Skip to main content

Managed account check-outs / check-ins

Purpose: Information about current and historical access to managed accounts (check-outs).

Executable: passwordcico

Select the "Report type" first (bottom of the search criteria). The search criteria changes based on the "Report type" you select.

Table 1. Managed account check-outs / check-ins report search criteria

Criteria

Description

Report type

There are three types of reports to select from:

  • Detailed : This mode displays the full details.

  • Summary : In this mode the available search criteria are ’Managed system ID’, ’Managed account’, ’Search time by’, ’Request attribute to search’, ’Minimum number of check-outs’, ’Maximum number of rows to display’ and ’Operation to perform for check-out and check-in’.

  • Accounts that have not been checked out : In this mode, only accounts that have not been checked out will be shown in the report. The available search criteria are ’Managed system ID’, ’Managed account’ and ’Specify time’.

Managed system ID

Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. Alternatively, search for one or more managed systems.

Managed account

Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, ’*’ representing any string of characters and ’?’ representing any single character.

Requester ID

Type the profile ID of the requester for whom you want to run the report. Alternatively, search for one or more profile IDs.

Recipient ID

Type the profile ID of the recipient for whom you want to run the report. Alternatively, search for one or more profile IDs.

Search time by

Select whether to run the report based on the following:

  • Do not search by time

  • Check-out time

  • Check-in time

  • Expiration time

Specify time

This is only available when Search time by is set to "Expiration time","Check-in time" or "Check-out time". Specify a date range.

Time range

This is only available when Search time by is set to "Check-out time". Specify a time range:

  • Time range not required : This is the default setting. Information is listed regardless of start time.

  • Use time range : Information is only included in the report output if the start time falls within the start time range. Use the:

    • Start time field to select the earliest time to include.

    • End time field to select the latest time to include.

Check-out status

Select the check-out status to include in the report. By default, all are included.

  • Checking out

  • Checked out

  • Checking in

  • Checked in

  • Pending

  • Closed

  • Being expired

  • Expired

  • Being checked in

  • Checked in by another user

  • Check-out failed and was rolled back

  • Check-out failed and rollback failed

  • Check-in failed and was rolled back

  • Check-in failed and rollback failed

    This option is only available if Report type = Detailed .

Request attribute to search

The request attribute to search by. You can define up to 2 attributes. Choose one of the following options to define an attribute:

  • Attribute not required : This is the default setting. Results are included regardless of their attribute value.

  • <attribute> : Search for check-out/check-in with an attribute value that matches Attribute value to search .

Request attribute to display

Choose from the list of request attributes to be displayed in the report.

Operation to perform for check-out and check-in

Select one or more operations:

  • Password

  • SSH key



Click below to view a demonstration.

In this section: