Certification of entitlements reports

Review certification details

Purpose: Provides details about the operations and access change requests submitted through certification campaigns.

Executable: certfulldata

Table 1. Review certification details report search criteria

Criteria	Description
Campaign status	Select a value to only include campaigns with a matching status. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Reviewer ID	Type a user’s profile ID to only display campaigns for which the user is assigned as a reviewer. Alternatively, you can search for one or more profile IDs.
Primary reviewer attributes to display	Choose which primary reviewer attributes to display.
Reviewed by	Type a profile ID that matches the "actual reviewer" for whom you want to run the report. Alternatively, you can search for one or more profile IDs. The "actual reviewer" is the user who certified the data or submitted an access change request, and is not necessarily a user who is assigned as a reviewer for the campaign (the user can be a delegate).
Actual reviewer attributes to display	Choose which actual reviewer attributes to display.
User ID	Type a profile ID to only include certification details for this user’s resources. Alternatively, you can search for one or more profile IDs.
Show only change requests	Select this checkbox to only include change requests in the report.
Summarize report	Select this checkbox to show summary information for each certification campaign, reviewer, and operation combination.
Show summary of these operations	Select the operations that you want to include in the report.
Choose start date	Define a date range during which the campaign was initiated.

If you do not specify any search criteria, details for all campaigns are included in the report.

Reviewer details

Purpose: Displays a summary of each reviewer’s progress in a certification campaign.

Executable: certification

Table 2. Reviewer details report search criteria

Criteria	Description
Campaign status	Select a value to only include campaigns with a matching status. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Reviewer ID	Type a user’s profile ID to only display campaigns for which the user is a reviewer. Alternatively, you can search for one or more profile IDs.
Choose start date	Choose a date range in which the campaign was initiated (this is not the date that the reviewer started).
Choose end date	Choose a date range in which the campaign ended.
Summary per operations	Select this checkbox to show summary information for each operation (certify account, certify group membership, and so on).
Display subtotals	Select one of the Subtotal by <period> options to sort the report and show subtotals by the time period selected. The time period is one of: week, month, quarter, or year. The default is No subtotals .
Certifiable item threshold per period	Type a number in this field to indicate the items threshold. Records are included in the report if the number of certifiable or assigned items for the time period is greater than or equal to the threshold. The time period is determined by Display subtotals.

If you do not specify any search criteria, the report output is sorted by reviewer and campaign. It includes information about the segment, milestone times, campaign age, and number of certifiable items.

In the report output, if you select Summary per operations or any of the Subtotal by <period> options :

No subtotals or With subtotals :

Assigned items: is the total number of items, in all certification campaigns, for the indicated reviewer and operation.
Approved: is the number of assigned items that have been certified and signed off.
Denied: is the number of assigned items that have been marked for revocation and signed off.
Open: is the number of assigned items that have not been acted on.
Canceled: is the number of assigned items that no longer require certification (due to a user transfer, violation of a segregation of duties rule, or a product administrator canceling the campaign).
Number delegated: is the number of corresponding operations that were decided by a delegate.

Changes since review

Purpose: Reports on changes that occurred in a given certification campaign after it was completed; for example it reports on any requests to revoke entitlements that were denied by authorizers.

Executable: certpostchange

Table 3. Changes since review report search criteria

Criteria	Description
Campaign description	Type a campaign description to only display changes for the campaign. Alternatively, you can search for one or more campaign descriptions.
Target system ID	Type a target system ID to only display changes for the target. Alternatively, you can search for one or more target system IDs.
Roles	Type a role to only display changes for the role. Alternatively, you can search for one or more roles.
Managed groups	Type a managed group to only display changes for the group. Alternatively, you can search for one or more managed groups.
Segregation of duties rules	Type a segregation of duties rule to only display changes for the rule. Alternatively, you can search for one or more segregation of duties rules.
Reviewer ID	Type a reviewer ID to only display changes for the specified reviewer. Alternatively, you can search for one or more reviewer IDs.
Authorizer ID	Type an authorizer ID to only display changes for the specified authorizer. Alternatively, you can search for one or more authorizer IDs.
User ID	Type a profile ID to only display changes for the specified user. Alternatively, you can search for one or more profile IDs.
User name	Type a user name to only display changes for the specified user.

If access to a resource is revoked during a certification campaign but that request is denied or canceled, the resource is reported as "added". This is because according to the certification campaign, that access shouldn’t exist.

The Changes since review report does not currently report changes for campaigns certified in segments, or by OrgChart managers.

Entitlements certification coverage

Purpose: Reports on which users and entitlements have been reviewed.

