FIM 2010 R2 Reporting Out-of-Box Reports

Article
08/06/2012

Out-of-the-box FIM 2010 R2 Reports

Out of the box, FIM 2010 R2 includes the seven default reports listed below:

Group Membership Change
Set Membership Change
Group History
Set History
User History
Request History
Management Policy Rule History

Each of these reports has a number of filtering parameters which allow you to scope the report to the data that you are interested in. This document outlines those parameters for each of the seven reports, and details how to use them.

When using the reports below, you should be aware of the following best practices:

Any times (hh:mm:ss) passed into the reports will be ignored. We do not support entering hours, minutes, or seconds by hand in order to filter the reports.
All dates in the Data Warehouse are sourced from FIM and are saved in Universal Time (UMT). If, for example, one makes a change to a person on 1/10/2011 at 10pm Pacific Time (UMT -7), then the time associated with the change will be as of 1/11/2011 at 5am when it arrives in the Data Warehouse.
When using the FIM reports through the SSRS web interface, any character which has a URL encoding (such as &, <, or >) must be escaped before passing as a filtering parameter. So, for example, if you wish to filter on &, you would pass in “&” instead. This is due to how the SSRS report browser interface renders and filters on these characters.

Group Membership Change

This report provides key information about group membership modifications in FIM, including the user account, who approved the group change, the type of change, and any related requests or policy rules related to this change.

Filter Name	Type	Description	Notes
Member Display Name	String	Display name of the object joining or leaving a group.	Shows only the most recent value for the member’s display name.
Member Resource ID	GUID	Resource ID of the object joining or leaving a group.
Member Resource Type	String	The resource type of the object joining or leaving a group.
Action	Enum	One of “join”, “leave”, or “all”. Represents whether or not a particular change was a group join, a group leave, or one of either.
Action Date Start	Date	A date which specifies the beginning of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Action Date End	Date	A date which specifies the end of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Group Name	String	The display name of the group being joined or left.	Shows only the most recent value for the group’s display name.
Group Domain	String	The name of the domain of the group being joined to.	Shows only the most recent value for the group’s domain name.
Group Type	String	The type (one of “distribution”, “security”, “mail-enabled security”) of the group being joined or left.	Shows only the most recent value for the group’s type.
Group Displayed Owner	String	The display name of the displayed owner of the group being joined or left.	Shows only the most recent value for the display name of the displayed owner.
Requestor Display Name	String	The display name of the person requesting to join or leave the group.	Shows only the most recent value for the display name of the requestor.
Request Resource ID	String	The resource ID of the request associated with this group join or leave.
Approver Display Name	String	The display name of the approver of the group membership change.	Shows only the most recent value for the display name of the approver.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this group membership change to occur.	Shows only the most recent value for the display name of any management policy rules.

Set Membership Change

This report provides key information about set membership modifications in FIM, including account information about the user who joined or left a set, approvers (if any), and any related requests or policy rules related to this change.

Filter Name	Type	Description	Notes
Member Display Name	String	Display name of the object joining or leaving a set.	Shows only the most recent value for the member’s display name.
Member Resource ID	GUID	Resource ID of the object joining or leaving a set.
Member Resource Type	String	The resource type of the object joining or leaving a set.
Action	Enum	One of “join”, “leave”, or “all”. Represents whether or not a particular change was a set join, a set leave, or one of either.
Action Date Start	Date	A date which specifies the beginning of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Action Date End	Date	A date which specifies the end of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Set Name	String	The display name of the set being joined or left.	Shows only the most recent value for the set’s display name.
Request Resource ID	String	The resource ID of the request associated with this set join or leave.
Requestor Display Name	String	The display name of the person requesting to join or leave the set.	Shows only the most recent value for the display name of the requestor.
Approver Display Name	String	The display name of the approver of the set membership change.	Shows only the most recent value for the display name of the approver.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this set membership change to occur.	Shows only the most recent value for the display name of any management policy rules.

Group History

This report provides information about changes to key attributes on group resources in FIM, including group filter, owner, type, domain, and membership.

