FIM 2010 R2 Reporting Out-of-Box Reports

Out-of-the-box FIM 2010 R2 Reports

Out of the box, FIM 2010 R2 includes the seven default reports listed below:

Each of these reports has a number of filtering parameters which allow you to scope the report to the data that you are interested in. This document outlines those parameters for each of the seven reports, and details how to use them.

When using the reports below, you should be aware of the following best practices:

  • Any times (hh:mm:ss) passed into the reports will be ignored. We do not support entering hours, minutes, or seconds by hand in order to filter the reports.

  • All dates in the Data Warehouse are sourced from FIM and are saved in Universal Time (UMT). If, for example, one makes a change to a person on 1/10/2011 at 10pm Pacific Time (UMT -7), then the time associated with the change will be as of 1/11/2011 at 5am when it arrives in the Data Warehouse.

  • When using the FIM reports through the SSRS web interface, any character which has a URL encoding (such as &, <, or >) must be escaped before passing as a filtering parameter. So, for example, if you wish to filter on &, you would pass in “&amp;” instead. This is due to how the SSRS report browser interface renders and filters on these characters.

Group Membership Change

This report provides key information about group membership modifications in FIM, including the user account, who approved the group change, the type of change, and any related requests or policy rules related to this change.

 

Filter Name Type Description Notes

Member Display Name

String

Display name of the object joining or leaving a group.

Shows only the most recent value for the member’s display name.

Member Resource ID

GUID

Resource ID of the object joining or leaving a group.

Member Resource Type

String

The resource type of the object joining or leaving a group.

Action

Enum

One of “join”, “leave”, or “all”. Represents whether or not a particular change was a group join, a group leave, or one of either.

Action Date Start

Date

A date which specifies the beginning of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Action Date End

Date

A date which specifies the end of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Group Name

String

The display name of the group being joined or left.

Shows only the most recent value for the group’s display name.

Group Domain

String

The name of the domain of the group being joined to.

Shows only the most recent value for the group’s domain name.

Group Type

String

The type (one of “distribution”, “security”, “mail-enabled security”) of the group being joined or left.

Shows only the most recent value for the group’s type.

Group Displayed Owner

String

The display name of the displayed owner of the group being joined or left.

Shows only the most recent value for the display name of the displayed owner.

Requestor Display Name

String

The display name of the person requesting to join or leave the group.

Shows only the most recent value for the display name of the requestor.

Request Resource ID

String

The resource ID of the request associated with this group join or leave.

Approver Display Name

String

The display name of the approver of the group membership change.

Shows only the most recent value for the display name of the approver.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this group membership change to occur.

Shows only the most recent value for the display name of any management policy rules.

Set Membership Change

This report provides key information about set membership modifications in FIM, including account information about the user who joined or left a set, approvers (if any), and any related requests or policy rules related to this change.

 

Filter Name Type Description Notes

Member Display Name

String

Display name of the object joining or leaving a set.

Shows only the most recent value for the member’s display name.

Member Resource ID

GUID

Resource ID of the object joining or leaving a set.

Member Resource Type

String

The resource type of the object joining or leaving a set.

Action

Enum

One of “join”, “leave”, or “all”. Represents whether or not a particular change was a set join, a set leave, or one of either.

Action Date Start

Date

A date which specifies the beginning of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Action Date End

Date

A date which specifies the end of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Set Name

String

The display name of the set being joined or left.

Shows only the most recent value for the set’s display name.

Request Resource ID

String

The resource ID of the request associated with this set join or leave.

Requestor Display Name

String

The display name of the person requesting to join or leave the set.

Shows only the most recent value for the display name of the requestor.

Approver Display Name

String

The display name of the approver of the set membership change.

Shows only the most recent value for the display name of the approver.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this set membership change to occur.

Shows only the most recent value for the display name of any management policy rules.

Group History

This report provides information about changes to key attributes on group resources in FIM, including group filter, owner, type, domain, and membership.

 

Filter Name Type Description Notes

Show Multiple Approvers and MPRs

Bool

Whether or not to show multiple MPRs and Approvers for each row in the report.

You may set to false when iterating over large data sets to improve report performance. Note that in certain cases when you have filtered the report, we will automatically show all approvers and MPRs when we detect that performance impact will be minimal.

Current Group Display Name

String

The display name of the group being modified.

Shows only the most recent value for the display name of the group.

