OIM Reporting

Hello Guys,
I want to have the possibility to report any operation done within OIM data. For example, I want to be able to report all the changes done to an account, since the creation its creation. When I report this account (an account to a resource, not an OIM user) I want to be able to see, all the data that where provisioned during creation, and all the data that were modified. If I change, for example that account's attribute called POSITION, I want to be able to report even the old value that POSITION hold, and even when did this change happened, who did it and who approved it.
Can anyone of you Guys guide me in the right directions to achieve this? It also seems that OIM doesn't report the provisionings done directly by Administrators, which didn't generate a requests, have a configured something wrong?
I am new to OIM reporting, could you GUYS englight me on this?
Best Regards,
Eugert

You can use the following query to get the updates to the user process forms for a particular user:
SELECT UPA_UD_FORMFIELDS.FIELD_NAME,UPA_UD_FORMFIELDS.OLD_VALUE, UPA_UD_FORMFIELDS.NEW_VALUE,
UPA_UD_FORMS.CHANGE_REASON, USR2.USR_LOGIN, UPA_UD_FORMFIELDS.UPDATE_DATE
FROM UPA_UD_FORMFIELDS ,UPA_UD_FORMS,UPA_RESOURCE,OIU,USR USR, USR USR2
WHERE UPA_UD_FORMFIELDS.UPA_UD_FORMFIELDS_KEY=UPA_UD_FORMS.UPA_UD_FORMS_KEY
AND UPA_RESOURCE.UPA_RESOURCE_KEY=UPA_UD_FORMS.UPA_RESOURCE_KEY
AND UPA_RESOURCE.OIU_KEY=OIU.OIU_KEY
AND OIU.USR_KEY=USR.USR_KEY
AND USR2.USR_KEY=UPA_UD_FORMS.CHANGE_REASON_KEY
AND USR.USR_LOGIN='XXXXX';Also make sure that your Audit Level is set to Process Task to audit the process form changes and etc.
To get the direct provisioning audit information look under UPA_RESOURCE table.
SELECT UPA_RESOURCE.OBJ_NAME,
UPA_RESOURCE.OST_STATUS,
UPA_RESOURCE.PROVISIONED_BY,
UPA_RESOURCE.PROVISIONED_BY_ID,
UPA_RESOURCE.OIU_CREATE_DATE
FROM UPA_RESOURCE UPA_RESOURCE
WHERE
UPA_RESOURCE.UPA_RESOURCE_KEY IN
(SELECT UPA.UPA_KEY from UPA UPA, USR USR where UPA.USR_KEY=USR.USR_KEY AND USR.USR_LOGIN='XXXXX')HTH,
BB
Edited by: bbagaria on Oct 24, 2011 5:56 AM

Similar Messages

  • OIM Reporting: How to pass a dynamic parameter in the xml file

    Hi,
    I am generating a custom report in OIM. My stored procedure is ready and I am getting the required data when I query the database. However,while displaying it through the xml file, I need to filter the fetched data by group name. The glitch present here is that the group name is dependent on the resource selected and so the group parameter is dynamic. How can I pass this dynamic group parameter in the xml file to filter the data. Which attributes are to be used. Can anyone please help me out regarding this?
    Thanks in Advance,
    SK

    The OOTB OIM reporting mechanism does not support dependant LOVs, which is
    what you are asking for.

  • OIM report / add column to working report

    Hi,
    I need some help with OIM reports.
    Cannot add a column to a working report. What I have done is that I have changed the Stored procedure and then changed the Report XML Metadata to include that column.
    The report just turns out to be blank after the changes made.
    A snippet of the change to the Stored Procedure(added line in bold):
    -- contruct the query
    strColumnList := ' tusracc.system as "SYSTEM", ' ||
    ' vifs.ifsemp_employee_id as "EMP_ID", ' ||
    ' vusr.usr_first_name || '' '' || vusr.usr_last_name as "EMP_NAME", ' ||
    *' vusr.usr_status as "USR_STATUS", ' ||*
    ' tusracc.attribute as "ATTRIBUTE", ' ||
    ' tusracc.attrvalue1 as "ATTRVALUE" ';
    strFromClause := ' v_users vusr, v_ifsusers vifs, tmp_user_access tusracc ';
    strWhereClause := ' tusracc.usr_key = vusr.usr_key ';
    strWhereClause := strWhereClause || ' and vusr.usr_key=vifs.usr_key(+)';
    IF strsortcolumn_in IS NULL THEN
    strOrderByClause := ' 2 ' ;
    ELSE
    strOrderByClause := strsortcolumn_in ;
    END IF;
    IF strsortorder_in = 'DESC' THEN
    intSortDirection_in := 0;
    ELSE
    intSortDirection_in := 1;
    END IF;
    -- run the report query
    XL_SPG_GetPagingSql(strColumnList,
    strFromClause,
    strWhereClause,
    strOrderByClause,
    intSortDirection_in,
    intStartRow_in,
    intPageSize_in,
    select_stmt
    OPEN csrresultset_inout FOR select_stmt;
    ELSIF intdocount_in = 2 THEN
    OPEN csrresultset_inout FOR select dummy from dual;
    END IF;
    In the report XML Metadata I have added a line for the USR_STATUS column(change in bold):
    <Report layout="Tabular">
    <StoredProcedure>
    <InputParameters>
    <InputParameter name="v_resource_name" parameterType="varchar2" order="1" fieldType="LookupField" fieldLabel="report.ResourceAccessList.label.resourceName" required="true">
         <ValidValues lookupCode="Lookup.Reports.Objects"/>
    </InputParameter>
    </InputParameters>
    </StoredProcedure>
    <ReturnColumns>
    <ReturnColumn name="SYSTEM" label="customer.report.system" display="true" position="SectionHeader" primarySort="true" filterColumn="false" />
    <ReturnColumn name="EMP_ID" label="customer.report.emp_id" display="true" position="SectionHeader" primarySort="false" filterColumn="false" />
    <ReturnColumn name="EMP_NAME" label="customer.report.emp_name" display="true" position="SectionHeader" primarySort="false" filterColumn="false" />
    *<ReturnColumn name="USR_STATUS" label="global.label.Status" display="true" position="SectionHeader" primarySort="false" filterColumn="false" />*
    <ReturnColumn name="ATTRIBUTE" label="customer.report.attribute" display="true" position="SectionHeader" primarySort="false" filterColumn="false" />
    <ReturnColumn name="ATTRVALUE" label="customer.report.value" display="true" position="SectionHeader" primarySort="false" filterColumn="false" />
    </ReturnColumns>
    </Report>
    Anything that I have missed to do? We have restarted the app server, but it still doesn't work.
    Regards,
    Thomas

    Arghle.....
    I found the reason for the blank result page with this...
    apparently we are not allowed to name a resulting column in a stored procedure to USR_STATUS, silent fail :/
    When I renamed this to EMP_STATUS it all works as intended...
    Duh!
    I wonder in where it says not to do this...

  • Change codepage in OIM reports saved in CSV format (e.g. UTF8 - Win1251)

    Hello guys.
    I have OIM V.9.1 installed on WebLogic. For some reason my customer would like to have OIM reports saved in CSV format encoded with codepage differ from default UTF8 (actually desired codepage is Windows 1251 but it is doesn't matter). I think that there should be a way to change default codepage for OIM reports via OIM's settings.
    There is no any information on it in the documentation.
    Does anybody already met this problem? Any help would be highly appreciated.
    Regards,
    Ivan

    Hello guys.
    I have OIM V.9.1 installed on WebLogic. For some reason my customer would like to have OIM reports saved in CSV format encoded with codepage differ from default UTF8 (actually desired codepage is Windows 1251 but it is doesn't matter). I think that there should be a way to change default codepage for OIM reports via OIM's settings.
    There is no any information on it in the documentation.
    Does anybody already met this problem? Any help would be highly appreciated.
    Regards,
    Ivan

  • OIM Report is not printer friendly?

    Guy,
    I tried to print OIM report using printer but the output always include the left menu. It really looks weird.
    So I just wanna ask you guys how to print OIM report to printer with nice looking (like no left menu etc.)?
    Best Regards,
    Satit Auputtinunin

    Transform it via XSL or whatever to a printer-friendly format.

  • OIM Reports for Organisation Level

    Hi
    We have configured out of the box OIM reports, and we have multiple organisations with org level admins to manger their organization.
    We observe that reports allowed to these admins can see all users in OIM (with users of other organisation). Wanted to know how do we configure reports such that only org level reports are generated (I.e. Org level admins can only see reports under his portfolio/organization)
    This is urgent requirement; appreciate if any one can help. Thanks in advance.

    The reports use PL/SQL code so they would not leverage the standard API. It is very possible that implementing organization filtering simply was missed.
    The easiest way to solve this is to simply create custom reports. Not very hard once you know have to do it but requires a little bit of initial learning effort.
    Do you have any resources that have created custom reports or at least someone that knows how to code PL/SQL?
    Best regards
    /Martin

  • BI Publisher 11g 11.1.1.6.0 and OIM Reports Not Showing Up

    After upgrading to OIM BP04, I following the readme to install BI Publishing, but used the 11.1.1.6.0 version.
    After creating: C:\Oracle\Middleware\Oracle_BIP\user_projects\domains\bifoundation_domain\config\bipublisher\repository\Reports\Oracle Identity Manager
    I copied C:\Oracle\Middleware\Oracle_BIP\user_projects\domains\bifoundation_domain\config\bipublisher\repository\Reports\Oracle Identity Manager\OIM_11gR1_BIP11gReports.zip and uncompressed it here..
    Then I restarted everything except for the database.
    When I logon to the BIP console, go to Catalog then Shared Folders, there is no 'Oracle Identity Manager' folder...only the original Components and Sample folders.
    What's up with that?

    The answer is to open up the weblogic security schema for BIP and add a user account with the same name used to access OIM, then add the BI_Authors role. Save. Restart BIP. This got me the Resource Reports.
    The DB Roles and Privs reports still don't work OOTB because the jobs don't update the UD_DB_ORA_P and _R tables. Still working on how to get that down. What's that...you know how...please do tell. Thanks :)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

  • OIM Reports for BIP Role Membership

    The OIM BP04 Reports for BIP, the Role Membership report description states:
    "This report will display membership details of all the roles. The report will not show indirect memberships. Security model is not implemented in this report."
    Looks like the data model deliberately excluded indirect roles (or child tabled roles) from the Lookup.DBUM.Oracle.Roles (same for the Privileges Reports).
    Can anyone guide me through editing the Role Membership data model to INCLUDE the roles from the lookup table?
    I believe the Lookup.DBUM.Oracle.Roles have to get associated to the users recon'd from the DBUM Trusted Recon from the DBA_Users table first.
    Thanks for looking.

    The BP04 OIM roles reports targets OIM roles, not oracle or ad roles.
    To achieve those views, custom BIP reports that query the respective OIM tables where the AD and Oracle data exist are required.
    Thanks for looking.

  • Field label not appearing in OIM Report Page

    Hi,
    Though this sounds like a silly problem, but I am not able to figure out what could be the problem.
    I have created a new report in OIM and it is working perfectly fine as per the stored procedure. The only problem is that one of the label name is not appearing correctly in the report page display. It consists of the following fields:
    1. First Name
    2. Last Name
    3. User iD
    4. Custom field of the target application resource -say- abc.
    In the xlWebAdmin.properties file, I added a new property for the custom field -
    report.CustomReport.label.CustomField=abc
    The same value has been written in the XML metadata of the report.
    However, in the report page in OIM the label appears as - ???en_US.report.CustomReport.label.CustomField???
    Please advice.
    Regards.

    Actually, we are getting a few errors while running the script and hence I was looking for any alternate, if possible.
    java.io.IOException: java.io.IOException: /app/oracle/product/APP/10.1.3/j2ee/home/jsp/bin/ojspc: not found
    at java.lang.UNIXProcess.<init>(UNIXProcess.java:148)
    at java.lang.ProcessImpl.start(ProcessImpl.java:65)
    at java.lang.ProcessBuilder.start(ProcessBuilder.java:451)
    at java.lang.Runtime.exec(Runtime.java:591)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    It is unable to locate "ojspc" path. I am not sure as to where this path is referenced. I have to change it there, so that it refers to thecorrect one.
    Regards.

  • Customise OOTB OIM Reports.

    Hi,
    In OIM under operational reports out of box report namely Resource Access List , in results of report we have one coloumn say "Provisioning Date", we want to change this coloumn name value to "Account Created Date".
    Please tell me how can this be achieved.
    Thanks

    From what was suggested above, the REP table contains the CLOB data for the XML. In the XML file, you'll see labels in the output section. These are defined in the xlWebAdmin_en_US.properties file (if you are english language user). The labels will match up into this file. You can create a new label, and update the xml. Then restart your app server so it reloads the properties file. Then your label will be updated from the web side.
    -Kevin

