The AD Users Base report lists all users from a silo (e.g. Directory provider or MIM AD connectorspace). It pre-calculates various attributes for use in other reports.
Customization is required depending on silo names and attributes collected.
{
"Data": [
{
"$type": "SoftwareIDM.ReportingModule.Models.Report, SoftwareIDM.ReportingModule",
"Id": "cb5036bf-5ee6-43b0-b6ee-9fba04c3ea3b",
"Name": "AD Users Base",
"UserId": null,
"UserProfile": false,
"Tags": null,
"Roles": null,
"CacheExpiration": "12:00:00",
"Description": "This is a base report that caches data required by a range of other filtered AD reports. It is more efficient to retrieve data once and use it in different reports.",
"Parameters": [],
"DataSets": [
{
"$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
"Aliases": [
"Managers"
],
"MapRule": "",
"Name": "Users",
"Type": "SoftwareIDM.PanelModel.Models.ObjectRecord, SoftwareIDM.PanelModel",
"Clauses": [
{
"$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
"Field": "Silo",
"Operation": "Eq",
"Value": "special.Identity Silo.AD"
},
{
"$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
"Field": "ObjectType",
"Operation": "Eq",
"Value": "\"user\""
},
{
"$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
"Field": "Deleted",
"Operation": "NotExists",
"Value": ""
}
],
"SubQueries": []
},
{
"$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
"Aliases": null,
"MapRule": "",
"Name": "Manager Ref",
"Type": "SoftwareIDM.PanelModel.Models.MultiAttr, SoftwareIDM.PanelModel",
"Clauses": [
{
"$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
"Field": "Silo",
"Operation": "Eq",
"Value": "special.Identity Silo.AD"
},
{
"$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
"Field": "Attribute",
"Operation": "Eq",
"Value": "\"manager\""
},
{
"$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
"Field": "Deleted",
"Operation": "NotExists",
"Value": ""
}
],
"SubQueries": []
}
],
"ReportSets": [],
"Relations": [
{
"$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
"Name": "Users - Manager",
"LeftSet": "Users",
"RightSet": "Manager Ref",
"LeftRule": "Id",
"RightRule": "ObjectId",
"AllowLeftOuter": false,
"AllowRightOuter": true
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
"Name": "Manager - Managers",
"LeftSet": "Manager Ref",
"RightSet": "Managers",
"LeftRule": "Value",
"RightRule": "Id",
"AllowLeftOuter": false,
"AllowRightOuter": false
}
],
"FieldProjections": [
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "Id",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Id"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "DN",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "DN"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "DNChange",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Filter(\n Changes,\n And(Attributes.DN, Not(BitAnd(ModificationType, special.Object Modification Type.Add)))\n).0.TimeStamp"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "employeeID",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.employeeID"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "employeeType",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.employeeType"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "displayName",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.displayName"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "givenName",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.givenName"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "sAMAccountName",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.sAMAccountName"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "sAMAccountNameChange",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Filter(\n Changes,\n And(Attributes.sAMAccountName, BitAnd(ModificationType, special.Object Modification Type.Update))\n).0.TimeStamp"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "userAccountControl",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "ADFlags(Attributes.userAccountControl)"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "userAccountControlChange",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Filter(\n Changes,\n And(Attributes.userAccountControl, BitAnd(ModificationType, special.Object Modification Type.Update))\n).0.TimeStamp"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "mail",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.mail"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "accountExpires",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.accountExpires"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "accountExpiresChange",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Filter(\n Changes,\n And(Attributes.accountExpires, BitAnd(ModificationType, special.Object Modification Type.Update))\n).0.TimeStamp"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "pwdLastSet",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.pwdLastSet"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "lastLogonTimestamp",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.lastLogonTimestamp"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "objectSid",
"RelationName": "Users - Manager",
"RelationSide": "Left",
"ValueRule": "Attributes.objectSid"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "manager",
"RelationName": "Manager - Managers",
"RelationSide": "Right",
"ValueRule": "Id"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "managerChange",
"RelationName": "Users - Manager",
"RelationSide": "Right",
"ValueRule": "TimeStamp"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "managerMail",
"RelationName": "Manager - Managers",
"RelationSide": "Right",
"ValueRule": "Attributes.mail"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "managerDN",
"RelationName": "Manager - Managers",
"RelationSide": "Right",
"ValueRule": "DN"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "managerEmployeeID",
"RelationName": "Manager - Managers",
"RelationSide": "Right",
"ValueRule": "Attributes.employeeID"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "managerEmployeeType",
"RelationName": "Manager - Managers",
"RelationSide": "Right",
"ValueRule": "Attributes.employeeType"
},
{
"$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
"Name": "managerUserAccountControl",
"RelationName": "Manager - Managers",
"RelationSide": "Right",
"ValueRule": "ADFlags(Attributes.userAccountControl)"
}
],
"Transformations": [],
"Styles": [],
"Sort": {
"Field": "DN",
"Direction": "Ascending"
}
}
],
"Count": 1
}
Comments
0 comments
Please sign in to leave a comment.