Skip to main content

Entitlements with invalid authorizers

Purpose: Reports on entitlements with invalid or insufficient authorizers.

Executable: invalidauthor

Table 1. Entitlements with invalid authorizers report search criteria

Criteria

Description

Report type

Select a report type:

  • Invalid authorizers : lists all authorizers that are no longer valid; for example, authorizers that were removed from the target system.

  • Insufficient authorizers : lists all resources that have less than the minimum required number of authorizers defined.

Entitlement type

This is the type of resource from which you want to list invalid or insufficient authorizers. Select an entitlement type:

  • Target system

  • Template account

  • Managed group

  • Role

  • Segregation of duties rules

Target system ID

Type a comma-and-space-delimited list of target system IDs to list entitlements from those systems. Alternatively, you can search for one or more target systems.

This option is only displayed if Entitlement type is set to Target system , Template account , or Managed group .

Managed groups

Type a comma-and-space-delimited list of managed groups to list entitlements for those groups. Alternatively, you can search for one or more managed groups.

This option is only displayed if Entitlement type is set to Managed group .

Roles

Select one or more roles. This option is only displayed if Entitlement type is set to Role and there is at least one role defined.

Segregation of duties rules

Select one or more SoD rules. By default, all SoD rules are included in the report output. This option is only displayed if Entitlement type is set to Segregation of duties rules and there is at least one SoD rule defined.

Include discovery templates

Select to include discovery templates for target systems.

This option is only displayed if Entitlement type is set to Target system .



In this section: