Reporting and User Action History Overview
Reporting > Reporting and User Action History Overview
Password Manager provides a simple and convenient way to view, print, and save reports and charts allowing you to analyze information on how the application is used. The reporting functionality within the solution is based on Microsoft SQL Server Reporting Services as a common reporting environment.
The Reports section of the Administrator site includes a number of pre-defined reports that help you perform the following tasks:
-
Track user registration activity
-
Analyze information about what actions are performed by users in Password Manager
-
Check users’ registration status
-
View a list of users whose Questions and Answers profiles must be updated to comply with the current administrator-defined settings
-
Track helpdesk operators’ activity
The user action history provides records of all actions performed by users registered with Password Manager. You can search for records using a full-text search functionality. The user action history is provided by Enterprise Auditing Service embedded in Password Manager.
To use Password Manager reports, you need to connect to an SQL Server and a Report Server.
To use the user action history functionality, you need to connect to an SQL Server only.
Alternative options
You can use predefined Power BI templates to generate interactive reports as an alternative to Reporting. For more information on Power BI, see Working with Power BI templates.
Setting Up Reporting Environment
To enable the reporting functionality of Password Manager, ensure that the following requirements are met:
-
A SQL Server is deployed in your environment and the Password Manager database is configured on that server.
-
A SQL Server Reporting Services report server is installed in your working environment.
-
You have configured a connection to the report server through the Administration Site.
The interactive Web-based reports are built on data that the report server retrieves from the Password Manager SQL database, and can be either viewed online or exported into multiple file formats.
Using Reports
You can create and view reports interactively using the Administration Site, and save them to multiple file formats.
To use the reporting functionality, you have to specify the SQL Server to store the Password Manager database and connect to the Report Server that is capable of building reports using the data stored in the Password Manager database.
When specifying the SQL Server and the database to store the log data, ensure that the account under which Password Manager will access the server has the appropriate permissions to create and write to a database on the server.
When connecting to a report server for the first time, Password Manager publishes the reports included with the solution to the server, and populates the list of reports on the Administration Site. Before connecting to a report server, ensure that the account under which Password Manager will access the server has the appropriate permissions to publish the Password Manager reports. The administrative rights on the report server will be sufficient for this account to publish reports.
To configure Password Manager reports
-
On the home page of the Password Manager Administration Site, click Reporting.
-
On the Statistics page, click the Reports link under the Reporting and User Action History title.
-
On the Reports page, click Configure SQL Server and Report Server.
-
In the SQL Server Connection Settings dialog, specify the following settings and click Next.
Table 22: SQL server connection settings
|
SQL Server |
Type the name of the SQL Server to be used for storing the Password Manager database. |
|
Database name |
Specify the name for the database where Password Manager will log information used for building reports.
If the database you specified does not yet exist, you will be prompted to confirm creation of the database.
When prompted, select the account for creating the database. This account must have the permission to create a database. |
|
Select account for connecting to the SQL Server |
To have Password Manager access the SQL Server under the Password Manager Service account, select Password Manager Service account. Otherwise, select Specific SQL Server account, and then enter user name and password of the user account you want Password Manager to use when accessing the SQL Server.
NOTE: The account you select must have the permissions to write to the database. |
-
In the Report Server Connection Settings dialog, specify the following settings and click OK:
Table 23: Report server connection settings
|
Report Server URL |
Type in the URL address of the Report Server in the following format: http://<server_name>/<report_server>), where <server_name> is the name of the server where Report Server resides, <report_server> is the name of the report server instance. |
|
Report Manager URL |
Type in the URL address of the Report Manager in the following format: http://<server_name>/<report_server>), where <server_name> is the name of the server where Report Server resides, <report_server> is the name of the Report Manager instance.
This is an optional setting. |
|
Specify the account for deploying SSRS reports |
Enter user name and password of the user account you want Password Manager to use when accessing the Report Server.
This account must have the permissions to deploy reports. |
|
Specify the account that the Report Server will use to connect to the data source |
Enter user name and password of the user account you want the Report Server to use when accessing the data source. You can use either Windows credentials or SQL Server credentials. If you choose Windows credentials, select the Use as Windows credentials when connecting to the data source check box as well.
The account you select must have the permissions to read data from the database. |
To create and preview a report
-
On the home page of the Administration Site, click Reporting, and under Reporting and User Action History, click Reports.
-
On the Reports page, click the report you want to view. The following table lists the reports included with Password Manager:
Table 24: Reports and user action history
|
User status (table) |
This is a table report displaying a list of users in the managed application directory partitions, and the states of the users’ Q&A profiles in Password Manager.
You can see which users have registered with Password Manager and which have not, who of the users must re-create their profiles, and which users are scheduled to update their profiles. |
|
User status (pie chart) |
This is a pie chart showing the percentage of the total number of users for each of the Q&A profiles states. |
|
Actions by user (table) |
This is a table report showing what actions each of the users performed in Password Manager, and whether the result of a user action was successful or not. You can view this report for a specified period of time. |
|
Actions by user (pie chart) |
This is a pie chart displaying the percentage of the total number of user actions for all types of user actions such as registration with Password Manager or password reset. You can view this report for a specified period of time. |
|
Registrations by month (bar chart) |
This is a bar chart showing the monthly numbers of users registered with Password Manager. You can view this report for a specified month range. |
|
Actions by month (bar chart) |
This is a barchart showing the monthly numbers of user actions performed in Password Manager. You can view this report for a specified month range. |
|
Actions by type (table) |
This is a table report showing a summary of user actions in Password Manager sorted by action type. You can view this report for a specified period of time. |
|
Help desk usage by actions (table) |
This is a table report showing a summary of actions on the Helpdesk Site. You can view this report for a specified period of time. |
|
Help desk usage by operators (table) |
This is a table report showing what actions each of the helpdesk operators performed in Password Manager, and whether the result of an operator action was successful or not. You can view this report for a specified period of time. |
|
Help desk usage by users (table) |
This table report shows what actions each helpdesk operator has performed for specific users. You can view this report for a specified period of time. |
|
Email notifications by user (table) |
This table report lists the email notifications sent to specific users. You can view this report for a specified period of time. |
|
Email notifications by type (table) |
This is a table report showing a summary of email notifications sent to users. The notifications are sorted by action type. You can view this report for a specified period of time. |
IMPORTANT: To view Password Manager reports, the account used to view reports must have permissions to read data from the report server database. By default, Windows integrated authentication is used to access the report server database. If you want to change access settings to the report server database, edit the appropriate settings on the Report Server.
-
Once the report is generated, it is displayed in the Report Viewer, in a new browser window.
-
Select the zoom ratio in the drop-down list on the toolbar.
-
To go to a particular page, type in a page number in the leftmost text box on the toolbar and press Enter, or use the navigation arrows beside this text box.
-
To modify report parameters, set the new parameter values by using the group of controls in the upper area of the Report Viewer, and then click the View Report button.
-
To close the Report Viewer and return to the List of Reports page, close the Report Viewer window.
When previewing a report, you can easily locate specific records, or find certain values within the report. The Report Viewer finds each occurrence of the item you are looking for.
To search a report
-
Enter the text you are looking for in the Find Text text box on the menu bar.
-
Click Find.
-
Click Next to find the next occurrence.
In the Report Viewer, you can also save the report in a file, or print the report.
To save a report, select the target file format from the Select a format drop-down list on the menu bar, and then click Export. The Report Viewer supports the following file formats:
-
XML file (.XML)
-
Microsoft Excel Comma Separated Values file (.CSV)
-
TIFF file (.TIFF)
-
Portable Document Format (.PDF)
-
Web archive file (.MHTML)
-
Microsoft Excel Worksheet (.XLS)
To print a report, click the printer icon on the menu bar, and in the Print window, click OK.
User Action History
User action history is a history of all actions performed by all users registered with Password Manager. This functionality is provided by the Enterprise Auditing Service. This service is installed during Password Manager installation and does not require any configuration.
To view user action history, you need to add a connection to an SQL server.
To connect to an SQL server
-
On the home page of the Password Manager Administration Site, click Reporting.
-
On the Statistics page, click the History link under the Reporting and User Action History title.
-
On the History page, click Connect to SQL Server.
-
In the SQL Server Connection Settings dialog, specify the following settings and click OK.
Table 25: SQL server connection settings
|
SQL Server |
Type the name of the SQL Server to be used for storing the Password Manager database. |
|
Database name |
Specify the name for the database where Password Manager will log information used for building reports.
If the database you specified does not yet exist, you will be prompted to confirm creation of the database.
When prompted, select the account for creating the database. This account must have the permission to create a database. |
|
Select account for connecting to the SQL Server |
To have Password Manager access the SQL Server under the Password Manager Service account, select Password Manager Service account. Otherwise, select Specific SQL Server account, then enter user name and password of the user account you want Password Manager to use when accessing the SQL Server.
Note that the account you select must have the permissions to write to the database. |
After you connect to SQL Server, you can perform full-text search for various user actions by user names, emails, activity names, and so on.
On the History page of the Administration Site, enter a value you want to search for and click Search. You can sort the search results by relevance or date. To search for actions performed by an Example User, enter Example User.
