Certification of entitlements reports

Review certification details

Purpose: Provides details about the operations and access change requests submitted through certification campaigns.

Executable: certfulldata

Search criteria

Table 1. Review certification details report search criteria

Criteria	Description
Campaign status	Select a value to only include campaigns with a matching status. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Reviewer ID	Type a user's profile ID to only display campaigns for which the user is assigned as a reviewer. Alternatively, you can search for one or more profile IDs.
Primary reviewer attributes to display	Choose which primary reviewer attributes to display.
Reviewed by	Type a profile ID that matches the "actual reviewer" for whom you want to run the report. Alternatively, you can search for one or more profile IDs. The "actual reviewer" is the user who certified the data or submitted an access change request, and is not necessarily a user who is assigned as a reviewer for the campaign (the user can be a delegate).
Actual reviewer attributes to display	Choose which actual reviewer attributes to display.
User ID	Type a profile ID to only include certification details for this user's resources. Alternatively, you can search for one or more profile IDs.
Show only change requests	Select this checkbox to only include change requests in the report.
Summarize report	Select this checkbox to show summary information for each certification campaign, reviewer, and operation combination.
Show summary of these operations	Select the operations that you want to include in the report.
Choose start date	Define a date range during which the campaign was initiated.

If you do not specify any search criteria, details for all campaigns are included in the report.

Report output

This report has two modes: Summary and Detailed.

Table 2. Review certification details summary

Column	Description
Certification round	The certification round identifier.
Segment	The segment identifier.
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Actual sign-off	The actual sign-off action taken.
Certified by name	The full name of the user who certified.
Operation	The certification operation.
Item count	The total number of items.
Approved items	The number of approved items.
Open type	The type of open items.
Denied items	The number of denied items.
Open items	The number of open items.
Canceled items	The number of canceled items.
Delegated items	The number of delegated items.

Table 3. Review certification details

Column	Description
Certification round	The certification round identifier.
Request date	The date the certification was requested.
End date	The end date of the certification round.
User ID	The profile ID of the reviewed user.
User name	The full name of the reviewed user.
Account ID	The account identifier.
Child target ID	The child target system ID.
Child target description	The child target system description.
Child group ID	The child group identifier.
Child group description	The child group description.
Target system ID	The target system short ID.
Target system description	The target system display name.
Group ID	The managed group identifier.
Group name	The managed group name.
Role ID	The role identifier.
Role description	The role description.
Parent role ID	The parent role identifier.
Parent role description	The parent role description.
SoD rule ID	The SoD rule identifier.
SoD rule description	The SoD rule description.
Operation	The certification operation.
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Actual sign-off	The actual sign-off action taken.
Certified by name	The full name of the user who certified.
Authorizer ID	The profile ID of the authorizer.
Authorizer name	The full name of the authorizer.
Status	The certification status.
Reason	The reason for the status.
Results	The operation results.

Reviewer details

Purpose: Displays a summary of each reviewer's progress in a certification campaign.

Executable: certification

Search criteria

Table 4. Reviewer details report search criteria

Criteria	Description
Campaign status	Select a value to only include campaigns with a matching status. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Reviewer ID	Type a user's profile ID to only display campaigns for which the user is a reviewer. Alternatively, you can search for one or more profile IDs.
Choose start date	Choose a date range in which the campaign was initiated (this is not the date that the reviewer started).
Choose end date	Choose a date range in which the campaign ended.
Summary per operations	Select this checkbox to show summary information for each operation (certify account, certify group membership, and so on).
Display subtotals	Select one of the Subtotal by <period> options to sort the report and show subtotals by the time period selected. The time period is one of: week, month, quarter, or year. The default is No subtotals .
Certifiable item threshold per period	Type a number in this field to indicate the items threshold. Records are included in the report if the number of certifiable or assigned items for the time period is greater than or equal to the threshold. The time period is determined by Display subtotals.

If you do not specify any search criteria, the report output is sorted by reviewer and campaign. It includes information about the segment, milestone times, campaign age, and number of certifiable items.

In the report output, if you select Summary per operations or any of the Subtotal by <period> options :

No subtotals or With subtotals :

Assigned items: is the total number of items, in all certification campaigns, for the indicated reviewer and operation.
Approved: is the number of assigned items that have been certified and signed off.
Denied: is the number of assigned items that have been marked for revocation and signed off.
Open: is the number of assigned items that have not been acted on.
Canceled: is the number of assigned items that no longer require certification (due to a user transfer, violation of a segregation of duties rule, or a product administrator canceling the campaign).
Number delegated: is the number of corresponding operations that were decided by a delegate.

