Group Membership Changes Report

The group membership changes report shows users and other objects that have been added and removed from groups in a selectable time range. It includes point in time links to the time traveler for inspecting the group and member objects.

Version 3.4 and Higher

{
  "Data": [
    {
      "$type": "SoftwareIDM.ReportingModule.Models.Report, SoftwareIDM.ReportingModule",
      "Id": "0ffdf1fc-3a2f-423c-a746-0f0c5ed43419",
      "Name": "Group Membership Changes",
      "UserId": "S-1-5-21-1565847093-4040432431-2490805476-500",
      "UserProfile": false,
      "Tags": null,
      "Roles": null,
      "CacheExpiration": "12:00:00",
      "Description": "",
      "Parameters": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.TextReportParameter, SoftwareIDM.ReportingModule",
          "Name": "Time",
          "Description": "Time range to search for group membership changes",
          "Required": true,
          "Validation": "TimeSpan",
          "DefaultValue": "30.00:00:00"
        }
      ],
      "DataSets": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.Mars-AD",
              "ObjectValue": null
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Attribute",
              "Operation": "Eq",
              "Value": "\"member\"",
              "ObjectValue": null
            }
          ],
          "SubQueries": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.SubQuery, SoftwareIDM.PanelModel",
              "Operator": "Or",
              "Clauses": [
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "TimeStamp",
                  "Operation": "Gte",
                  "Value": "AddTime(Now(), \"-\" + Memo(\"Time\"))",
                  "ObjectValue": null
                },
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "Deleted",
                  "Operation": "Gte",
                  "Value": "AddTime(Now(), \"-\" + Memo(\"Time\"))",
                  "ObjectValue": null
                }
              ]
            }
          ],
          "MapRule": "",
          "MemoRules": [
            {
              "$type": "SoftwareIDM.ReportingModule.Models.MemoRule, SoftwareIDM.ReportingModule",
              "Name": "Member",
              "Rule": "context"
            }
          ],
          "Aliases": [],
          "Name": "Member",
          "Type": "SoftwareIDM.PanelModel.Models.MultiAttr, SoftwareIDM.PanelModel",
          "Include": null,
          "Limit": null
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.Mars-AD",
              "ObjectValue": null
            }
          ],
          "SubQueries": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.SubQuery, SoftwareIDM.PanelModel",
              "Operator": "Or",
              "Clauses": [
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "Id",
                  "Operation": "In",
                  "Value": "Map(Memo(\"Member\"), ObjectId)",
                  "ObjectValue": null
                },
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "Id",
                  "Operation": "In",
                  "Value": "Map(Memo(\"Member\"), Value)",
                  "ObjectValue": null
                }
              ]
            }
          ],
          "MapRule": "",
          "MemoRules": [],
          "Aliases": [
            "Members"
          ],
          "Name": "Groups",
          "Type": "SoftwareIDM.PanelModel.Models.ObjectRecord, SoftwareIDM.PanelModel",
          "Include": null,
          "Limit": null
        }
      ],
      "ReportSets": [],
      "Relations": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
          "Name": "Group - Member",
          "LeftSet": "Groups",
          "RightSet": "Member",
          "LeftRule": "Id",
          "RightRule": "ObjectId",
          "AllowLeftOuter": false,
          "AllowRightOuter": false
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
          "Name": "Member - Of",
          "LeftSet": "Member",
          "RightSet": "Members",
          "LeftRule": "Value",
          "RightRule": "Id",
          "AllowLeftOuter": false,
          "AllowRightOuter": false
        }
      ],
      "FieldProjections": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "GroupDN",
          "RelationName": "Group - Member",
          "RelationSide": "Left",
          "ValueRule": "DN"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Group",
          "RelationName": "Group - Member",
          "RelationSide": "Left",
          "ValueRule": "Id"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "GroupDisplay",
          "RelationName": "Group - Member",
          "RelationSide": "Left",
          "ValueRule": "Attributes.displayName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "MemberDN",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "DN"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Member",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "Id"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "MemberDisplay",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "Attributes.displayName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "EmployeeID",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "Attributes.employeeID"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "ObjectType",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "ObjectType"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Added",
          "RelationName": "Group - Member",
          "RelationSide": "Right",
          "ValueRule": "TimeStamp"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Deleted",
          "RelationName": "Group - Member",
          "RelationSide": "Right",
          "ValueRule": "Deleted"
        }
      ],
      "Transformations": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Transform, SoftwareIDM.ReportingModule",
          "FilterRule": "true",
          "GroupingRule": "",
          "TransformRules": [
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "GroupDN",
              "Name": "Group",
              "Operator": "None",
              "TransformRule": "TimeTraveler(Group, FirstNotNull(Deleted, Added)) + \"|\" + FirstNotNull(GroupDisplay, GroupDN)"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "MemberDN",
              "Name": "Member",
              "Operator": "None",
              "TransformRule": "TimeTraveler(Member) + \"|\" + FirstNotNull(MemberDisplay, MemberDN)"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "ObjectType",
              "Name": "Member Type",
              "Operator": "None",
              "TransformRule": ""
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "Added",
              "Name": "",
              "Operator": "None",
              "TransformRule": "DateTimeFormat(Added, \"yyyy-MM-dd\")"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "Deleted",
              "Name": "",
              "Operator": "None",
              "TransformRule": "DateTimeFormat(Deleted, \"yyyy-MM-dd\")"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "EmployeeID",
              "Name": "",
              "Operator": "None",
              "TransformRule": ""
            }
          ]
        }
      ],
      "Styles": [],
      "Sort": {
        "Field": "Member",
        "Direction": "Ascending"
      }
    }
  ],
  "Count": 1
}

