User Profile History User Reports

20-46 Oracle Fusion Middleware Users Guide for Oracle Identity Manager Fields NA Columns The following table lists the columns of the report:

20.6 Exception Reports

In Oracle Identity Manager, exception refers to the difference between accounts that a user is entitled to and the accounts that are actually assigned to a user. The user is assigned these accounts as a result of access policies, provisioning of resources, approval requests, and reconciliation events. Any difference of these accounts assigned to a user in the target system and the ones assigned to the user in Oracle Identity Manager comprises an exception. To populate the data for account audit and reconciliation exceptions report:

1. Set the value of the XL.EnableExceptionReports system property to True. See

Administering System Properties in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager for information about system properties.

2. Verify that the Object Initial Reconciliation Date field of the resource object is

earlier than the sysdate. The following exception reports have been introduced in this release: ■ Rogue Accounts By Resource This report returns a list of all the rogue accounts existing in a resource. The following exceptions are reported: – An account that exists in the target system, but is not provisioned to the corresponding user in Oracle Identity Manager – An account that exists in the target system, but has been deprovisioned for the corresponding user in Oracle Identity Manager ■ Orphaned Account Summary Report: An account that exists in the target system, but the corresponding user to whom the account is provisioned has been deleted in Oracle Identity Manager. For the given input resource, it lists the rogue accounts that exist in the target system, but the corresponding users to whom the accounts are provisioned has never existed in Oracle Identity Manager. Report Column Description First Name First name of the user Last Name Last name of the user User ID ID of the user Organization Organization of the user Employee Status Status of the user Employee Type Type of employee Manager ID ID of the Manager to whom the user reports Source User creation source Unlocked Date Date at which the user is unlocked Using Reporting Features 20-47 ■ Fine Grained Entitlement Exceptions By Resource This report returns a list of all the accounts in a resource for which the process form data being reconciled is different from the expected values. It means that this report returns any account existing in the target system that is also provisioned to the corresponding user in Oracle Identity Manager, but for which the process data does not match.

20.7 Creating Reports Using Third-Party Software

Oracle Identity Manager supports the creation of reports by using third-party tools such as Crystal Reports. You can use a third-party tool to create the reports listed in Section 20.5, Reports for Oracle Identity Manager .

20.8 Required Scheduled Tasks for BI Publisher Reports

Table 20–1 lists the scheduled tasks required for Oracle Identity Manager BI Publisher reports: Note: ■ After completion of initial target reconciliation, all account-related activities performed directly on a target resource are tracked as exception activity. Account-related activities include account creation, account modification, and entitlement assignmentrevocation. The exception reports should be used only if the organization policies enforce that all account-related activities in target resources would always be initiated in Oracle Identity Manager. In addition, remember that exception detection and recording are an extension of account data reconciliation and, therefore, may result in a drop in performance during reconciliation. ■ All the exception reports depend on reconciliation data. Therefore, these reports will not display any data if the corresponding reconciliation events are archived. Note: To learn how to create reports by using third-party software, see the third-party software documentation. Table 20–1 Scheduled Tasks for BI Publisher Reports Report Name Scheduled Task Name Description Fine Grained Entitlement Exceptions By Resource RefreshMaterializedView To refresh the Materialized View used in this report with the latest data User Profile History IssueAuditTask To populate the audit tables with the latest data User Unlocked IssueAuditTask To populate the audit tables with the latest data User Membership History IssueAuditTask To populate the audit tables with the latest data Role Membership History IssueAuditTask To populate the audit tables with the latest data Resource Access List History IssueAuditTask To populate the audit tables with the latest data 20-48 Oracle Fusion Middleware Users Guide for Oracle Identity Manager User Resource Access History IssueAuditTask To populate the audit tables with the latest data Resource Activity Summary IssueAuditTask To populate the audit tables with the latest data Password Reset Summary IssueAuditTask To populate the audit tables with the latest data Entitlement Reports Entitlement List To populate the Entitlement List table with the marked entitlements Entitlement Assignment To populate the Entitlement Assignment tables with the assigned entitlements Entitlement Updates To populate the latest data into the Entitlement Assignment tables, if any entitlement has assigned to any user periodically or later Table 20–1 Cont. Scheduled Tasks for BI Publisher Reports Report Name Scheduled Task Name Description