Report output

This report has three modes: Summary, Subtotal, and Detailed.

Table 5. Reviewer summary

Column	Description
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Operation	The certification operation.
Item count	The total number of items.
Approved items	The number of approved items.
Denied items	The number of denied items.
Open items	The number of open items.
Canceled items	The number of canceled items.
Delegated items	The number of delegated items.

Table 6. Reviewer subtotal

Column	Description
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Operation	The certification operation.
Segment total	The total number of segments.
Rounds completed	The number of completed rounds.
Rounds delegated	The number of delegated rounds.
Rounds open	The number of open rounds.
Rounds canceled	The number of canceled rounds.
Item count	The total number of items.
Approved items	The number of approved items.
Denied items	The number of denied items.
Open items	The number of open items.
Canceled items	The number of canceled items.
Delegated items	The number of delegated items.

Table 7. Reviewer details

Column	Description
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Certification round	The certification round identifier.
Segment	The segment identifier.
Notification date	The date the certifier was notified.
Start date	The start date of the certification.
End date	The end date of the certification.
Age	The age of the certification round.
Canceled by	The user who canceled the round.
Item count	The total number of items in the segment.

Changes since review

Purpose: Reports on changes that occurred in a given certification campaign after it was completed; for example it reports on any requests to revoke entitlements that were denied by authorizers.

Executable: certpostchange

Search criteria

Table 8. Changes since review report search criteria

Criteria	Description
Campaign description	Type a campaign description to only display changes for the campaign. Alternatively, you can search for one or more campaign descriptions.
Target system ID	Type a target system ID to only display changes for the target. Alternatively, you can search for one or more target system IDs.
Roles	Type a role to only display changes for the role. Alternatively, you can search for one or more roles.
Managed groups	Type a managed group to only display changes for the group. Alternatively, you can search for one or more managed groups.
Segregation of duties rules	Type a segregation of duties rule to only display changes for the rule. Alternatively, you can search for one or more segregation of duties rules.
Reviewer ID	Type a reviewer ID to only display changes for the specified reviewer. Alternatively, you can search for one or more reviewer IDs.
Authorizer ID	Type an authorizer ID to only display changes for the specified authorizer. Alternatively, you can search for one or more authorizer IDs.
User ID	Type a profile ID to only display changes for the specified user. Alternatively, you can search for one or more profile IDs.
User name	Type a user name to only display changes for the specified user.

If access to a resource is revoked during a certification campaign but that request is denied or canceled, the resource is reported as "added". This is because according to the certification campaign, that access shouldn't exist.

The Changes since review report does not currently report changes for campaigns certified in segments, or by OrgChart managers.

Report output

The report output includes the following columns:

Table 9. Changes since review

Column	Description
Certification round	The certification round identifier.
Request date	The date the change was requested.
Target system ID	The target system short ID.
Target system description	The target system display name.
Group ID	The managed group identifier.
Group name	The managed group name.
Role ID	The role identifier.
Role description	The role description.
SoD rule ID	The SoD rule identifier.
SoD rule description	The SoD rule description.
User ID	The profile ID of the user.
User name	The full name of the user.
Account ID	The account identifier.
Child group ID	The child group identifier.
Child group description	The child group description.
Operation	The change operation performed.
Certifier ID	The profile ID of the certifier.
Authorizer ID	The profile ID of the authorizer.
Results	The operation results.
Reason	The reason for the change.

Entitlements certification coverage

Purpose: Reports on which users and entitlements have been reviewed.

