RSA IGL Recipes: Chart - Application - Application Account Review Status

[#1]

RSA IGL Version: V 7.2.x

Modules: Governance

Product Area: Charts, Single Series - Dynamic (Applied to Application Object Dashboard)

Associated Dashboard: RSA IGL Recipes : Dashboard - Application Summary 

Time to apply: ~30 minutes

Summary

This chart provides key information about the accounts for a selected application and if they have ever been reviewed. It is a dynamic chart, that has flexible configuration options, allowing you to decide how you want to show and group the data displayed. 

The goal of this chart is to understand if you have any risk, where accounts have never been reviewed.

The chart can be used by application owners or the admin team to monitor accounts. 

This chart will only work when it is applied dynamically to the Application object dashboard.

Other useful links

• RSA IGL Recipes - The 12 Dashboards of Christmas - Summary 
• https://community.rsa.com/community/products/governance-and-lifecycle/exchange/recipes/blog/2019/11/06/reports-charts-dashboards-what-are-they-and-how-can-you-build-them 
• Other Dashboards: Click here for more Dashboards 

Example Image (Click to enlarge)

Key Notes

• This chart/report/dashboard is supplied "as is" - any modification of this item is done at your own risk.

• This dashboard is only relevant to customers that use Account Reviews. The commonly used User Access reviews do not review account objects, so if you only use User Access reviews, then all accounts will have a "Never Reviewed” status.

• If you have issues applying this chart/report/dashboard, please comment below for help, DO NOT contact the RSA Support team.
• If you would like more assistance with this chart/report/dashboard or for help in creating other chart/report/dashboards, then RSA Professional Services (RSA PS) is available to help.
  • Please contact your RSA Account Manager or local RSA Sales Rep or reply below for further assistance.

Details

This chart includes the following key information, you can click the chart legend to show/hide results: 

• Reviewed = Accounts which have been reviewed
• Never Reviewed = Accounts which have never been reviewed

Chart Dynamic Values

The following value needs to be used when creating the chart, however the value will update dynamically when used within the dashboard.

• TargetObjectID: This is used dynamically within the application itself, the value will automatically be updated, whenever you view an application. When viewing the chart, you need to give it some value, so it can work against something. Please go to an application you have and find its "OID". Use this value in the TargetObjectID, so the chart has something to use. 

How to find an Example Target Object ID:
Go to Resources/Applications
Select any application (pick one that has multiple accounts and some orphans)
Once the application is open, look at the URL.
The value you want is found just after "OID=" and then before the "&"
In this example, the value we want is 14

Chart SQL

First test this in your query tool (SQLDeveloper, Toad etc..)

(select 
    'Reviewed' as Title,
    sum(decode(last_reviewed_date,null,0,1)) as result
from avuser.PV_ACCOUNT
where application_id =:TargetObjectID
    and deletion_date is null
Union All
select 
    'Never Reviewed' as Title,
    sum(decode(last_reviewed_date,null,1,0)) as result
from avuser.PV_ACCOUNT
where application_id =:TargetObjectID
    and deletion_date is null
)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Example of the results:

Chart Implementation

1. Log into RSA IGL as a user who can create charts. In my example, im using AveksaAdmin
2. Go to "Reports" / "Charts"
3. Select "+ Create Chart" button
   
4. Under the "General Tab" add the following details:
   • Name: Application - Reviewd Accounts
   • Description: From RSA IGL Link Community. This chart provides information on the status of all accounts and if they have ever been reviewed. The chart is dynamic and only works when applied within an "application" object dashboard.
   • Type = Single Series Chart
     
     
     
5. Under the "Query" Tab, copy the SQL from above
6. Update the TargetObjectID as noted above.
7. Press the "Preview" button, you should see some results, as per the example image below.
   

   If you get an error at this stage, please test your SQL in a Query tool, like "SQL Developer" or "SQL Squirrel" to ensure it works first. 
   If it still doesn't work, please share your SQL and a screen shot of the issue below. DO NOT contact RSA Support 

   
   
   
8. Under the "Columns" Tab, please use the configuration shown in the image below.
   
   
   
9. Under the "Display Attributes" tab, you should select "Doughnut 3D". Please also apply these settings, however you can update the wording with what is best for you.
   
   • Under "Title and Axis Names"
     • Caption: Account Review Status
     • Sub Caption: Recommendation: All accounts should be reviewed ASAP if "Never Reviewed"
       
       
       
   • Under "Functional attributes"
     • Select "Animation" = ticked
     • "Palette" = 1
     • Select "Show Labels"  = ticked
     • Select "Show Values" = ticked
       
       
       

There are MANY other "display attributes" you can play with on this screen, so please update and make changes as you see fit. 

Next Steps

• Please "hit reply" and share your feedback - we would love to see an image of this working in your environment!
• Check out the other content found on the RSA IGL Recipes page: RSA Identity Governance & Lifecycle Recipes 

  

  Thank you! 

  

Dont forget:
Please login, then "Like"  and "Actions/Follow" this page (Top Right), so as to receive updates and be notified if we modify/change items found here, in future.