Report Business Rules with users and entitlemtents
D
Dirk-Jan van Meeuwen
It would be very nice if we could make a report from all the Business Rules with the corresponding users and entitlements. This report is very usefull to check if de AD user accounts contain the right groups, eg. in case of an audit. At this moment we are only able to check this manually (very time consuming) per Business Rule.
R
Ronald Manders
When a ad group is removed from the AD I would like to see in which business rules the AD group is present.
D
Dirk-Jan van Meeuwen
Rick, we want to see áll the Business Rules and their corresponding users and entitlements, not of just a single person. Only with that complete overview we could compare an export of all our Active Directory groups. If we know the differences, we know exactly which group is fully managed or not. We want to create a seperate OU for our managed groups and a seperate OU for our manual groups.
With an export of all the Business Rules and their users and entitlements we could check it much easier like we could do now just by individual persons.
In short terms: we want to check all the rules and AD groupmemberships managed by HelloID for all our persons/users, not just a single person.
R
Rick van den Dijssel
Dirk-Jan van Meeuwen: It's possible to export the entitlements with this you have all the AD groupmemberships managed by HelloID with the included person. The only thing you don't have is the connected Business Rule. But don't forget a entitlement could assigned because one or more business rule has the permission assigned. So it's not a one on one relation. Maybe this can help you. But in short what you want to accomplish with this is to see the managed and unmanaged groupmemberships in HelloID because this is your problem you would like to solve/see.
R
Rick van den Dijssel
Dirk-Jan van Meeuwen: Could you explain the case in more detail? This because it seems to me that you're looking for a way to see all the entitlements of a particular system for a person which we have available. Go to persons in provisioning menu. Select a person and see the entitlements tab. Here you can see all the entitlements that we manage for a person. Just filter this list with the AD systeem and you'll see all the AD groups the person (AD account) is entitled too. Just to make it easy you can download this in a csv file. Open it in Excel and filter even more information if needed.
Hopefully this helps