Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
SecurID® Governance & Lifecycle Recipes
SecurID Governance & Lifecycle recipes is a collection of items, to help you get the most out of your product deployment. For example, a useful report with the SQL to implement or a way to achieve some advanced rule processing.
This report provides information about all the members of AD groups, which have been set with a "Classification" of "Admin" (See the chart: RSA IGL Recipes: Chart - AD Admin Groups for more info on setting this up)
The goal of this report is to understand the accounts which are members of these admin groups.
The report can be used by Admin/AD Teams to be understand the risk of membership to the groups.
This report requires the key word: "addashboard" to be added within thedescriptionof theAD Account Collector. This key word can be added to more than one Account Collector if required.
Thischart/report/dashboard is supplied "as is" - any modification of thisitemis done at your own risk.
If you have issues applying thischart/report/dashboard, please comment below for help,DO NOT contact the RSA Support team.
If you would like more assistance with this chart/report/dashboard or for help in creating otherchart/report/dashboards, then RSA Professional Services (RSA PS) is available to help.
Please contact your RSA Account Manager or local RSA Sales Rep or reply below for further assistance.
This report includes information about all the accounts and so other key data points, such as if the account is disabled or orphan.
First test this in your query tool (SQLDeveloper, Toad etc..)
(select vACM.group_name as"Group Name", vACM.name as"Account Name", lower(vACM.EATTR_Account_CAS4)as"Account Status", CASE WHEN pACC.IS_DISABLED ='0'THEN'False' ELSE'True' ENDAS"Is Disabled?", casewhen vACM.ORPHANED_DATE isnotnullthen'True'else'False'endas"Orphaned?" from V_ACCOUNT_GROUPMEMBERSHIP vACM leftjoin avuser.V_DATA_COLLECTORS vDC on vDC.id = vACM.ADC_ID leftjoin avuser.PV_ACCOUNT pACC on vACM.ID = pACC.ID where vACM.DELETION_DATE isnull and lower(vDC.DESCRIPTION)like'%addashboard%' and vACM.EATTR_GROUPS_CAS4 ='Admin' ORDERBY vACM.group_name ASC)
Example of the results:
Log into RSA IGL as a user who can create reports. In my example, im using AveksaAdmin
Go to "Reports" / "Tabular"
Select "+ Create Report" button
Under the "General Tab" add the following details:
Name: AD Admin Group Members
Title: AD Admin Group Members
Description: From RSA IGL Link Community. This report provides a list of all accounts who are members of Admin Groups. Note: This chart requires the key word: "addashboard" to be added within the description of the Account Collector.
Under the "Query" Tab, copy the SQL from above
In the bottom bar, press the "Style" button. "Slate" is a good recommendation for reports
Press the "Preview" button, you should see some results, as per the example image below.
If you get an error at this stage, please test your SQL in a Query tool, like "SQL Developer" or "SQL Squirrel" to ensure it works first. If it still doesn't work, please share your SQL and a screen shot of the issue below.DO NOTcontact RSA Support
Under the "Columns" Tab, please use the configuration shown in the image below
Under the"Display Attributes"tab, please use the configuration shown in the image below
Nothing has been set on the "Filter", "Grouping & Sorting" or "Schedule and Email" tabs
Please "hit reply" and share your feedback - we would love to see an image of this working in your environment!