynchronized passwords".

Configured user groups in managed system policies

Purpose: For all, or specified managed system policies, returns any user groups configured with at least one access control.

Executable: policyusergroup

Table 15. Configured user groups in managed system policies report search criteria

Criteria	Description
Managed system policy ID	Type a comma-and-space-delimited list of IDs of managed system policies to include in the report. Alternatively, search for one or more managed system policies.
User group ID	Select one or more user groups to include in the report.
Display configuration details	By selecting this option, additional details will be included in the report, including user classes, users, managed systems and managed accounts.
Display access controls in single column	This option is enabled by default. If unchecked, a separate column for each access control will be displayed. This option is only available if Display configuration details is selected.
User class ID	Select one or more user classes to include in the report. This option is only available if Display configuration details is selected.
User ID	Type a comma-and-space-delimited list of IDs of users to include in the report. Alternatively, search for one or more users. This option is only available if Display configuration details is selected.
Managed system ID	Type a comma-and-space-delimited list of IDs of managed systems to include in the report. Alternatively, search for one or more managed systems. This option is only available if Display configuration details is selected.
Managed account	Search for one or more managed accounts to include in the report. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character. This option is only available if Display configuration details is selected.

Rights of specified users

Purpose: Show all access rights that specified users have within Privileged Access Manager.

Executable: useraccess

Table 16. Rights of specified users report search criteria

Criteria	Description
User ID	Type a comma-and-space-delimited list of IDs of users to include in the report. This is a required field. Alternatively, search for one or more users.
User name	Type the name of the user to include in the report.
Managed system ID	Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, search for one or more managed systems.
Managed account	Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character.
Group set ID	Type a comma-and-space-delimited list of IDs for group sets you want to include in the report. Alternatively, search for one or more group sets.
Managed system policy ID	Type a comma-and-space-delimited list of IDs for managed system policies you want to include in the report. Alternatively, search for one or more managed system policies.
User group ID	Type a comma-and-space-delimited list of IDs for user groups you want to include in the report. Alternatively, search for one or more managed systems.
With privileges only	Enable this checkbox to display only managed objects that the user has permission to access.

Import rules list

Purpose: Configuration of import rules used to activate target systems, managed systems and managed accounts.

Executable: importrulelist

Table 17. Import rules list report search criteria

Criteria	Description
Target systems rule ID	Search for or type target systems import rules. This option only appears if at least one target systems import rule is defined.
Managed systems rule ID	Search for or type managed systems import rules. This option only appears if at least one managed systems import rule is defined.
Managed accounts rule ID	Search for or type managed accounts import rules. This option only appears if at least one managed accounts import rule is defined.
New system connection credentials	Select the connection method for the Bravura Security Fabric server to use when it attempts to connect to the discovered systems.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, you can search for one or more policies.
Condition ID	The ID of the import rule condition.
Rule type	Select the type of import rule: All Target systems Managed systems Managed accounts
Action to perform on matching objects	Select the type of rule usage: All Manage or bind all discovered objects that satisfy this rule Stop managing or unbind all discovered objects that satisfied this rule

Import rule test results

Purpose: List discovered objects that have been tested against import rules. For each discovered object only the most recent test is displayed.

Executable: importruletest

Table 18. Import rule test results report search criteria

Criteria	Description
Discovered object	Type the discovered object that has been tested against import rules for which you want to generate the report.
Discovered system	Search for or type the ID of a discovered system.
Rule type	Select the type of import rule: All: This is the default setting Target systems Managed systems Managed accounts
Target systems rule ID	Search for or type target systems import rules. This option only appears if at least one target systems import rule is defined.
Managed systems rule ID	Search for or type managed systems import rules. This option only appears if at least one managed systems import rule is defined.
Managed accounts rule ID	Search for or type managed accounts import rules. This option only appears if at least one managed accounts import rule is defined.
Condition ID	The ID of the import rule condition. This only displays results if the rule failed.
Action performed by	Type either the service or user that performed the test.
Current status	Select the current status to include: All: This is the default setting. Managed Unmanaged
Result	Select the results to be displayed: All: This is the default setting. Passed Failed
Import rule test date	Define a date range for the test date.
Report type	Select Discovered object or Rule ID to group the report by the selected type. Default is discovered object .