Group Resource ID

GUID

The object ID of the group being modified.

Operation Type

Enum

One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.

For reference:

  • Create – provisioning of an object

  • Add – creation of a new attribute on an object

  • Modify – modification of an attribute, or addition of a value to a multivalued attribute

  • Remove – removal of a value from a multivalued attribute

  • Delete –deprovisioning of an object

Attribute Name

Enum

The display name of the attribute being updated.

Shows only the most recent value of the display name of the attribute being modified.

Attribute Value

String

The value of the attribute being updated.

Committed Date Start

Date

A date which specifies the beginning of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Committed Date End

Date

A date which specifies the end of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Request Resource ID

GUID

The resource ID of the request associated with this group change.

Requestor Display Name

String

The display name of the person requesting to make this group change.

Shows only the most recent value for the display name of the requestor.

Approver Display Name

String

The display name of the approver of the group change.

Shows only the most recent value for the display name of the approver.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this group change to occur.

Shows only the most recent value for the display name of any management policy rules.

Set History

This report provides information about changes to key attributes on set resources in FIM, including set filter, change type, membership, and creator.

 

Filter Name Type Description Notes

Current Set Display Name

String

The display name of the set being modified.

Shows only the most recent value for the display name of the set.

Set Resource ID

GUID

The object ID of the set being modified.

Operation Type

Enum

One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.

For reference:

  • Create – provisioning of an object

  • Add – creation of a new attribute on an object

  • Modify – modification of an attribute, or addition of a value to a multivalued attribute

  • Remove – removal of a value from a multivalued attribute

  • Delete –deprovisioning of an object

Attribute Name

Enum

The display name of the attribute being updated.

Shows only the most recent value of the display name of the attribute being modified.

Attribute Value

String

The value of the attribute being updated.

Committed Date Start

Date

A date which specifies the beginning of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Committed Date End

Date

A date which specifies the end of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Request Resource ID

GUID

The resource ID of the request associated with this set change.

Requestor Display Name

String

The display name of the person requesting to make this set change.

Shows only the most recent value for the display name of the requestor.

Approver Display Name

String

The display name of the approver of the group set.

Shows only the most recent value for the display name of the approver.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this set change to occur.

Shows only the most recent value for the display name of any management policy rules.

User History

This report provides information about changes to key attributes on user resources in FIM, including account name, email, job title, and employee start/end date.

 

Filter Name Type Description Notes

Current User Display Name

String

The display name of the user being modified.

Shows only the most recent value for the display name of the user.

User Resource ID

GUID

The object ID of the user being modified.

Operation Type

Enum

One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.

For reference:

  • Create – provisioning of an object

  • Add – creation of a new attribute on an object

  • Modify – modification of an attribute, or addition of a value to a multivalued attribute

  • Remove – removal of a value from a multivalued attribute

  • Delete –deprovisioning of an object

Attribute Name

Enum

The display name of the attribute being updated.

Shows only the most recent value of the display name of the attribute being modified.

Attribute Value

String

The value of the attribute being updated.

Committed Date Start

Date

A date which specifies the beginning of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Committed Date End

Date

A date which specifies the end of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Request Resource ID

GUID

The resource ID of the request associated with this management policy rule change.

Requestor Display Name

String

The display name of the person requesting to make this user change.

Shows only the most recent value for the display name of the requestor.

Approver Display Name

String

The display name of the approver of the user change.

Shows only the most recent value for the display name of the approver.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this user change to occur.

Shows only the most recent value for the display name of any management policy rules.

Request History

This report provides information about requests that have been committed to the database in FIM, including request originator, request target, approver account name, and any modified attributes.

 

Filter Name Type Description Notes

Show Multiple Approvers and MPRs

Bool

Whether or not to show multiple MPRs and Approvers for each row in the report.

You may set to false when iterating over large data sets to improve report performance. Note that in certain cases when you have filtered the report, we will automatically show all approvers and MPRs when we detect that performance impact will be minimal.

Request Name

String

The display name of the request.

Request Resource ID

GUID

The resource ID of the request.

Created Date Start

Date

A date which specifies the beginning of the filtering range for the report that is based on the created time of the request.

Created Date End

Date

A date which specifies the end of the filtering range for the report that is based on the created time of the request.

Attribute Name

Enum

The display name of the attribute being updated.

Shows only the most recent value of the display name of the attribute being modified.

Attribute Value

String

The value of the attribute being updated.

Committed Date Start

Date

A date which specifies the beginning of the filtering range for the report that is based on the committed time of the request.

In most cases, committed time is the best filtering choice, since it represents when the change was actually committed to the FIM database.

Committed Date End

Date

A date which specifies the end of the filtering range for the report that is based on the committed time of the request.

In most cases, committed time is the best filtering choice, since it represents when the change was actually committed to the FIM database.

Request Status

String

The status of the request.

By default, we only track requests which have been committed to FIM. Requests that are in progress, have experienced post-processing errors, or have otherwise failed will not be moved to the data warehouse.

Update Mode

String

One of “create”, “add”, “modify,” “remove,” or “delete”. Maps to the update mode on the request which generated this change.

For reference:

  • Create – provisioning of an object

  • Add – creation of a new attribute on an object

  • Modify – modification of an attribute, or addition of a value to a multivalued attribute

  • Remove – removal of a value from a multivalued attribute

  • Delete –deprovisioning of an object

Requestor Display Name

String

The display name of the person who initiated this request.

Shows only the most recent value for the display name of the requestor.

Approver Display Name

String

The display name of the approver of this request.

Shows only the most recent value for the display name of the approver.

Request Target Display Name

String

The display name of the target of this request.

Shows only the most recent value for the display name of the request target.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this group change to occur.

Shows only the most recent value for the display name of any management policy rules.

Request Target Resource ID

GUID

The resource ID of the target of the request.

Target Resource Type

Enum

The display name of the type of the target object.

Shows only the most recent value for the display name of the target resource type.

Parent Request Resource ID

GUID

The resource ID of the parent request associated with this request.

Management Policy Rule History

This report provides information about changes to key attributes on management policy rule resources in FIM, including MPR type, principal set, and change type.

 

Filter Name Type Description Notes

Current Management Policy Rule Display Name

String

The display name of the management policy rule being modified.

Shows only the most recent value for the display name of the management policy rule.

Management Policy Rule Resource ID

GUID

The object ID of the management policy rule being modified.

Operation Type

Enum

One of “create”, “add”, “modify,” “remove,” or “delete”. This operation type maps to the update mode on the request which generated this change.

For reference:

  • Create – provisioning of an object

  • Add – creation of a new attribute on an object

  • Modify – modification of an attribute, or addition of a value to a multivalued attribute

  • Remove – removal of a value from a multivalued attribute

  • Delete –deprovisioning of an object

Attribute Name

Enum

The display name of the attribute being updated.

Shows only the most recent value of the display name of the attribute being modified.

Attribute Value

String

The value of the attribute being updated.

Committed Date Start

Date

A date which specifies the beginning of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Committed Date End

Date

A date which specifies the end of the filtering range for the report.

These times are based off of the committed time of the request which generated this change.

Request Resource ID

GUID

The resource ID of the request associated with this management policy rule change.

Requestor Display Name

String

The display name of the person requesting to make this management policy rule change.

Shows only the most recent value for the display name of the requestor.

Approver Display Name

String

The display name of the approver of the management policy rule change.

Shows only the most recent value for the display name of the approver.

Management Policy Rule Name

String

The display name of any management policy rules which allowed this management policy rule change to occur.

Shows only the most recent value for the display name of any management policy rules.

FIM 2010 R2 Reporting and Historical changes to data

The following section will provide some information on how data is treated and how the data warehouse retains this data even if it has been deleted from the FIM Portal.

In using the FIM reporting feature, when an object is deleted from the FIM database, entries are still maintained in all of the default reports, despite this object having been removed from FIM. An example of this is the act of deleting a user.

Let us say we have "User A" who is a member of "Group 1", "Group 2", and "Group 3". If the FIM administrator goes into the FIM portal and deletes the "User A" object, the following changes will be recorded in the FIM Reporting default reports:

  • User history - A new row showing an operation with type "delete" on the User A's "ObjectID" attribute will be created.

  • Request history - A new row showing a request with the title "Delete Person: 'User A' Request" will be recorded with an Update Mode of "Delete" on the attribute "ObjectID"

  • Group Membership Change History - 3 new rows with action "Leave" for groups "Group 1", "Group 2", and "Group 3" will be recorded for "User A".

The fact that these changes are recorded in perpetuity is useful for being able to back track a change through the set of FIM default reports in order to find the root cause for a change.

Show: