RSA IGL Recipes : Dashboard - Active Directory (AD) Summary

[#1]

RSA IGL Version: V 7.2.x

Modules: Governance

Product Area: Dashboards - Home (Home Dashboard)

Time to apply: ~30 minutes

Summary

RSA IGL Recipes - The 12 Dashboards of Christmas - Summary , 2020 - Part 3 of 12

The Active Directory (AD) Summary Dashboard has been created to help provide a high-level summary of your AD deployment and areas of potential Risk that should be addressed. Many of the chart objects shown in this dashboard have recommendations included, which either drive processes or additional reports. 

Other useful links

• RSA IGL Recipes - The 12 Dashboards of Christmas - Summary 
• https://community.rsa.com/community/products/governance-and-lifecycle/exchange/recipes/blog/2019/11/06/reports-charts-dashboards-what-are-they-and-how-can-you-build-them 
• Other Dashboards: Click here for more Dashboards 

Example Image (Click to enlarge)

Key Notes

• This chart/report/dashboard is supplied "as is" - any modification of this item is done at your own risk. 
• This dashboard requires some additional "flags" to be set on the account collectors
  • Please ensure this is done, so that the dashboard works as expected.
• If you have issues applying this chart/report/dashboard, please comment below for help, DO NOT contact the RSA Support team.
• If you would like more assistance with this chart/report/dashboard or for help in creating other chart/report/dashboards, then RSA Professional Services (RSA PS) is available to help.
  • Please contact your RSA Account Manager or local RSA Sales Rep or reply below for further assistance.
• Do not forget to set "User Constraints" on your dashboards - otherwise everyone will be able to see them who has access to the object

Details

The "Active Directory Summary" dashboard, contains the following charts & Reports, all of which need to be created first, before you can implement this dashboard. Please see these documents for more info on how to create the required dashboard objects first:

1. RSA IGL Recipes: Chart - AD Orphan Account Summary 
2. RSA IGL Recipes: Chart - AD User Account Control Summary 
3. RSA IGL Recipes: Chart - AD Account to User Summary 
4. RSA IGL Recipes: Chart - AD Admin Groups 
5. https://community.rsa.com/docs/DOC-115206 
6. RSA IGL Recipes: Chart - AD Days Since Last Logon 

Supplementary Reports:

1. RSA IGL Recipes: Report - AD Orphan Accounts 
2. RSA IGL Recipes: Report - AD Account to User Summary 
3. RSA IGL Recipes: Report - AD Admin Group Members 
4. RSA IGL Recipes: Report - AD Group Summary 
5. RSA IGL Recipes: Report - AD Days Since Last Logon 

Dashboard Implementation

You MUST follow standard change request process and apply this solution in your lower environments first, before moving this to Production.

1. Create each of the reports/charts as listed above in the "details" section
2. Once all these charts/reports have been created successfully

3. Go to Admin / Dashboards

4. Under "Welcome Dashboards" click the "+ Create Dashboard" button:
   
   
   

5. Under the "Dashboard Overview" tab

   Dashboard Name: Active Directory Summary

   Enabled: True/Checked

   Display Sequence: 10 (you can update this value in future, to move where this dashboard is shown).

   Layout: Proportional Layout,  select the option with 6 results, as shown below.
   
   
   

6. Under "Dashboard Components" Tab.

7. Click "Add Component" button.

8. Add each of the charts, listed above, you must do this step for each chart.

9. Update the order of the reports/charts so that final result is like the image below.
   
   
   

10. Under the "User Constraints" tab set the correct level of access for who should see this dashboard. 
    Note: For this dashboard, as it appears on the home screen, it is STRONGLY recommended that you set constraints, otherwise everyone who logs in, will be able to see this dashboard. 

    
    
    This is the "Advanced" SQL that can be used, if you want to copy and paste the below

    /*AveksaAdmin, System Administrators*/
    users."User Id"='AveksaAdmin'
    or users.id has approles (('Aveksa EDC','System Administrator'))‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

11. Click "OK"

12. The new dashboard should now be shown from the Home screen.

Next Steps

• Please "hit reply" and share your feedback - we would love to see an image of this working in your environment!

• Check out the other content found on the RSA IGL Recipes page: RSA Identity Governance & Lifecycle Recipes 

Thank you! 

Dont forget:
Please login, then "Like"  and "Actions/Follow" this page (Top Right), so as to receive updates and be notified if we modify/change items found here, in future.