Import rule trial run results

Purpose: List discovered objects that have been given a trial run against import rules. For each discovered object only the most recent trial run is displayed.

Executable: trialrun

Table 19. Import rule trial run results report search criteria

Criteria	Description
Discovered object	Type the discovered object that has been tested against import rules for which you want to generate the report.
Discovered system	Search for or type the ID of a discovered system.
Rule type	Select the type of import rule: All Target systems Managed systems Managed accounts
Target systems rule ID	Search for or type target systems import rules. This option only appears if at least one target systems import rule is defined.
Managed systems rule ID	Search for or type managed systems import rules. This option only appears if at least one managed systems import rule is defined.
Managed accounts rule ID	Search for or type managed accounts import rules. This option only appears if at least one managed accounts import rule is defined.
Action performed by	Type either the service or user that performed the test.
Current status	Select the current status to include: All: This is the default setting. Managed Unmanaged
Result	Select the results to be displayed: All: This is the default setting. Passed Failed
Import rule test date	Define a date range for the test date.

Import rule binding failures

Purpose: Deactivation of imported managed account or systems due to import rule condition expression mismatch.

Executable: importrulebindfailures

Table 20. Import rule binding failures report search criteria

Criteria	Description
Discovered object type	Choose: Discovered system : Returns only systems that were deactivated. Discovered account : Returns only accounts that were deactivated.
Managed systems rule ID	Search for or type managed systems import rules. This option only appears if at least one managed systems import rule is defined.
Managed accounts rule ID	Search for or type managed accounts import rules. This option only appears if at least one managed accounts import rule is defined.
Discovered account	Type the name of the discovered account to include in the report. This option is only available when Discovered object type is set to "Discovered account".
Discovered system	Type a comma-and-space-delimited list of discovered systems to include in the report. Alternatively, search for one or more discovered systems.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, you can search for one or more policies.
Import rule test date	Define a date range for the test date.

Import rules performance

Purpose: This report calculates performance statistics for import rule evaluations.

Executable: importruleperformance

Table 21. Import rules performance report search criteria

Criteria	Description
Rule type	Select one of the options from the drop-down list: All Target systems Managed systems Managed accounts
Target systems rule ID	Type a comma-and-space-delimited list of IDs of target system import rules to include in the report. Alternatively, search for one or more import rules.
Managed systems rule ID	Type a comma-and-space-delimited list of IDs of target system import rules to include in the report. Alternatively, search for one or more import rules.
Managed accounts rule ID	Type a comma-and-space-delimited list of IDs of managed account import rules to include in the report. Alternatively, search for one or more import rules.
Integration direction	Select one of the options from the drop-down list: All Push mode Local service mode
Rule execution status	Select statuses: Finished Processing Canceled Deleting
Rule execution start date	Define a date range during which the rule started execution.
Rule execution end date	Define a date range during which the rule finished execution.

Imported target systems

Purpose: Target systems that were added using an import rule.

Executable: importtargets

Table 22. Imported target systems report search criteria

Criteria	Description
Discovered target system	Type a comma-and-space-delimited list of IDs of auto-discovered target systems to include in the report. Alternatively, search for one or more discovered target systems.
Target systems rule ID	Type a comma-and-space-delimited list of IDs of target system import rules to include in the report. Alternatively, search for one or more import rules.
New system connection credentials	Select credentials to be used to connect to the target systems: Create new credentials on managed system Use valid credential from template target system Use credentials from source system

Imported managed systems

Purpose: Managed systems that were added using an import rule.