Filter Name	Type	Description	Notes
Show Multiple Approvers and MPRs	Bool	Whether or not to show multiple MPRs and Approvers for each row in the report.	You may set to false when iterating over large data sets to improve report performance. Note that in certain cases when you have filtered the report, we will automatically show all approvers and MPRs when we detect that performance impact will be minimal.
Current Group Display Name	String	The display name of the group being modified.	Shows only the most recent value for the display name of the group.
Group Resource ID	GUID	The object ID of the group being modified.
Operation Type	Enum	One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.	For reference: Create – provisioning of an object Add – creation of a new attribute on an object Modify – modification of an attribute, or addition of a value to a multivalued attribute Remove – removal of a value from a multivalued attribute Delete –deprovisioning of an object
Attribute Name	Enum	The display name of the attribute being updated.	Shows only the most recent value of the display name of the attribute being modified.
Attribute Value	String	The value of the attribute being updated.
Committed Date Start	Date	A date which specifies the beginning of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Committed Date End	Date	A date which specifies the end of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Request Resource ID	GUID	The resource ID of the request associated with this group change.
Requestor Display Name	String	The display name of the person requesting to make this group change.	Shows only the most recent value for the display name of the requestor.
Approver Display Name	String	The display name of the approver of the group change.	Shows only the most recent value for the display name of the approver.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this group change to occur.	Shows only the most recent value for the display name of any management policy rules.

Set History

This report provides information about changes to key attributes on set resources in FIM, including set filter, change type, membership, and creator.

Filter Name	Type	Description	Notes
Current Set Display Name	String	The display name of the set being modified.	Shows only the most recent value for the display name of the set.
Set Resource ID	GUID	The object ID of the set being modified.
Operation Type	Enum	One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.	For reference: Create – provisioning of an object Add – creation of a new attribute on an object Modify – modification of an attribute, or addition of a value to a multivalued attribute Remove – removal of a value from a multivalued attribute Delete –deprovisioning of an object
Attribute Name	Enum	The display name of the attribute being updated.	Shows only the most recent value of the display name of the attribute being modified.
Attribute Value	String	The value of the attribute being updated.
Committed Date Start	Date	A date which specifies the beginning of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Committed Date End	Date	A date which specifies the end of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Request Resource ID	GUID	The resource ID of the request associated with this set change.
Requestor Display Name	String	The display name of the person requesting to make this set change.	Shows only the most recent value for the display name of the requestor.
Approver Display Name	String	The display name of the approver of the group set.	Shows only the most recent value for the display name of the approver.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this set change to occur.	Shows only the most recent value for the display name of any management policy rules.

User History

This report provides information about changes to key attributes on user resources in FIM, including account name, email, job title, and employee start/end date.

Filter Name	Type	Description	Notes
Current User Display Name	String	The display name of the user being modified.	Shows only the most recent value for the display name of the user.
User Resource ID	GUID	The object ID of the user being modified.
Operation Type	Enum	One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.	For reference: Create – provisioning of an object Add – creation of a new attribute on an object Modify – modification of an attribute, or addition of a value to a multivalued attribute Remove – removal of a value from a multivalued attribute Delete –deprovisioning of an object
Attribute Name	Enum	The display name of the attribute being updated.	Shows only the most recent value of the display name of the attribute being modified.
Attribute Value	String	The value of the attribute being updated.
Committed Date Start	Date	A date which specifies the beginning of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Committed Date End	Date	A date which specifies the end of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Request Resource ID	GUID	The resource ID of the request associated with this management policy rule change.
Requestor Display Name	String	The display name of the person requesting to make this user change.	Shows only the most recent value for the display name of the requestor.
Approver Display Name	String	The display name of the approver of the user change.	Shows only the most recent value for the display name of the approver.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this user change to occur.	Shows only the most recent value for the display name of any management policy rules.

Request History

This report provides information about requests that have been committed to the database in FIM, including request originator, request target, approver account name, and any modified attributes.

Filter Name	Type	Description	Notes
Show Multiple Approvers and MPRs	Bool	Whether or not to show multiple MPRs and Approvers for each row in the report.	You may set to false when iterating over large data sets to improve report performance. Note that in certain cases when you have filtered the report, we will automatically show all approvers and MPRs when we detect that performance impact will be minimal.
Request Name	String	The display name of the request.
Request Resource ID	GUID	The resource ID of the request.
Created Date Start	Date	A date which specifies the beginning of the filtering range for the report that is based on the created time of the request.
Created Date End	Date	A date which specifies the end of the filtering range for the report that is based on the created time of the request.
Attribute Name	Enum	The display name of the attribute being updated.	Shows only the most recent value of the display name of the attribute being modified.
Attribute Value	String	The value of the attribute being updated.
Committed Date Start	Date	A date which specifies the beginning of the filtering range for the report that is based on the committed time of the request.	In most cases, committed time is the best filtering choice, since it represents when the change was actually committed to the FIM database.
Committed Date End	Date	A date which specifies the end of the filtering range for the report that is based on the committed time of the request.	In most cases, committed time is the best filtering choice, since it represents when the change was actually committed to the FIM database.
Request Status	String	The status of the request.	By default, we only track requests which have been committed to FIM. Requests that are in progress, have experienced post-processing errors, or have otherwise failed will not be moved to the data warehouse.
Update Mode	String	One of “create”, “add”, “modify,” “remove,” or “delete”. Maps to the update mode on the request which generated this change.	For reference: Create – provisioning of an object Add – creation of a new attribute on an object Modify – modification of an attribute, or addition of a value to a multivalued attribute Remove – removal of a value from a multivalued attribute Delete –deprovisioning of an object
Requestor Display Name	String	The display name of the person who initiated this request.	Shows only the most recent value for the display name of the requestor.
Approver Display Name	String	The display name of the approver of this request.	Shows only the most recent value for the display name of the approver.
Request Target Display Name	String	The display name of the target of this request.	Shows only the most recent value for the display name of the request target.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this group change to occur.	Shows only the most recent value for the display name of any management policy rules.
Request Target Resource ID	GUID	The resource ID of the target of the request.
Target Resource Type	Enum	The display name of the type of the target object.	Shows only the most recent value for the display name of the target resource type.
Parent Request Resource ID	GUID	The resource ID of the parent request associated with this request.

Management Policy Rule History

This report provides information about changes to key attributes on management policy rule resources in FIM, including MPR type, principal set, and change type.

Filter Name	Type	Description	Notes
Current Management Policy Rule Display Name	String	The display name of the management policy rule being modified.	Shows only the most recent value for the display name of the management policy rule.
Management Policy Rule Resource ID	GUID	The object ID of the management policy rule being modified.
Operation Type	Enum	One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.	For reference: Create – provisioning of an object Add – creation of a new attribute on an object Modify – modification of an attribute, or addition of a value to a multivalued attribute Remove – removal of a value from a multivalued attribute Delete –deprovisioning of an object
Attribute Name	Enum	The display name of the attribute being updated.	Shows only the most recent value of the display name of the attribute being modified.
Attribute Value	String	The value of the attribute being updated.
Committed Date Start	Date	A date which specifies the beginning of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Committed Date End	Date	A date which specifies the end of the filtering range for the report.	These times are based off of the committed time of the request which generated this change.
Request Resource ID	GUID	The resource ID of the request associated with this management policy rule change.
Requestor Display Name	String	The display name of the person requesting to make this management policy rule change.	Shows only the most recent value for the display name of the requestor.
Approver Display Name	String	The display name of the approver of the management policy rule change.	Shows only the most recent value for the display name of the approver.
Management Policy Rule Name	String	The display name of any management policy rules which allowed this management policy rule change to occur.	Shows only the most recent value for the display name of any management policy rules.

FIM 2010 R2 Reporting and Historical changes to data

The following section will provide some information on how data is treated and how the data warehouse retains this data even if it has been deleted from the FIM Portal.

In using the FIM reporting feature, when an object is deleted from the FIM database, entries are still maintained in all of the default reports, despite this object having been removed from FIM. An example of this is the act of deleting a user.

Let us say we have "User A" who is a member of "Group 1", "Group 2", and "Group 3". If the FIM administrator goes into the FIM portal and deletes the "User A" object, the following changes will be recorded in the FIM Reporting default reports:

User history - A new row showing an operation with type "delete" on the User A's "ObjectID" attribute will be created.
Request history - A new row showing a request with the title "Delete Person: 'User A' Request" will be recorded with an Update Mode of "Delete" on the attribute "ObjectID"
Group Membership Change History - 3 new rows with action "Leave" for groups "Group 1", "Group 2", and "Group 3" will be recorded for "User A".

The fact that these changes are recorded in perpetuity is useful for being able to back track a change through the set of FIM default reports in order to find the root cause for a change.