Executable: certcoverage

Search criteria

Table 10. Entitlements certification coverage report search criteria

Criteria	Description
Entitlement type	Select the type of entitlement being reviewed: Profile Account Managed group Role Approved exception to segregation of duties rules Each of these options can be included in a certification campaign.
Target system ID	Type or search for the ID of the target system to which an account or managed group belongs. This option is only displayed if Account or Managed group is selected for entitlement type.
Managed groups	If you selected this entitlement type, type or search for the groups to include in the report.
Roles	If you selected this entitlement type, type a comma-and-space-delimited list of roles to include in the report. Alternatively, you can search for one or more roles.
Segregation of duties rules	If you selected this entitlement type, select the rules to include in the report. Only valid rules are displayed.
Certification start	Define a date range that the campaign was initiated.
Certification end	This is the date that the campaign was signed off.
Options	Select options to include in the report: Reviewed : Show users who were certified and signed off. Not reviewed : Show users who were not signed off yet. Entitlements (reviewed for all) : Show entitlements that were certified for all assigned users; that is, the assignment of entitlement was reviewed in relation to all user profiles who had the entitlement. This option is selectable for all types other than profile. Entitlements (reviewed for some) : Show entitlements that were certified for some assigned users; that is, the assignment of the entitlement was reviewed in relation to at least some user profiles. This option is selectable for all types other than profile. Entitlements (unreviewed for all) : Show entitlements that were not certified at all; that is, the assignment of the entitlement was not reviewed at all. This option is selectable for all types other than profile.
Show orphan accounts	Check to show user name and user ID for orphan accounts. This option is only available if Account or Managed group is selected.
Show child groups	Check to show child groups. This option is only available if Managed group is selected.
Show most recent certifications	Check to show only the most recent certification for the entitlements. This option is only available if Reviewed is selected.
Show unreviewed details	Check to list unreviewed entitlements instead of just showing a summary. This option is only available if Entitlements (reviewed for some) or Entitlements (unreviewed for all) is selected.

Report output

The report output varies by entitlement type and has Detailed and Summary sub-modes for each type. The five resource types are: profile, account, group, role, and approved exception (AE) SoD.

Table 11. Coverage by profile

Column	Description
User name	The full name of the user.
User ID	The profile ID of the user.
Certifier name	The full name of the certifier.
Certifier ID	The profile ID of the certifier.
Last certified date	The date the profile was last certified.

Table 12. Coverage by account

Column	Description
User name	The full name of the user.
User ID	The profile ID of the user.
Target system ID	The target system short ID.
Target system description	The target system display name.
Account ID	The account identifier.
Certifier name	The full name of the certifier.
Certifier ID	The profile ID of the certifier.
Last certified date	The date the account was last certified.

Table 13. Coverage by group

Column	Description
User name	The full name of the user.
User ID	The profile ID of the user.
Group ID	The managed group identifier.
Group name	The managed group name.
Child group ID	The child group identifier.
Child group description	The child group description.
Certifier name	The full name of the certifier.
Certifier ID	The profile ID of the certifier.
Last certified date	The date the group membership was last certified.

Table 14. Coverage by role

Column	Description
User name	The full name of the user.
User ID	The profile ID of the user.
Role ID	The role identifier.
Role description	The role description.
Certifier name	The full name of the certifier.
Certifier ID	The profile ID of the certifier.
Last certified date	The date the role was last certified.

Table 15. Coverage by approved exception (AE) SoD

Column	Description
User name	The full name of the user.
User ID	The profile ID of the user.
SoD rule ID	The SoD rule identifier.
SoD rule description	The SoD rule description.
Certifier name	The full name of the certifier.
Certifier ID	The profile ID of the certifier.
Last certified date	The date the AE SoD was last certified.

Table 16. Coverage summary

Column	Description
Number certified	The number of certified entitlements.
Number uncertified	The number of uncertified entitlements.

Saved entitlement certification setups

Purpose: Reports on saved setups for entitlements certification campaigns.

Executable: savedrounds

Search criteria

Table 17. Saved entitlement certification setups report search criteria

Criteria	Description
Certification setup ID	Type a comma-and-space-delimited list of saved certification setup IDs to only include specified setups. Alternatively, you can search for one or more saved certification setups.
Owner	Type a comma-and-space-delimited list of saved certification setup owner profile IDs to only include setups with the specified owners. Alternatively, you can search for one or more saved certification setup owner IDs.
Certification method	Select a value to only include saved certification setups with a matching certification method.
Certification setup shared	Select a value to only include saved certification setups with a matching shared status.
Ready to run	Select a value to only include saved certification setups with a matching validity.
Display	Show the entitlement types that are included in the saved certification setups.

Report output

This report has two modes: Setup details and Setup resources.