Executable: importsystems

Table 23. Imported managed systems report search criteria

Criteria	Description
Discovered managed system	Type a comma-and-space-delimited list of IDs of managed systems to include in the report. Alternatively, search for one or more discovered managed systems.
Managed systems rule ID	Type a comma-and-space-delimited list of IDs of target system import rules to include in the report. Alternatively, search for one or more import rules.
Managed system policy ID	Type a comma-and-space-delimited list of IDs of managed system policies to include in the report. Alternatively, search for one or more managed system policies.

Imported managed accounts

Purpose: Managed accounts that were added using an import rule.

Executable: importaccounts

Table 24. Imported managed accounts report search criteria

Criteria	Description
Discovered account	Type the ID of a managed account to include in the report.
Discovered managed system	Type a comma-and-space-delimited list of IDs of managed systems to include in the report. Alternatively, search for one or more managed systems.
Managed accounts rule ID	Type a comma-and-space-delimited list of IDs of managed account import rules to include in the report. Alternatively, search for one or more import rules.
Managed system policy ID	Type a comma-and-space-delimited list of IDs of managed system policies to include in the report. Alternatively, search for one or more managed system policies.

Automatically discovered target system administrator creation

Purpose: List administrators created from target system import rules. Executable: admincreation Search Criteria:

Table 25. Automatically discovered target system administrator creation report search criteria

Criteria	Description
Discovered target system	Enter the ID of the discovered target system. Alternatively, search to find matching discovered target systems.
Target systems rule ID	Enter the ID of the target system rule ID. Alternatively, search to find the matching rules.
Administrator ID	Enter the ID of the administrator.
Last run time	Define a date range for the last run time.

Team Management configuration

Purpose: Displays configuration of Team Management, including teams, team members and their privileges, and onboarded systems and accounts.

Executable: pamteammanagement

Table 26. Team Management configuration report search criteria

Criteria	Description
Report type	Select a report type from the drop-down list: Teams Teams and systems Teams and system/accounts Teams and privileges Teams and users Teams, privileges, and users Teams, privileges, users, and systems Teams, privileges, users, and systems/accounts Users, systems, and privileges Users, system/accounts, and privileges
Team name	Type a comma-and-space-delimited list of IDs for teams you want to include in the report. Alternatively, you can search for one or more teams. This field is only available for report types that include teams.
Team description	Type the description for a team you want to include in the report. This field is only available for report types that include teams.
Privilege	Select one or more privileges to include in the report. Privileges include: Account Trustees Approvers Auto Approved Credential Manager LC Trustees OTP Trustees Requesters Subscriber Trustees System Trustees Team Trustees Vault Trustees This field is only available for report types that include privileges.
Group by privilege	Enable this checkbox to group records by privilege. This field is only available for report types that include privileges.
System ID	Type a comma-and-space-delimited list of IDs for onboarded systems you want to include in the report. Alternatively, you can search for one or more onboarded systems. This field is only available for report types that include systems.
System name	Type the description for a managed system you want to include in the report. This field is only available for report types that include systems.
User ID	Type a comma-and-space-delimited list of IDs of team users to include in the report. Alternatively, search for one or more users. This field is only available for report types that include users.
User name	Type the name for a team user you want to include in the report. This field is only available for report types that include users.
Account name	Type a comma-and-space-delimited list of IDs for onboarded accounts you want to include in the report. Alternatively, you can search for one or more onboarded accounts. This field is only available for report types that include accounts.

Click below to view a demonstration of running a privileged access configuration report to review the team management configuration.

Conflicting passwords

Purpose: List current conflicting passwords and their details.

Executable: conflictingpasswords

Table 27. Conflicting passwords report search criteria

Criteria	Description
Account	Select or search for one or more accounts to include in the report.
Managed system ID	Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, you can search for one or more managed systems.
Managed system policy ID	Type a comma-and-space-delimited list of managed system policy IDs to include in the report. Alternatively, search for one or more policies.

In this section: