Password Manager 5.8.2 - Administrator Guide (AD LDS edition)

About Password Manager Getting Started Upgrading Password Manager to 5.8.1 Password Manager Architecture Management Policies
Checklist: Configuring Password Manager Understanding Management Policies Configuring Access to the Administration Site Configuring Access to the Self-Service Site Configuring Access to the Helpdesk Site Configuring Questions and Answers Policy Workflow Overview Custom Workflows Custom Activities Self-Service Workflows Helpdesk Workflows User Enforcement Rules
General Settings Password Policies One Identity Hybrid Subscription One Identity Starling Reporting Appendix A: Accounts Used in Password Manager for AD LDS Appendix B: Open Communication Ports for Password Manager for AD LDS Appendix C: Customization Options Overview Glossary

Using Reports

Using Reports

You can create and view reports interactively using the Administration site, and save them to multiple file formats.

To use the reporting functionality, you have to specify the SQL Server to store the Password Manager database and connect to the Report Server that is capable of building reports using the data stored in the Password Manager database.

When specifying the SQL Server and the database to store the log data, ensure that the account under which Password Manager will access the server has the appropriate permissions to create and write to a database on the server.

When connecting to a report server for the first time, Password Manager publishes the reports included with the solution to the server, and populates the list of reports on the Administration site. Before connecting to a report server, ensure that the account under which Password Manager will access the server has the appropriate permissions to publish the Password Manager reports. The administrative rights on the report server will be sufficient for this account to publish reports.

To configure Password Manager reports

  1. On the home page of the Password Manager Administration site, click Reporting.
  2. On the Statistics page, click the Reports link under the Reporting and User Action History title.
  3. On the Reports page, click Configure SQL Server and Report Server.
  4. In the SQL Server Connection Settings dialog box, specify the following settings and click Next.
Table 25: SQL server connection settings

Setting

Description

SQL Server

Type the name of the SQL Server to be used for storing the Password Manager database.

Database name

Specify the name for the database where Password Manager will log information used for building reports.

If the database you specified does not yet exist, you will be prompted to confirm creation of the database.

When prompted, select the account for creating the database. This account must have the permission to create a database.

Select account for connecting to the SQL Server

To have Password Manager access the SQL Server under the Password Manager Service account, select Password Manager Service account. Otherwise, select Specific SQL Server account, and then enter user name and password of the user account you want Password Manager to use when accessing the SQL Server.

Note, that the account you select must have the permissions to write to the database.

  1. In the Report Server Connection Settings dialog box, specify the following settings and click OK:
Table 26: Report server connection settings

Setting

Description

Report Server URL

Type in the URL address of the Report Server in the following format: http://<server_name>/<report_server>), where <server_name> is the name of the server where Report Server resides, <report_server> is the name of the report server instance.

Report Manager URL

Type in the URL address of the Report Manager in the following format: http://<server_name>/<report_server>), where <server_name> is the name of the server where Report Server resides, <report_server> is the name of the Report Manager instance.

This is an optional setting.

Specify the account for deploying SSRS reports

Enter user name and password of the user account you want Password Manager to use when accessing the Report Server.

This account must have the permissions to deploy reports.

Specify the account that the Report Server will use to connect to the data source

Enter user name and password of the user account you want the Report Server to use when accessing the data source. You can use either Windows credentials or SQL Server credentials. If you choose Windows credentials, select the Use as Windows credentials when connecting to the data source check box as well.

The account you select must have the permissions to read data from the database.

To create and preview a report

  1. On the home page of the Administration site, click Reporting, and under Reporting and User Action History, click Reports.
  2. On the Reports page, click the report you want to view. The following table lists the reports included with Password Manager:
Table 27: Reports and user action history

Report name

Description

User status (table)

This is a table report displaying a list of users in the managed application directory partitions, and the states of the users’ Questions and Answers profiles in Password Manager.

You can see which users have registered with Password Manager and which have not, who of the users must re-create their profiles, and who is scheduled to update their profiles.

User status (pie chart)

This is a pie chart showing the percentage of the total number of users for each of the Q&A profiles states.

Actions by user (table)

This is a table report showing what actions each of the users performed in Password Manager, and whether the result of a user action was successful or not. You can view this report for a specified period of time.

Actions by user (pie chart)

This is a pie chart displaying the percentage of the total number of user actions for all types of user actions such as registration with Password Manager or password reset. You can view this report for a specified period of time.

Registrations by month (bar chart)

This is a bar chart showing the monthly numbers of users registered with Password Manager. You can view this report for a specified month range.

Actions by month (bar chart)

This is a barchart showing the monthly numbers of user actions performed in Password Manager. You can view this report for a specified month range.

Actions by type (table)

This is a table report showing a summary of user actions in Password Manager sorted by action type. You can view this report for a specified period of time.