Table 18. Saved certification setup details

Column	Description
Setup ID	The saved certification setup identifier.
Description	The description of the saved setup.
Owner name	The full name of the setup owner.
Owner ID	The profile ID of the setup owner.
Method	The certification method.
Consolidated	Whether the setup is consolidated.
Shared	Whether the setup is shared.
Validity	Whether the setup is valid and ready to run.

Table 19. Saved certification setup resources

Column	Description
Setup ID	The saved certification setup identifier.
Description	The description of the saved setup.
Owner name	The full name of the setup owner.
Owner ID	The profile ID of the setup owner.
Method	The certification method.
Consolidated	Whether the setup is consolidated.
Shared	Whether the setup is shared.
Validity	Whether the setup is valid and ready to run.
Resource type	The type of resource included in the setup.
Target system ID	The target system short ID.
Resource ID	The resource identifier.
Resource description	The resource description.

Certification details

Purpose: Provides detailed information on certification campaigns based on status, date, reviewer, and entitlement criteria.

Executable: certdetails

Search criteria

Table 20. Certification details report search criteria

Criteria	Description
Campaign status	Select a certification campaign status to only include those campaigns in the report: All campaigns : All campaign statuses Active campaigns : Started but not yet signed-off by reviewer Completed campaigns : Signed-off by reviewer Canceled campaigns : Have been canceled
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Reviewer ID	Type a comma-and-space-delimited list of profile IDs to only include rounds that are reviewed by the specified reviewers. Alternatively, you can search for one or more profile IDs.
Recipient ID	Type one or more recipient profile IDs that are affected by the certification campaigns. Alternatively, you can search for one or more profile IDs.
Choose start date	Define a date range during which the campaign was initiated (not the date that the reviewer started).
Choose end date	Define a date range during which the campaign ended.
Entitlement type	Select the type of entitlement being reviewed: Profile Account Managed group Role Resolved segregation of duties rules violations
Target system ID	Type the ID of one or more target systems for the accounts or managed groups. This option is only displayed if Entitlement type is set to either Account or Managed group . Alternatively, you can search for one or more target system IDs.
Managed groups	Type the group ID for one or more managed groups to include in the report. This option is only displayed if Entitlement type is set to Managed group . Alternatively, you can search for one or more group IDs.
Roles	Type a comma-and-space-delimited list of roles to include in the report. This option is only displayed if Entitlement type is set to Role . Alternatively, you can search for one or more roles.
Segregation of duties rules	Select one or more SoD rules to include in the report output; only valid rules are displayed. This option is only displayed if Entitlement type is set to Resolved segregation of duties rules violations .

Report output

The report output columns vary depending on the selected entitlement type.

Table 21. Certification details

Column	Condition	Description
Certification round	All types	The certification round identifier.
Start date	All types	The start date of the certification round.
Sign-off date	All types	The date the certification was signed off.
Term date	All types	The termination date of the certification round.
Certifier name	All types	The full name of the certifier.
Certifier ID	All types	The profile ID of the certifier.
Actual sign-off	All types	The actual sign-off action taken.
Recipient name	Account, Role, Group membership, AE SoD, Profile attribute, Other	The full name of the recipient.
Recipient ID	Account, Role, Group membership, AE SoD, Profile attribute, Other	The profile ID of the recipient.
Account ID	Account	The account identifier.
Target system ID	Account, Group membership	The target system short ID.
Target system description	Account, Group membership	The target system display name.
Role ID	Role	The role identifier.
Role description	Role	The role description.
Parent role ID	Account, Role, Group membership	The parent role identifier.
Parent role description	Account, Role, Group membership	The parent role description.
Account	Group membership	The account associated with the group membership.
Child group ID	Group membership	The child group identifier.
Child group description	Group membership	The child group description.
Child target ID	Group membership	The child target system ID.
Child target description	Group membership	The child target system description.
Group ID	Group membership	The managed group identifier.
Group description	Group membership	The managed group description.
SoD rule ID	AE SoD	The SoD rule identifier.
SoD rule description	AE SoD	The SoD rule description.
Attribute	Profile attribute	The profile attribute name.
New value	Profile attribute	The new value of the profile attribute.
Old value	Profile attribute	The old value of the profile attribute.
Status	All types	The certification status.

Certification of entitlements campaigns

Purpose: Summarizes certification campaigns by segment based on status, date, initiator and reviewer.

Executable: certrounds

Search criteria

Table 22. Certification of entitlements campaigns report search criteria

Criteria	Description
Campaign status	Select a value to only include campaigns with a matching status. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Initiation type	Select a value to only include campaigns with a matching initiation type (how was the campaign initiated). The possible values are: All initiation type Initiated by administrative web UI Initiated as a single-user review Initiated as a review of all entitlements Initiated by IDAPI Initiated by certification scheduler
Initiator ID	Type a comma-and-space-delimited list of profile IDs to only include campaigns that are initiated by the specified initiators. Alternatively, you can search for one or more profile IDs.
Reviewer ID	Type a comma-and-space-delimited list of profile IDs to only include campaigns that are reviewed by the specified reviewers. Alternatively, you can search for one or more profile IDs.
Choose start date	Define a date range that the campaign was initiated (not the date that the reviewer started).
Choose end date	Define a date range that the campaign ended.
Summarize report	Select to only show the number of campaigns matching the criteria above, instead of the list.

Report output

This report has two modes: Detailed and Summary.

Table 23. Certification campaigns detail

Column	Description
Start date	The start date of the campaign.
End date	The end date of the campaign.
Canceled date	The date the campaign was canceled.
Certification round	The certification round identifier.
Initiator name	The full name of the campaign initiator.
Initiator ID	The profile ID of the campaign initiator.
Initiation type	How the campaign was initiated.
Users	The number of users in the campaign.
Method	The certification method used.
Certifier name	The full name of the certifier.
Certifier ID	The profile ID of the certifier.

Table 24. Certification campaigns summary

Column	Description
Status	The campaign status.
Count	The number of campaigns with this status.

Completion percentage

Purpose: Progress in completing currently active certification campaigns. Overview information on completion percentage based on campaign description, initiator, certification method, completed percentage and date.

Executable: certcompletion

Search Criteria :

Search criteria

Criteria	Description
Campaign description	Type the description of one or more certification campaigns to only include those campaigns in the report. Alternatively, you can search for one or more certification campaigns.
Initiator ID	Type a comma-and-space-delimited list of profile IDs to only include campaigns that are initiated by the specified initiators. Alternatively, you can search for one or more profile IDs.
Certification method	Select a value to only include campaigns with a matching certification method. The possible values are: All certification methods Single reviewer Segment reviewers Entitlement authorizers OrgChart manager Certification by defined relationship
Completed percentage lower than or equal to	Enter a numeric value between 0 and 100 to view active campaigns by percentage of completion.
Choose start date	Define a date range that the campaign was initiated (not the date that the reviewer started).
Last action date	Define a date range that the reviewer last acted on an active campaign.

Report output

The report output includes the following columns:

Table 25. Completion percentage

Column	Description
Certification round description	The description of the certification round.
Initiator ID	The profile ID of the campaign initiator.
Initiator name	The full name of the campaign initiator.
Method	The certification method used.
Start date	The start date of the campaign.
Last action date	The date of the last action on the campaign.
Item count	The total number of items in the campaign.
Items reviewed	The number of items that have been reviewed.
Completion percentage	The percentage of items that have been reviewed.
Notes	Additional notes about the campaign.

Unreviewed data

Purpose: Lists entitlements that do not have valid certification on the specified date. Either the entitlement has expired or it has never been reviewed before that date.

Executable: uncertifieddata

Search criteria

Table 26. Unreviewed data report search criteria

Criteria	Description
Type of unreviewed data to search for	Select one or more types of data that you want to include in the report: User profiles Target system Managed group Role Approved exception to segregation of duties rules
Target system ID	Type a comma-and-space-delimited list of target system IDs to include for accounts or managed groups. This option is only displayed if Target system or Managed group is included in Type of unreviewed data to search for. Alternatively, you can search for one or more target system IDs.
Managed groups	Type the group ID of the managed group to include in the report. This option is only displayed if Managed group is included in Type of unreviewed data to search for. To select multiple groups, you can search for group IDs.
Roles	Type a comma-and-space-delimited list of role IDs to include in the report. This option is only displayed if Role is included in Type of unreviewed data to search for. Alternatively, you can search for one or more roles.
Segregation of duties rules	Type a comma-and-space-delimited list of SoD rule IDs to include in the report; only approved exceptions to valid rules are displayed. This option is only displayed if Approved exception to segregation of duties rules is included in Type of unreviewed data to search for.
Reviewed by	Type a profile ID that matches the "actual reviewer" for whom you want to run the report. Alternatively, you can search for one or more profile IDs. The "actual reviewer" is the user who last reviewed the data, and is not necessarily a user who is assigned as a reviewer for the campaign (the user can be a delegate).
Select date when resource is unreviewed	Select a date on which you like to check for unreviewed entitlements: Use date when report runs: This option is recommended if you schedule this report. Select unreviewed date: Allows you to set a specific date to check for data. Entitlements that are unreviewed on that date are returned. Set the Unreviewed as of date/time field.