Version 3.2 to 3.3

{
  "Data": [
    {
      "$type": "SoftwareIDM.ReportingModule.Models.Report, SoftwareIDM.ReportingModule",
      "Id": "0ffdf1fc-3a2f-423c-a746-0f0c5ed43419",
      "Name": "Group Membership Changes",
      "UserId": "S-1-5-21-1565847093-4040432431-2490805476-500",
      "UserProfile": false,
      "Tags": null,
      "Roles": null,
      "CacheExpiration": "12:00:00",
      "Description": "",
      "Parameters": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.TextReportParameter, SoftwareIDM.ReportingModule",
          "Name": "Time",
          "Description": "Time range to search for group membership changes",
          "Required": true,
          "Validation": "TimeSpan",
          "DefaultValue": "30.00:00:00"
        }
      ],
      "DataSets": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Aliases": null,
          "MapRule": "",
          "Name": "Member",
          "Type": "SoftwareIDM.PanelModel.Models.MultiAttr, SoftwareIDM.PanelModel",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.AD"
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Attribute",
              "Operation": "Eq",
              "Value": "\"member\""
            }
          ],
          "SubQueries": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.SubQuery, SoftwareIDM.PanelModel",
              "Operator": "Or",
              "Clauses": [
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "TimeStamp",
                  "Operation": "Gte",
                  "Value": "AddTime(Now(), \"-\" + Memo(\"Time\"))"
                },
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "Deleted",
                  "Operation": "Gte",
                  "Value": "AddTime(Now(), \"-\" + Memo(\"Time\"))"
                }
              ]
            }
          ]
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Aliases": [
            "Members"
          ],
          "MapRule": "",
          "Name": "Groups",
          "Type": "SoftwareIDM.PanelModel.Models.ObjectRecord, SoftwareIDM.PanelModel",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.AD"
            }
          ],
          "SubQueries": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.SubQuery, SoftwareIDM.PanelModel",
              "Operator": "Or",
              "Clauses": [
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "Id",
                  "Operation": "In",
                  "Value": "Map(Memo(\"Member\"), ObjectId)"
                },
                {
                  "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
                  "Field": "Id",
                  "Operation": "In",
                  "Value": "Map(Memo(\"Member\"), Value)"
                }
              ]
            }
          ]
        }
      ],
      "ReportSets": [],
      "Relations": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
          "Name": "Group - Member",
          "LeftSet": "Groups",
          "RightSet": "Member",
          "LeftRule": "Id",
          "RightRule": "ObjectId",
          "AllowLeftOuter": false,
          "AllowRightOuter": false
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
          "Name": "Member - Of",
          "LeftSet": "Member",
          "RightSet": "Members",
          "LeftRule": "Value",
          "RightRule": "Id",
          "AllowLeftOuter": false,
          "AllowRightOuter": false
        }
      ],
      "FieldProjections": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "GroupDN",
          "RelationName": "Group - Member",
          "RelationSide": "Left",
          "ValueRule": "DN"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Group",
          "RelationName": "Group - Member",
          "RelationSide": "Left",
          "ValueRule": "Id"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "GroupDisplay",
          "RelationName": "Group - Member",
          "RelationSide": "Left",
          "ValueRule": "Attributes.displayName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "MemberDN",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "DN"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Member",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "Id"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "MemberDisplay",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "Attributes.displayName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "EmployeeID",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "Attributes.employeeID"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "ObjectType",
          "RelationName": "Member - Of",
          "RelationSide": "Right",
          "ValueRule": "ObjectType"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Added",
          "RelationName": "Group - Member",
          "RelationSide": "Right",
          "ValueRule": "TimeStamp"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Deleted",
          "RelationName": "Group - Member",
          "RelationSide": "Right",
          "ValueRule": "Deleted"
        }
      ],
      "Transformations": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Transform, SoftwareIDM.ReportingModule",
          "FilterRule": "true",
          "GroupingRule": "",
          "TransformRules": [
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "GroupDN",
              "Name": "Group",
              "Operator": "None",
              "TransformRule": "TimeTraveler(Group, FirstNotNull(Deleted, Added)) + \"|\" + FirstNotNull(GroupDisplay, GroupDN)"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "MemberDN",
              "Name": "Member",
              "Operator": "None",
              "TransformRule": "TimeTraveler(Member) + \"|\" + FirstNotNull(MemberDisplay, MemberDN)"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "ObjectType",
              "Name": "Member Type",
              "Operator": "None",
              "TransformRule": ""
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "Added",
              "Name": "",
              "Operator": "None",
              "TransformRule": "DateTimeFormat(Added, \"yyyy-MM-dd\")"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "Deleted",
              "Name": "",
              "Operator": "None",
              "TransformRule": "DateTimeFormat(Deleted, \"yyyy-MM-dd\")"
            },
            {
              "$type": "SoftwareIDM.ReportingModule.Models.TransformField, SoftwareIDM.ReportingModule",
              "Field": "EmployeeID",
              "Name": "",
              "Operator": "None",
              "TransformRule": ""
            }
          ]
        }
      ],
      "Styles": [],
      "Sort": {
        "Field": "Member",
        "Direction": "Ascending"
      }
    }
  ],
  "Count": 1
}