This content has been marked as final. Show 12 replies
There are out of the box reports. The User Profile History will tell you all the information you need about the user. And the Users.Update By field will give you the user key of the user whom made the change at that given time.1 person found this helpful
If you need more than the Resource status history, then you need to enable the Fine Grained reporting which is the Exceptions Reporting. You will need to find the Audit and Reporting document for this. Or find the information related to the scheduled task "Refresh Materialized View" since that is the task used to populate the extra tables for fine grained auditing.
Kevin, Thank you.
Fine Grained reporting was enabled but I still have my problem. There is no information that I need In Upa_Tables (UPA_UD_FORMS and UPA_UD_FORMFIELDS). I need to know not only history of changing attributes, but I need to know who made these changings. And there is no such information in DB.
So, is there any variant how can I get information that i need.
Sorry for my bad english.
You did not mention the version of OIM you are on, but something to start with:1 person found this helpful
Did you run the scheduled task i posted?
Thank you, Bikash.
In first thread i found that i need.
I didn't notice that change_reason_key in upa_ud_forms table can be a usr_key of administrator who made this changing.
Now I can use this information.
Thank you, once again.
One more question. Where can I see information who revoked a resource from a user? I don't see this information in UPA_TABLES. I can see who provisioned it, but not about revoking.
I wish it's not so stupid question as it seems.
Kevin, thank you.
Yes I run it, but it doesn't help me to find that i need. May be I just didn't notice the right information.
You know, I find it very strange that all upa_tables have information about date of changings, but not all of them have information about administrator who made it.
The value for the person whom made the change is the "Users.Updated By Login" field in the UPA_FIELDS.FIELD_NAME field for a given change.
One way you can easily find who revoked the resource is by looking at the revoke task and who it was assigned to.
Yes, but it is information only about user's attributes and not about attributes connected with resorces. But I need both.
Now with your help and Bikash help I found almost everything i need.
I only need to know who revoke resources and I will be very greatfull if you will help me to find this information.
Bikash, can i find this information in DB?
I need it for reporting.
Edited by: 944808 on 06.02.2013 6:45
If you only need to know who revoked a resource, you can use this:
select usr.usr_login, obj.obj_name, ost.ost_status, rev.usr_login "Revoker"
from oiu, usr, obi, obj, ost, usr rev
and ost.ost_status = 'Revoked'
Well looks like you are working on lots of reports, so here is the query to get the status of any task for a particular resource with a particular status.1 person found this helpful
My example above is for AD resource and disabled status.
SELECT USR.USR_LOGIN, USR2.USR_LOGIN , USR.USR_START_DATE, MIL.MIL_NAME,OSI.SCH_KEY,SCH.SCH_STATUS,STA.STA_BUCKET, SCH_ACTUAL_START, SCH_ACTUAL_END FROM OSI,SCH,STA,MIL,TOS,PKG,OIU,USR,OBJ,OST, ORC,USR USR2,UD_ADUSER WHERE OSI.MIL_KEY=MIL.MIL_KEY AND SCH.SCH_KEY=OSI.SCH_KEY AND STA.STA_STATUS=SCH.SCH_STATUS AND TOS.PKG_KEY=PKG.PKG_KEY AND MIL.TOS_KEY=TOS.TOS_KEY AND OIU.USR_KEY=USR.USR_KEY AND OIU.OST_KEY=OST.OST_KEY AND OST.OBJ_KEY=OBJ.OBJ_KEY AND OSI.ORC_KEY=OIU.ORC_KEY --AND OST.OST_STATUS = 'Disbaled' AND STA.STA_BUCKET = 'Completed' AND PKG.PKG_NAME= 'AD User' AND MIL.MIL_NAME= 'Disable User' AND ORC.ORC_KEY=UD_ADUSER.ORC_KEY AND ORC.ORC_KEY=OIU.ORC_KEY AND OSI.OSI_UPDATEBY = USR2.USR_KEY
Kevin and Bikash.
Thank you very much, you gave me very helpfull answers.
I wish you to have a great success in your work.