Executable: certcoverage

Table 4. Entitlements certification coverage report search criteria

Criteria	Description
Entitlement type	Select the type of entitlement being reviewed: Profile Account Managed group Role Approved exception to segregation of duties rules Each of these options can be included in a certification campaign.
Target system ID	Type or for The ID of the target system to which an account or managed group belongs. This option is only displayed if Account or Managed group is selected for entitlement type.
Managed groups	If you selected this entitlement type, type or search for the groups to include in the report.
Roles	If you selected this entitlement type, type a comma-and-space-delimited list of roles to include in the report. Alternatively, you can search for one or more roles.
Segregation of duties rules	If you selected this entitlement type, select the rules to include in the report. Only valid rules are displayed.
Certification start	Define a date range that the campaign was initiated.
Certification end	This is the date that the campaign was signed off.
Options	Select options to include in the report: Reviewed : Show users who were certified and signed off. Not reviewed : Show users who were not signed off yet. Entitlements (reviewed for all) : Show entitlements that were certified for all assigned users; that is, the assignment of entitlement was reviewed in relation to all user profiles who had the entitlement. This option is selectable for all types other than profile. Entitlements (reviewed for some) : Show entitlements that were certified for some assigned users; that is, the assignment of the entitlement was reviewed in relation to at least some user profiles. This option is selectable for all types other than profile. Entitlements (unreviewed for all) : Show entitlements that were not certified at all; that is, the assignment of the entitlement was not reviewed at all. This option is selectable for all types other than profile.
Show orphan accounts	Check to show user name and user ID for orphan accounts. This option is only available if Account or Managed group is selected.
Show child groups	Check to show child groups. This option is only available if Managed group is selected.
Show most recent certifications	Check to show only the most recent certification for the entitlements. This option is only available if Reviewed is selected.
Show unreviewed details	Check to list unreviewed entitlements instead of just showing a summary. This option is only available if Entitlements (reviewed for some) or Entitlements (unreviewed for all) is selected.

Saved entitlement certification setups

Purpose: Reports on saved setups for entitlements certification campaigns.

Executable: savedrounds

Table 5. Saved entitlement certification setups report search criteria

Criteria	Description
Certification setup ID	Type a comma-and-space-delimited list of saved certification setup IDs to only include specified setups. Alternatively, you can search for one or more saved certification setups.
Owner	Type a comma-and-space-delimited list of saved certification setup owner profile IDs to only include setups with the specified owners. Alternatively, you can search for one or more saved certification setup owner IDs.
Certification method	Select a value to only include saved certification setups with a matching certification method.
Certification setup shared	Select a value to only include saved certification setups with a matching shared status.
Ready to run	Select a value to only include saved certification setups with a matching validity.
Display	Show the entitlement types that are included in the saved certification setups.

Certification details

Purpose: Provides detailed information on certification campaigns based on status, date, reviewer, and entitlement criteria.

Executable: certdetails

Table 6. Certification details report search criteria

Criteria	Description
Campaign status	Select a certification campaign status to only include those campaigns in the report: All campaigns : All campaign statuses Active campaigns : Started but not yet signed-off by reviewer Completed campaigns : Signed-off by reviewer Canceled campaigns : Have been canceled
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Reviewer ID	Type a comma-and-space-delimited list of profile IDs to only include rounds that are reviewed by the specified reviewers. Alternatively, you can search for one or more profile IDs.
Recipient ID	Type one or more recipient profile IDs that are affected by the certification campaigns. Alternatively, you can search for one or more profile IDs.
Choose start date	Define a date range during which the campaign was initiated (not the date that the reviewer started).
Choose end date	Define a date range during which the campaign ended.
Entitlement type	Select the type of entitlement being reviewed: Profile Account Managed group Role Resolved segregation of duties rules violations
Target system ID	Type the ID of one or more target systems for the accounts or managed groups. This option is only displayed if Entitlement type is set to either Account or Managed group . Alternatively, you can search for one or more target system IDs.
Managed groups	Type the group ID for one or more managed groups to include in the report. This option is only displayed if Entitlement type is set to Managed group . Alternatively, you can search for one or more group IDs.
Roles	Type a comma-and-space-delimited list of roles to include in the report. This option is only displayed if Entitlement type is set to Role . Alternatively, you can search for one or more roles.
Segregation of duties rules	Select one or more SoD rules to include in the report output; only valid rules are displayed. This option is only displayed if Entitlement type is set to Resolved segregation of duties rules violations .

Certification of entitlements campaigns

Purpose: Summarizes certification campaigns by segment based on status, date, initiator and reviewer.