Report output

Table 27. Unreviewed data

Column	Description
User ID	The profile ID of the user.
User name	The full name of the user.
Account long ID	The account long ID.
Child group ID	The child group identifier.
Child group description	The child group description.
Resource ID	The resource identifier.
Resource description	The resource description.
Type	The type of unreviewed data.
Delegator	The user who delegated the review.
Certified by	The user responsible for certification.
Last certified date	The date of the last certification.

Reviewed entitlements by user

Purpose: Lists entitlement certification status for a user.

Executable: certifiedbyuser

Search criteria

Table 28. Reviewed entitlements by user report search criteria

Criteria	Description
User ID	Type a profile ID to include in the report. Alternatively, you can search for one or more profile IDs.
Display more detailed review history	Select this checkbox to show review history for each entitlement.
Choose range of review dates	Define a date range in which the entitlement was reviewed.

Report output

Table 29. Reviewed entitlements by user

Column	Description
User ID	The profile ID of the user.
User name	The full name of the user.
Entitlement type	The type of entitlement.
Role ID	The role identifier.
Role description	The role description.
Group ID	The managed group identifier.
Group description	The managed group description.
Target system ID	The target system short ID.
Target system description	The target system display name.
Account ID	The account identifier.
SoD rule ID	The SoD rule identifier.
SoD rule description	The SoD rule description.
Certifiable	Whether the entitlement is certifiable.
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Certification date	The date of the certification.

Resources not in saved certification setups

Purpose: This report displays, for a given resource type (target system, group, role, SOD), the list of resources not included in any saved certification configuration.

Executable: resourcemissingcertification

Search criteria

Table 30. Resources not in saved certification setups report search criteria

Criteria	Description
Resource type	By default, all types are selected. You may select one or more resource types: Target systems Managed groups Roles Segregation of duties
Target systems	Search for one or more target systems for which you want to run the report. Alternatively, type a comma-and-space-delimited list of target system IDs.
Include target systems not allowed in the certification process	Check to also show target systems not allowed in the certification process.
Managed groups	Search for one or more managed groups to include in the report. Alternatively, type a comma-and-space-delimited list of managed groups.
Include managed group on target systems not allowed in the certification process	Check to also show managed group on target systems not allowed in the certification process.
Roles	Search for one or more roles to include in the report. Alternatively, type a comma-and-space-delimited list.
Segregation of duties rules	Search for one or more segregation of duties rules to include in the report. Alternatively, you can type a comma-and-space-delimited list.
Summarize report	Check to summarize report details.
Graph type	Select a type of graph to generate for the summarized report. None : no graph will be generated. Vertical bar chart : a vertical bar chart will be generated for the summarized report.

Report output

This report has two modes: Detailed and Summary.

Table 31. Resources not in saved setups detail

Column	Condition	Description
Resource type	Always	The type of resource.
Resource ID	Non-drill-down	The resource identifier.
Resource description	Non-drill-down	The resource description.
Resource	Drill-down	The resource (combined link).
In certification process	Always	Whether the resource is in a certification process.

Table 32. Resources not in saved setups summary

Column	Description
Resource type	The type of resource.
Resources in saved configurations	The number of resources included in saved configurations.
Resources not in saved configurations	The number of resources not included in saved configurations.

OrgChart certification

Purpose: For given users, lists their certification and the certification information of their subordinates.

