User input filters
Determine which filters to specify when you design custom reports that allow user input.
User
input filters
include:
- User input filters that you can specify for each type of standard report.
- Corresponding filter that is defined in each report template to enable user input for built-in designer reports.
Use the filters as guidelines to create user input filters for custom reports.
You can specify one or more filter values for a single report, depending on which user input filters are available for the report. If you specify multiple values, IBM Verify Identity Governance determines the entity.attribute to which each value applies by the position and type of each value. For example, when you run an account report, you can specify a service name and an organization unit name in a field, such as Provide User Input.
| Report name | User input | Default value | Report designer filter |
|---|---|---|---|
| Access Control Item | ACI Name | Any | ACI.name = _USERINPUT_ |
| ACI Context | Any | ACI.category = _USERINPUT_ | |
| Object Type | Any | ACI.Target = _USERINPUT_ | |
| ACI Scope | Any | ACI.scope = _USERINPUT_ | |
| Organization Unit | Any | Organizational Container.DN = _USERINPUT_ | |
| Access Report | Access Type | Any | Access.Type = _USERINPUT_ |
| Access | Any | Access.DN = _USERINPUT_ | |
| Service Type | Any | Service.servicetype = _USERINPUT_ | |
| Service | Any | Service.DN = _USERINPUT_ | |
| Owner | Any | Person.DN = _USERINPUT_ | |
| Account | Service | Any | Service.DN = _USERINPUT_ |
| Organization Unit | Any | Organizational Container.DN = _USERINPUT_ | |
| Account/Access Pending Recertification Report | Account/Access Owner | Any | Process.Requestee = _USERINPUT_ |
| Service Type | Any | Service.Servicetype = _USERINPUT_ | |
| Account Operations | Root Process | Any | Process.Type = _USERINPUT_ |
| Account Operation | Any | Activity.Type = _USERINPUT_ | |
| Start Date | 30 days before current date | Process.Completed > _USERINPUT_ AND Process.Completed < _USERINPUT_ | |
| End Date | Current date | ||
| Service Type | Any | Service.servicetype = _USERINPUT_ | |
| Service | Any | Service.DN = _USERINPUT_ | |
| User ID | Any | Activity.Subject = _USERINPUT_ | |
| Status | Any | Activity.Result_ Summary = _USERINPUT_ (Any) | |
| Account Operations Performed by an Individual | Submitted by | Any | Process.REQUESTER = _USERINPUT_ |
| Account Operation | Any | Activity.Type = USERINPUT_ | |
| Start Date | 30 days before current date | Process.Completed > _USERINPUT_ AND Process.Completed < _USERINPUT_ | |
| End Date | Current date | ||
| Service Type | Any | Service.servicetype = _USERINPUT_ | |
| Service | Any | Service.DN = _USERINPUT_ | |
| User ID | * | Activity.Subject = _USERINPUT_ | |
| Status | Any | Activity.Result_ Summary = _USERINPUT_ | |
| Approvals and Rejections | Approver | Any | Person.DN like _USERINPUT_ AND PERSON.CN = PROCESSLOG.REQUESTOR |
| Start Date | 30 days before current date | Process.Completed > _USERINPUT_ AND Process.Completed < _USERINPUT_ | |
| End Date | Current date | ||
| Service Type | Any | Service.servicetype = _USERINPUT_ | |
| Service | Any | Service.DN = _USERINPUT_ | |
| User ID | * | Process.Subject = _USERINPUT_ | |
| Status | * | PROCESS.RESULT_ SUMMARY like _USERINPUT_ | |
| Approval Activity | ACTIVITY. DEFINITION_ID like _USERINPUT_ | ||
| Dormant Accounts | Service | Any | Service.DN = _USERINPUT_ |
| Dormant Period | 14 | Last Accessed Date = _USERINPUT_ | |
| Individual Access | Account Owner | Any | Person.DN =_USERINPUT_ |
| Organization Unit | Any | OrganizationalContainer.DN =_USERINPUT | |
| Access | Any | Access.DN =_USERINPUT_ | |
| Service | Any | Service.DN =_USERINPUT_ | |
| Individual Accounts | Person | Any | Person.DN = _USERINPUT_ |
| Organization Unit | Any | OrganizationalContainer.DN = _USERINPUT_ | |
| Individual Accounts by Role | Role | None (no role specified) | Organization Role.DN = _USERINPUT_ |
