Example insights
The following are endpoints and relationships for various insights used by the Excel and/or Power BI examples.
Authentication Endpoint
/identity/connect/token
Method: POST
Purpose: OAuth token authentication
Headers: Content-Type: application/x-www-form-urlencoded
Body: grant_type=password&username={user}&password={password}
Used by: All tables for authentication
Operational Insights
Operational Insights Relationships
Target Systems (1) → Target System Connectivity (many) - system health tests
Target Systems (1) → Target System Discovery (many) - discovery operations
Users (1) → User Sessions by Day (many) - daily activity aggregation
Users (1) → User Logins by Day (many) - login attempts
Target Systems
Get a list of all configured target systems.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/targetSystems |
Target System Connectivity
Monitor target system connection test results.
Note
This only includes connections initiated by the REST API.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/operations |
Filter | $filter=kind eq 'TCrTe' |
Target System Discovery
Track target system discovery operations and results.
Note
This only includes discoveries initiated by the REST API.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/operations |
Filter | $filter=kind eq 'TarDi' |
Operations by Day
Get daily aggregated operation counts and user activity.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/analytics |
TimeInterval | timeInterval=day |
User Sessions by Day
Get daily user session counts and unique requester statistics.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/analytics |
TimeInterval | timeInterval=day |
User Login by Day
Track individual user login attempts and results.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'VERI' |
Expand | $expand=data(expand=user) |
Session Log Summary
Get high-level session statistics and operation counts.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/summary |
Password Insights
Password Insights Relationships
Accounts (1) → Password Changes (many) - individual password operations
Target Systems (1) → Password Changes (many) - password changes by system
Mass Password Reset (standalone) - bulk operations with batch IDs
Password Changes by Day/Week/Month/Year (aggregated) - trend analysis
Password Changes
Track individual password change operations and results.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'ACHG' |
Expand | $expand=requester,data(expand=account,targetSystem) |
Mass Password Reset
Monitor mass password reset operation. (Includes mass password reset onboard and password reset requests).
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'OPC4' |
Expand | $expand=requester,data |
Password Changes by Day
Get daily aggregated password change counts.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/analytics |
TimeInterval | timeInterval=day |
Filter | $filter=operation eq 'ACHG' |
Password Changes by Week
Get weekly aggregated password change counts.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/analytics |
TimeInterval | timeInterval=week |
Filter | $filter=operation eq 'ACHG' |
Password Changes by Month
Get monthly aggregated password change counts.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/analytics |
TimeInterval | timeInterval=month |
Filter | $filter=operation eq 'ACHG' |
Password Changes by Year
Get yearly aggregated password change counts.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs/analytics |
TimeInterval | timeInterval=year |
Filter | $filter=operation eq 'ACHG' |
Compliance Insights
Compliance Insights Relationships
Users (1) → Accounts (many) - user can have multiple accounts
Groups (1) → Group Members (many) - group contains multiple members
Accounts (1) → Group Members (many) - account can belong to multiple groups
Groups (1) → Group Assign (many) - group assignment operations
Groups (1) → Group Create (many) - group creation audit
Accounts (1) → Account Create (many) - account creation audit
Users
Get a list of all users with their status and privilege information.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/users |
Compliance Fields | Enabled (active), Locked (blocked), Admin (privileged) |
Accounts
Get a list of all accounts with their provisioning status and relationships.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/accounts |
Expand | $expand=targetSystem,user |
Compliance Fields | Valid (provisioned), Target system (location) |
Groups (Across Targets)
Get a list of all available groups across target systems.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/groups |
Expand | $expand=targetSystem |
Groups (via Memberships)
Get groups with their membership information.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/groups |
Expand | $expand=targetSystem,members |
Group Members
Get detailed group membership information showing who belongs to which groups.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/groups |
Expand | $expand=members |
Group Assign
Track group membership assignment operations and results.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'GRUA' |
Expand | $expand=requester,data(expand=account,targetSystem,group) |
Group Create
Track group creation operations and results.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'CRTG' |
Expand | $expand=requester,data(expand=group,targetSystem) |
Account Create
Track account creation operations and results.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'ACUA' |
Expand | $expand=requester,data(expand=account,targetSystem) |
Unlocked Users
Track user unlock operations and results.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/sessionLogs |
Filter | $filter=operation eq 'ULKU' |
Expand | $expand=requester,data(expand=user) |
Enrollment Insights
Enrollment Insights Relationships
Users (1) → User Question Set (many) - multiple security questions per user
Users (1) → Unlocked Users (many) - unlock operations per user
Accounts (standalone) - enrollment completion status
User Question Set
Get security question enrollment status for users.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/users |
Expand | $expand=credentials |
REST API Operations
Get general system operations and their status. This is only for operations triggered by the REST API.
Parameter | Value |
|---|---|
Endpoint | /api/rest/v2/operations |