Executable: certrounds

Table 7. Certification of entitlements campaigns report search criteria

Criteria	Description
Campaign status	Select a value to only include campaigns with a matching status. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Initiation type	Select a value to only include campaigns with a matching initiation type (how was the campaign initiated). The possible values are: All initiation type Initiated by administrative web UI Initiated as a single-user review Initiated as a review of all entitlements Initiated by IDAPI Initiated by certification scheduler
Initiator ID	Type a comma-and-space-delimited list of profile IDs to only include campaigns that are initiated by the specified initiators. Alternatively, you can search for one or more profile IDs.
Reviewer ID	Type a comma-and-space-delimited list of profile IDs to only include campaigns that are reviewed by the specified reviewers. Alternatively, you can search for one or more profile IDs.
Choose start date	Define a date range that the campaign was initiated (not the date that the reviewer started).
Choose end date	Define a date range that the campaign ended.
Summarize report	Select to only show the number of campaigns matching the criteria above, instead of the list.

Completion percentage

Purpose: Progress in completing currently active certification campaigns. Overview information on completion percentage based on campaign description, initiator, certification method, completed percentage and date.

Executable: certcompletion

Search Criteria :

Criteria	Description
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Initiator ID	Type a comma-and-space-delimited list of profile IDs to only include campaigns that are initiated by the specified initiators. Alternatively, you can search for one or more profile IDs.
Certification method	Select a value to only include campaigns with a matching certification method. The possible values are: All certification methods Single reviewer Segment reviewers Entitlement authorizers OrgChart manager Certification by defined relationship
Completed percentage lower than or equal to	Enter a numeric value between 0 and 100 to view active campaigns by percentage of completion.
Choose start date	Define a date range that the campaign was initiated (not the date that the reviewer started).
Last action date	Define a date range that the reviewer last acted on an active campaign.

Unreviewed data

Purpose: Lists entitlements that do not have valid certification on the specified date. Either the entitlement has expired or it has never been reviewed before that date.

Executable: uncertifieddata

Table 8. Unreviewed data report search criteria

Criteria	Description
Type of unreviewed data to search for	Select one or more types of data that you want to include in the report: User profiles Target system Managed group Role Approved exception to segregation of duties rules
Target system ID	Type a comma-and-space-delimited list of target system IDs to include for accounts or managed groups. This option is only displayed if Target system or Managed group is included in Type of unreviewed data to search for. Alternatively, you can search for one or more target system IDs.
Managed groups	Type the group ID of the managed group to include in the report. This option is only displayed if Managed group is included in Type of unreviewed data to search for. To select multiple groups, you can search for group IDs.
Roles	Type a comma-and-space-delimited list of role IDs to include in the report. This option is only displayed if Role is included in Type of unreviewed data to search for. Alternatively, you can search for one or more roles.
Segregation of duties rules	Type a comma-and-space-delimited list of SoD rule IDs to include in the report; only approved exceptions to valid rules are displayed. This option is only displayed if Approved exception to segregation of duties rules is included in Type of unreviewed data to search for.
Reviewed by	Type a profile ID that matches the "actual reviewer" for whom you want to run the report. Alternatively, you can search for one or more profile IDs. The "actual reviewer" is the user who last reviewed the data, and is not necessarily a user who is assigned as a reviewer for the campaign (the user can be a delegate).
Select date when resource is unreviewed	Select a date on which you like to check for unreviewed entitlements: Use date when report runs: This option is recommended if you schedule this report. Select unreviewed date: Allows you to set a specific date to check for data. Entitlements that are unreviewed on that date are returned. Set the Unreviewed as of date/time field.

Reviewed entitlements by user

Purpose: Lists entitlement certification status for a user.

Executable: certifiedbyuser

Table 9. Reviewed entitlements by user report search criteria

Criteria	Description
User ID	Type a profile ID to include in the report. Alternatively, you can search for one or more profile IDs.
Display more detailed review history	Select this checkbox to show review history for each entitlement.
Choose range of review dates	Define a date range in which the entitlement was reviewed.

Resources not in saved certification setups

Purpose: This report displays, for a given resource type (target system, group, role, SOD), the list of resources not included in any saved certification configuration.

Executable: resourcemissingcertification

Table 10. Resources not in saved certification setups report search criteria

Criteria	Description
Resource type	By default, all types are selected. You may select one or more resource types: Target systems Managed groups Roles Segregation of duties
Target systems	Search for one or more target systems for which you want to run the report. Alternatively, type a comma-and-space-delimited list of target system IDs.
Include target systems not allowed in the certification process	Check to also show target systems not allowed in the certification process.
Managed groups	Search for one or more managed groups to include in the report. Alternatively, type a comma-and-space-delimited list of managed groups.
Include managed group on target systems not allowed in the certification process	Check to also show managed group on target systems not allowed in the certification process.
Roles	Search for one or more roles to include in the report. Alternatively, type a comma-and-space-delimited list.
Segregation of duties rules	Search for one or more segregation of duties rules to include in the report. Alternatively, you can type a comma-and-space-delimited list.
Summarize report	Check to summarize report details.
Graph type	Select a type of graph to generate for the summarized report. None : no graph will be generated. Vertical bar chart : a vertical bar chart will be generated for the summarized report.