Help desk usage by actions (table)

This is a table report showing a summary of actions on the Helpdesk site. You can view this report for a specified period of time.

Help desk usage by operators (table)

This is a table report showing what actions each of the helpdesk operators performed in Password Manager, and whether the result of an operator action was successful or not. You can view this report for a specified period of time.

Help desk usage by users (table)

This table report shows what actions each helpdesk operator has performed for specific users. You can view this report for a specified period of time.

E-mail notifications by user (table)

This table report lists the e-mail notifications sent to specific users. You can view this report for a specified period of time.

E-mail notifications by type (table)

This is a table report showing a summary of e-mail notifications sent to users. The notifications are sorted by action type. You can view this report for a specified period of time.

 

IMPORTANT: To view Password Manager reports, the account used to view reports must have permissions to read data from the report server database. By default, Windows integrated authentication is used to access the report server database. If you want to change access settings to the report server database, edit the appropriate settings on the Report Server.
  1. Once the report is generated, it is displayed in the Report Viewer, in a new browser window.
  2. Select the zoom ratio in the drop-down list on the toolbar.
  3. To go to a particular page, type in a page number in the leftmost text box on the toolbar and press ENTER, or use the navigation arrows beside this text box.
  4. To modify report parameters, set the new parameter values by using the group of controls in the upper area of the Report Viewer, and then click the View Report button.
  5. To close the Report Viewer and return to the List of Reports page, simply close the Report Viewer window.

When previewing a report, you can easily locate specific records, or find certain values within the report. The Report Viewer finds each occurrence of the item you are looking for.

To search a report

  1. Enter the text you are looking for in the Find Text text box on the menu bar.
  2. Click Find.
  3. Click Next to find the next occurrence.

In the Report Viewer, you can also save the report in a file, or print the report.

To save a report, select the target file format from the Select a format drop-down list on the menu bar, and then click Export. The Report Viewer supports the following file formats:

  • XML file (.XML)
  • Microsoft Excel Comma Separated Values file (.CSV)
  • TIFF file (.TIFF)
  • Portable Document Format (.PDF)
  • Web archive file (.MHTML)
  • Microsoft Excel Worksheet (.XLS)

To print a report, click the printer icon on the menu bar, and in the Print window, click OK.

User Action History

User Action History

User action history is a history of all actions performed by all users registered with Password Manager. This functionality is provided by the Enterprise Auditing Service. This service is installed during Password Manager installation and does not require any configuration.

To view user action history, you need to add a connection to SQL Server.

To connect to SQL Server

  1. On the home page of the Password Manager Administration site, click Reporting.
  2. On the Statistics page, click the History link under the Reporting and User Action History title.
  3. On the History page, click Connect to SQL Server.
  4. In the SQL Server Connection Settings dialog box, specify the following settings and click OK.
Table 28: SQL server connection settings

Setting

Description

SQL Server

Type the name of the SQL Server to be used for storing the Password Manager database.

Database name

Specify the name for the database where Password Manager will log information used for building reports.

If the database you specified does not yet exist, you will be prompted to confirm creation of the database.

When prompted, select the account for creating the database. This account must have the permission to create a database.

Select account for connecting to the SQL Server

To have Password Manager access the SQL Server under the Password Manager Service account, select Password Manager Service account. Otherwise, select Specific SQL Server account, and then enter user name and password of the user account you want Password Manager to use when accessing the SQL Server.

Note, that the account you select must have the permissions to write to the database.

After you connect to SQL Server, you can perform full-text search for various user actions by user names, emails, activity names, etc.

On the History page of the Administration site, enter a value you want to search for and click Search. You can sort the search results by relevance or date. To search for actions performed by John Doe for example, enter John Doe.

Managing Connections to SQL Server and Report Server

Managing Connections to SQL Server and Report Server

On the Reporting page of the Administration site, you can edit or remove existing connections to SQL and Report Servers.

To edit connections, under Reporting and User Action History, click the Edit Connections link and specify required values.

To remove connections, under Reporting and User Action History, click the Disconnect Servers link. Note, that all existing connections will be removed.

Best Practices for Configuring Reporting Services

Best Practices for Configuring Reporting Services

This section provides instructions on how to configure the Reporting Services component. SQL Server Reporting Services component builds reports using the data that SQL Server stores in the Password Manager database. This database must be configured on the SQL Server.

SQL Server Reporting Services allows you to create and view reports that provide statistical data on how Password Manager is used, for example how many users have created their Questions and Answers profiles, how many users need to update their Questions and Answers profiles, what actions each user or helpdesk operator has performed in Password Manager, etc.

The following topics are covered:

  • Reporting Services default configuration.
  • Reporting Services authorization issues.
  • Reporting Services firewall issues.
Related Documents