| Organization Unit | Any | OrganizationalContainer.DN = _USERINPUT_ | |
| Non-Compliant Accounts | Service | Any | Service.DN = _USERINPUT_ |
| Reason | Any | Account.eraccountcompliance = _USERINPUT_ | |
| Operation | Requester | Any | Process.REQUESTER = _USERINPUT_ |
| Requestee | Any | Process.REQUESTEE = _USERINPUT_ | |
| Operations | AccountAdd (as specified in the properties file) | Process.Type = _USERINPUT | |
| Start Date | 30 days before the current date | Process.Completed > _USERINPUT_ AND Process.Completed < _USERINPUT_ | |
| End Date | Current date | ||
| Orphan Accounts | Service | Any | Service.DN = _USERINPUT_ |
| Account Status | Any | Account.eraccountstatus = _USERINPUT_ | |
| Pending Approvals | Approver | Any | Person.DN = _USERINPUT_ |
| Start Date | 30 days before current date | Workitem.Created > _USERINPUT_ AND Workitem.Created < _USERINPUT_ | |
| Service Type | Any | Service.Servicetype = _USERINPUT_ | |
| Service | Any | Service.DN = _USERINPUT_ | |
| User ID | * | Process.Subject = _USERINPUT_ | |
| Status | Any | Pending_Approval. Result_Summary = _USERINPUT_ | |
| Approval Activity Name | * | Activity.Name = _USERINPUT_ | |
| Policies Governing a Role | Role | Any | Organization Role.DN = _USERINPUT_ |
| Policy | Provisioning Policy Name | Any | ProvisioningPolicy. Policy Name = _USERINPUT_ |
| Recertification Change History Report | Service | Any | Recertificationlog. Service = _USERINPUT_ |
| Access Type | Any | Recertificationlog. Access_Type = _USERINPUT_ | |
| Account/Access Owner | Any | Recertificationlog. Account_Owner = _USERINPUT_ | |
| Recertification Response | Any | Recertificationlog. Recert_Result = _USERINPUT_ | |
| Show Last Recertification Only | Yes/No | ||
| Start Date | 30 days before current date | Recertificationlog. Completed > _USERINPUT_ AND Recertificationlog. Completed < _USERINPUT | |
| End Date | Current date | ||
| Recertification Policy Report | Recertification Policy Target Type | Any | RecertificationPolicy. GROUPDN LIKE '_USERINPUT_' |
| Service Type | Any | RecertificationPolicy. SERVICETYPE = _USERINPUT_ | |
| Service | Any | RecertificationPolicy. SERVICEDN =_ USERINPUT_ | |
| Access Type | Any | RecertificationPolicy. ACCESSTYPE = _USERINPUT_ | |
| Access | Any | RecertificationPolicy. ACCESSDN = _USERINPUT_ | |
| Reconciliation Statistics | Service | None (input required) | Service.DN = _USERINPUT_ |
| Rejected | Requester | Any | Process.REQUESTER = _USERINPUT_ (Any) |
| Requestee | Any | Process.REQUESTEE = _USERINPUT_ (Any) | |
| Start Date | 30 days before the current date | Process.Completed > _USERINPUT_ AND Process.Completed < _USERINPUT_ | |
| End Date | Current date | ||
| Services | Service Type | Any | Service.servicetype = _USERINPUT_ |
| Service | Any | Service.DN = _USERINPUT_ | |
| Owner | Any | Person.DN = _USERINPUT_ | |
| Organization Unit | Any | Organizational Container.DN = _USERINPUT_ | |
| Services Granted to an Individual | Person | Any | Person.DN = _USERINPUT_ |
| Summary of Accounts on Service | Service | Any | Service.DN = _USERINPUT_ |
| Account Status | Any (as specified in the properties file) | Account.Account Status = _USERINPUT_ | |
| Suspended Accounts | Account | Any | Account.DN = _USERINPUT_ |
| Person | Any | Person.DN = _USERINPUT_ | |
| Service Type | Any | Service.servicetype = _USERINPUT_ | |
| Service | Any | Service.DN = _USERINPUT_ | |
| Suspended Date | Current date | Process.Completed < _USERINPUT_ | |
| Suspended Individuals | Person | Any | Person.DN = _USERINPUT_ |
| Organization Unit | Any | Organizational Container.DN = _USERINPUT_ | |
| Suspended Before | Current date | Process.Completed < _USERINPUT_ | |
| User | Requester | Any | Process.REQUESTER = _USERINPUT_ (Any) |
| Requestee | Any | Process.REQUESTEE = _USERINPUT_ (Any) | |
| Start Date | 30 days before the current date | Process.Completed > _USERINPUT_ AND Process.Completed < _USERINPUT_ | |
| End Date | Current date |