OrgChart certification

Purpose: For given users, lists their certification and the certification information of their subordinates.

Executable: orgchartcert

Table 11. OrgChart certification report search criteria

Criteria	Description
Manager ID	Search for one or more managers to include in the report. Alternatively, type a comma-and-space-delimited list of managers.
Filter on subordinates certification dates	Define a date range for certification dates.
Include indirect subordinates	Check this box to also include indirect subordinates in report.
Unreviewed only	Check this box to include only unreviewed subordinates in report.
Only users unreviewed in last number of days	To include only subordinates who had not been reviewed in last N days.
Report type	Choose one of the following options to define a report type: Detailed: This is the default setting. This report type lists certification information of the subordinates. Global summary: This report type lists a count of reviewed subordinates and unreviewed subordinates for the whole OrgChart. Per manager summary: This report type lists a count of reviewed subordinates and unreviewed subordinates for each of the selected managers.

Reviewed entitlements by entitlement

Purpose: For a given list of entitlements, list all the users who are assigned to these entitlements. For each entitlement, show certification information if available.

Executable: certbyentitlements

Table 12. Reviewed entitlements by entitlement report search criteria

Criteria	Description
Entitlement type	Select a entitlement type from the drop-down list. The possible values are: Managed groups Roles Accounts on target systems User profiles
Managed groups	If you selected this entitlement type, type or search for the groups to include in the report.
Target system ID	Type or for the ID of the target system to which an account or managed group belongs. This option is only displayed if Accounts on target system is selected for entitlement type.
Roles	If you selected this entitlement type, type a comma-and-space-delimited list of roles to include in the report. Alternatively, you can search for one or more roles.
Subordinate ID	Type or for the subordinate ID of the Org-Chart certification campaign. This option is only displayed if User profiles is selected for entitlement type.
Display more detailed review history	Check this box if you want to include all certification history in the report, otherwise only the most recent certification information will be displayed.
Choose range of review dates	Define a date range in which the entitlement was reviewed.
Display only reviewed entitlements	Check this box if you only want to include the reviewed items in the report, otherwise it includes all items in the report.

Certification review delegations and escalations

Purpose: Report on the delegation and escalation of certification campaigns.

Executable: certdelegationescalation

Table 13. Certification review delegations and escalations report search criteria

Criteria	Description
Campaign status	Select a campaign status from the drop-down list. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type or search for the campaign description to include in the report.
Reviewer ID	Type or search for the reviewer ID of the campaign.
Type	Select the type you want to review. The possible values are: Delegation Escalation
Show pending reviews only	Check this box if you only want to include pending reviews.
Choose campaign start date	Define a date range that the campaign started.
Choose campaign end date	Define a date range that the campaign ended.

Review certification delegations

Purpose: Provides details about what certification items have been delegated to who.

Executable: certdelegation

Table 14. Review certification delegations report search criteria

Criteria	Description
Campaign status	Select a campaign status from the drop-down list. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type or search for the campaign description to include in the report.
Reviewer ID	Type or search for the original reviewer ID of the campaign.
Delegate user ID	Type or search for the delegate user ID of the campaign.
Reviewed by	Type or search for the ID of the user who reviewed the campaign.
Delegations only	Check this box if you only want to report on delegations.
Operations	Select the operations you want to report on. This can be one or more operations.
Choose start date	Define a date range that the campaign started.

Orgchart certification progress

Purpose: Display the progress that reviewers have made on Orgchart based certification campaigns

Executable: orgchartcertprogress

Table 15. Orgchart certification progress report search criteria

Criteria	Description
Campaign description	Type a campaign description to only display changes for the campaign. Alternatively, you can search for one or more campaign descriptions.
Manager ID	Type a manager ID to only display changes for the target. Alternatively, you can search for one or more manager IDs.
Include indirect subordinates	Select this checkbox to enable or disable the inclusion of managers that report indirectly to the selected managers. If this is not enabled then only the segments of the direct managers will be listed below the selected managers.
Show only incomplete segments	Select this checkbox to enable or disable the inclusion of completed segments in the report. Note that a completed segment is one that has been signed off.
Report type	Select a report type: Summary: summarizes the report. In this mode, the report output includes the campaign description, the manager name, manager ID, number of certification segments incomplete and the number of certification segments completed. Detailed: In this mode, the report output returns all details.

In this section: