Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
SecurID® Governance & Lifecycle Recipes
SecurID Governance & Lifecycle recipes is a collection of items, to help you get the most out of your product deployment. For example, a useful report with the SQL to implement or a way to achieve some advanced rule processing.
Thischart/report/dashboard is supplied "as is" - any modification of thisitemis done at your own risk.
If you have issues applying thischart/report/dashboard, please comment below for help,DO NOT contact the RSA Support team.
If you would like more assistance with this chart/report/dashboard or for help in creating otherchart/report/dashboards, then RSA Professional Services (RSA PS) is available to help.
Please contact your RSA Account Manager or local RSA Sales Rep or reply below for further assistance.
This chart includes a breakdown of the following key items when it comes to AD groups:
Never Reviewed Groups
Empty Groups (No members)
Groups without an Owner
The value are shown as a percentage, however if you move over the Pie chart, it will also show the exact value.
First test this in your query tool (SQLDeveloper, Toad etc..)
(select--v3 t2.information, casewhen t3.total isnullthen t2.total else t3.total endas Total from (--we need to list out all the values first, so that we can collect '0' values. otherwise it wouldnt show in the report selectdistinct 'Active Groups'as Information, cast(('0')as number)as total from dual unionall selectdistinct 'Never Reviewed Groups'as Information, cast(('0')as number)as total from dual unionall selectdistinct 'Empty Groups'as Information, cast(('0')as number)as total from dual unionall selectdistinct 'Groups Without Owner'as Information, cast(('0')as number)as total from dual unionall selectdistinct '''Admin'' Groups'as Information, cast(('0')as number)as total from dual ) t2 leftouterjoin ( select * from ( select 'Active Groups'as Information, count(id)as Total, ADC_ID from Avuser.V_ALL_GROUPS where DELETION_DATE isnull groupby ADC_ID unionall select 'Never Reviewed Groups'as Information, count(id)as Total, ADC_ID from Avuser.V_ALL_GROUPS where LAST_REVIEWED_DATE isnull and DELETION_DATE isnull groupby ADC_ID unionall selectdistinct 'Empty Groups'as Information, count(vAG.name)as Total, vAG.ADC_ID from Avuser.V_ALL_GROUPS vAG leftjoin (selectdistinct GROUP_ID from avuser.V_GRP_MEMBERSHIPS vGM ) vGM on vGM.GROUP_ID = vAG.id where vGM.group_id isnull and vAG.DELETION_DATE isnull groupby vAG.ADC_ID unionall select 'Groups Without Owner'as Information, count(id)as Total, ADC_ID from Avuser.V_ALL_GROUPS where OWNER_ID isnull and DELETION_DATE isnull groupby ADC_ID unionall select '''Admin'' Groups'as Information, count(id)as Total, ADC_ID from Avuser.V_ALL_GROUPS where DELETION_DATE isnull and lower(name)like'%admin%' groupby ADC_ID ) t1 leftjoin avuser.V_DATA_COLLECTORS tDC on tDC.id = t1.ADC_ID where lower(tDC.DESCRIPTION)like'%addashboard%' ) t3 on t3.information = t2.information)
Log into RSA IGL as a user who can create charts. In my example, im using AveksaAdmin
Go to "Reports" / "Charts"
Select "+ Create Chart" button
Under the "General Tab" add the following details:
Name: AD Group Summary
From RSA IGL Link Community. This chart displays a summary of all groups within Active Directory.
Note: This chart requires the key word: "addashboard" to be added within the description of the Account Collector.
Type= Single Series Chart
Under the "Query" Tab, copy the SQL from above.
"Press the "Preview" button, you should see some results, as per the example image below.
If you get an error at this stage, please test your SQL in a Query tool, like "SQL Developer" or "SQL Squirrel" to ensure it works first. If it still doesn't work, please share your SQL and a screen shot of the issue below.DO NOTcontact RSA Support
Under the "Columns" Tab, please use the configuration shown in the image below
Under the"Display Attributes"tab, you should select"PIE 2D". Please also apply these settings, however you can update the wording with what is best for you.
Under "Title and Axis Names"
Caption: AD - Group Summary
Sub Caption: NOTE: Run Tabular Report 'AD Group Summary' for full list of never reviewed groups, groups without owners or empty groups
Under "Functional attributes"
Select"Show percent values"= Ticked
There are MANY other "display attributes" you can play with on this screen, so please update and make changes as you see fit.
Save the new chart
Please "hit reply" and share your feedback - we would love to see an image of this working in your environment!