Executable: orgchartcert

Search criteria

Table 33. OrgChart certification report search criteria

Criteria	Description
Manager ID	Search for one or more managers to include in the report. Alternatively, type a comma-and-space-delimited list of managers.
Filter on subordinates certification dates	Define a date range for certification dates.
Include indirect subordinates	Check this box to also include indirect subordinates in report.
Unreviewed only	Check this box to include only unreviewed subordinates in report.
Only users unreviewed in last number of days	To include only subordinates who had not been reviewed in last N days.
Report type	Choose one of the following options to define a report type: Detailed: This is the default setting. This report type lists certification information of the subordinates. Global summary: This report type lists a count of reviewed subordinates and unreviewed subordinates for the whole OrgChart. Per manager summary: This report type lists a count of reviewed subordinates and unreviewed subordinates for each of the selected managers.

Report output

This report has three modes: Detailed, Global summary, and Per manager summary.

Table 34. OrgChart certification detail

Column	Description
Manager ID	The profile ID of the manager.
Manager name	The full name of the manager.
Subordinate ID	The profile ID of the subordinate.
Subordinate name	The full name of the subordinate.
Certifier ID	The profile ID of the certifier.
Certifier name	The full name of the certifier.
Certification date	The date of the certification.

Table 35. OrgChart certification global summary

Column	Description
Certified subordinates	The total number of certified subordinates.
Uncertified subordinates	The total number of uncertified subordinates.

Table 36. OrgChart certification per manager

Column	Description
Manager ID	The profile ID of the manager.
Manager name	The full name of the manager.
Certified subordinates	The number of certified subordinates for this manager.
Uncertified subordinates	The number of uncertified subordinates for this manager.

Reviewed entitlements by entitlement

Purpose: For a given list of entitlements, list all the users who are assigned to these entitlements. For each entitlement, show certification information if available.

Executable: certbyentitlements

Search criteria

Table 37. Reviewed entitlements by entitlement report search criteria

Criteria	Description
Entitlement type	Select a entitlement type from the drop-down list. The possible values are: Managed groups Roles Accounts on target systems User profiles
Managed groups	If you selected this entitlement type, type or search for the groups to include in the report.
Target system ID	Type or for the ID of the target system to which an account or managed group belongs. This option is only displayed if Accounts on target system is selected for entitlement type.
Roles	If you selected this entitlement type, type a comma-and-space-delimited list of roles to include in the report. Alternatively, you can search for one or more roles.
Subordinate ID	Type or for the subordinate ID of the Org-Chart certification campaign. This option is only displayed if User profiles is selected for entitlement type.
Display more detailed review history	Check this box if you want to include all certification history in the report, otherwise only the most recent certification information will be displayed.
Choose range of review dates	Define a date range in which the entitlement was reviewed.
Display only reviewed entitlements	Check this box if you only want to include the reviewed items in the report, otherwise it includes all items in the report.

Report output

Table 38. Reviewed entitlements by entitlement

Column	Condition	Description
User ID	Always	The profile ID of the user.
User name	Always	The full name of the user.
Target system ID	Entitlement type is group or account	The target system short ID.
Target system description	Entitlement type is group or account	The target system display name.
Group ID	Entitlement type is group	The managed group identifier.
Group description	Entitlement type is group	The managed group description.
Account ID	Entitlement type is group or account	The account identifier.
Child target ID	Entitlement type is group	The child target system ID.
Child target description	Entitlement type is group	The child target system description.
Child group ID	Entitlement type is group	The child group identifier.
Child group description	Entitlement type is group	The child group description.
Certifiable	Entitlement type is group or account	Whether the entitlement is certifiable.
Role ID	Entitlement type is role	The role identifier.
Role description	Entitlement type is role	The role description.
Manager ID	Entitlement type is orgchart	The manager profile ID.
Manager name	Entitlement type is orgchart	The manager full name.
Certifier ID	Always	The profile ID of the certifier.
Certifier name	Always	The full name of the certifier.
Certification date	Always	The date of the certification.

Certification review delegations and escalations

Purpose: Report on the delegation and escalation of certification campaigns.

Executable: certdelegationescalation

Search criteria

Table 39. Certification review delegations and escalations report search criteria

Criteria	Description
Campaign status	Select a campaign status from the drop-down list. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type or search for the campaign description to include in the report.
Reviewer ID	Type or search for the reviewer ID of the campaign.
Type	Select the type you want to review. The possible values are: Delegation Escalation
Show pending reviews only	Check this box if you only want to include pending reviews.
Choose campaign start date	Define a date range that the campaign started.
Choose campaign end date	Define a date range that the campaign ended.

Report output

Table 40. Certification review delegations and escalations

Column	Condition	Description
Certification round	Always	The certification round identifier.
Segment description	Always	The segment description.
Start date	Always	The start date of the delegation or escalation.
Certifier	Always	The current certifier.
From reviewer	Always	The original reviewer.
Delegation	Report type is delegation	The delegation details.
Escalation	Report type is escalation	The escalation details.
Has pending reviews	Always	Whether the certifier has pending reviews.
Reviewed on	Always	The date the review was completed.
Delegation time range	Always	The time range of the delegation.

Review certification delegations

Purpose: Provides details about what certification items have been delegated to who.

Executable: certdelegation

Search criteria

Table 41. Review certification delegations report search criteria

Criteria	Description
Campaign status	Select a campaign status from the drop-down list. The possible values are: All campaigns Active campaigns Completed campaigns Canceled campaigns
Campaign description	Type or search for the campaign description to include in the report.
Reviewer ID	Type or search for the original reviewer ID of the campaign.
Delegate user ID	Type or search for the delegate user ID of the campaign.
Reviewed by	Type or search for the ID of the user who reviewed the campaign.
Delegations only	Check this box if you only want to report on delegations.
Operations	Select the operations you want to report on. This can be one or more operations.
Choose start date	Define a date range that the campaign started.

Report output

Table 42. Review certification delegations

Column	Description
Certification round	The certification round identifier.
Certifier ID	The profile ID of the certifier.
Delegate	The delegate user.
Delegation time	The date and time of the delegation.
Delegation type	The type of delegation.
Delegation status	The status of the delegation.
Request status	The overall request status.
Reason	The reason for the delegation.
User ID	The profile ID of the reviewed user.
Account ID	The account identifier.
Child group ID	The child group identifier.
Group ID	The managed group identifier.
Role ID	The role identifier.
SoD rule ID	The SoD rule identifier.
Operation	The certification operation.
Actual sign-off	The actual sign-off action.
Authorizer ID	The profile ID of the authorizer.

Orgchart certification progress

Purpose: Display the progress that reviewers have made on Orgchart based certification campaigns

Executable: orgchartcertprogress

Search criteria

Table 43. Orgchart certification progress report search criteria

Criteria	Description
Campaign description	Type a campaign description to only display changes for the campaign. Alternatively, you can search for one or more campaign descriptions.
Manager ID	Type a manager ID to only display changes for the target. Alternatively, you can search for one or more manager IDs.
Include indirect subordinates	Select this checkbox to enable or disable the inclusion of managers that report indirectly to the selected managers. If this is not enabled then only the segments of the direct managers will be listed below the selected managers.
Show only incomplete segments	Select this checkbox to enable or disable the inclusion of completed segments in the report. Note that a completed segment is one that has been signed off.
Report type	Select a report type: Summary: summarizes the report. In this mode, the report output includes the campaign description, the manager name, manager ID, number of certification segments incomplete and the number of certification segments completed. Detailed: In this mode, the report output returns all details.

Report output

This report has two modes: Detailed and Summary.

Table 44. Orgchart certification progress detail

Column	Description
Certification round description	The description of the certification round.
Manager ID	The profile ID of the manager.
Manager name	The full name of the manager.
Segment description	The segment description.
Number of items	The total number of items in the segment.
Completed	The completion status.

Table 45. Orgchart certification progress summary

Column	Description
Certification round description	The description of the certification round.
Manager ID	The profile ID of the manager.
Manager name	The full name of the manager.
Incomplete segments	The number of incomplete segments.
Complete segments	The number of complete segments.

In this section:

Certification of entitlements reports

Review certification details

Search criteria

Report output

Reviewer details

Search criteria

Report output

Changes since review

Search criteria

Report output

Entitlements certification coverage

Search criteria

Report output

Saved entitlement certification setups

Search criteria

Report output

Certification details

Search criteria

Report output

Certification of entitlements campaigns

Search criteria

Report output

Completion percentage

Search criteria

Report output

Unreviewed data

Search criteria

Report output

Reviewed entitlements by user

Search criteria

Report output

Resources not in saved certification setups

Search criteria

Report output

OrgChart certification

Search criteria

Report output

Reviewed entitlements by entitlement

Search criteria

Report output

Certification review delegations and escalations

Search criteria

Report output

Review certification delegations

Search criteria

Report output

Orgchart certification progress

Search criteria

Report output

Search results