  • Error in BI publisher report for OIM

    Hi all!
    Can u help me?
    I know that this error is quite common, but I`ve tried out all the soultions and still can`t get the result.
    I`ve installed BI publisher and attached OIM reports there. All the reports work properly except those, which have date properties. For example, Account Activity in Resource. All of them return ora-08143 error ("not a valid month").
    Let me explain situation more clear.
    There are two fields using date in the report creation menu.
    Date Range From:
    Date Range To;
    They automatically get value like "12/06/2011 05:05:05" using their default values ({$SYSDATE()$}).
    But if I use these values, I get an error.
    I`ve found two ways of solving a problem: 1.) Changing the date to something like "12/Jan/2011" manually (note, that by default month stands first, and to solve the problem I should write it second and NOT in digits). 2.) Changing the date mask in report properties to dd/MMM/yyyy.
    But it`s not the best way to solve the problem. In this case I should change these properties everythere. Or user should (and this is bad :) ). I`m sure, that these reports should work without such modifications, so, error borns on my side.
    What I`ve done:
    1.) I tried to change nls_date_format, nls_language, nls_territory, timestamp_format in database session to different formats.
    2.) I`ve tried to manage all the changes that I`ve told about above.
    3.) I`ve tried to change UI language and report locales (if it`s important, I use russian language and russian report locale). xlf files are all ok.
    What shall I do to fix this error?
    My db is: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
    My BI publisher is: 10.1.3.4 (may be everything is bad because of version, but it doesn`t seem to be so, because every report except date reports work nice).
    Thank u very muck and looking forward for hearing from u.

    Dewan.Rajiv wrote:
    I don know what issue you are facing due to language.
    Have you tried with changing the query of the report ?Yes, I have.
    By the way, I`ve discovered, that the error appears in line:
    AND myvariablewithdate BETWEEN :p_date_DateFromRange AND :p_date_DateToRange
    If I comment such a lines in the query, everthing works OK.
    But as you understand, that`s not the point :(
    Even if i put to data forms information from sql database (just copy timestamp data), the error continues to appear.
    If i make something like that in sqldeveloper, everything is ok:
    select upa_resource.upa_res_eff_from_date from upa_resource where upa_res_eff_from_date between (select sysdate - 30 from dual) and (select sysdate from dual)
    this statement returns right values.
    So, the problem is somethere in such a chain:
    - select sysdate from dual (it`s ok)
    - put sysdate to form (does it make any type of convert?)
    - take variable (former sysdate) from form.

  • Publish report in OIM 9.1.0.1

    Hi Gurus,
    I need your help, please.
    How can i do the better way to publish my Audit Reports (created in Crystal reports - Developer Edition version 8.5) in Oracle Identity Manager 9.1.0.1862.10 ?
    The customer enviroment is:
    1-Red Hat Enterprise Linux AS release 4 (Nahant Update 6)
    2-Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit
    3-Oracle 10g Application Server 10.1.3.4.0
    4-Oracle Identity Manager 9.1.0.1862.10 - Build 1862.10
    Best regards,
    Thiago Leôncio

    I have never tried to solve that specific problem (in the projects where we have used CP to create reports we had a CP server available) but I don't think there is any way to run the CR reports without a VR server.
    On the other hand it shouldn't be too hard to convert the CR reports to OIM reports. The stored procedures should be very similar and in most cases figuring out the structure of the stored procedures is the hard part of creating the reports. You will probably need to spend a substantial amount of time on the conversion but it shouldn't be impossible.
    Best regards
    /Martin

  • OIM 11g can't get default reports working

    Hello,
    OIM 11g and BI publisher 11g here. They are installed on different machines, so they do not share anything at all.
    I want to make the standard OIM reports work into BI Publisher, so i installed BI publisher (alone), created user xelsysadm (given role XMLP_ADMIN ) and copied the reports to the Publisher server.
    first question: where am i required to put them? the path the developers guide says does not exist, and if i create it, BI Publisher simply ignores it. So i put the whole stuff in user_projects/domains/bifoundation_domain/config/bipublisher/repository/Reports/OIMreports/ which appears to be the same folder where BI sample reports are.
    Now BI Publisher recognizes the folder structure, but the folders are empty and don't show the reports in the Publisher Catalog.
    second question: i am having a really hard time understanding which logfile should i look at to track BI Publisher application errors. I guess it's user_projects/domains/bifoundation_domain/servers/bi_server1/logs/bipublisher/bipublisher.log but i would like having it confirmed
    I am trying to follow the OIM 11g developers guide and the BI guides, but it is not really helpful, any advice would be really appreciated
    thx in advance
    Alex

    solved, look here
    Re: OIM 11g and BI Publisher Reports

  • OIM seeded reports are unable to view in BI publishser 11.1.1.6

    OS: AIX 6.1
    DB: Oracle 11gR2(11.2.0.3)
    OIM: 11gR2
    BIpublisher: 11g
    I have installed BI publisher as Enterprise install which means it create it own weblogic console and em, BI publisher as managed server. Copied OIM seeded reports from OIM reports directory to BI publisher directory.
    I can see all the reports in BI publisher , but unabel view the reports , here is the error
    The report cannot be rendered because of an error, please contact the administrator.
    Error Detail
    oracle.xdo.XDOException: java.lang.NullPointerException
    Job processor caused exception
    [INSTANCE_ID=jd1su240.ahx.doj.gov.1368045497926] [INSTANCE_JOB_ID=1054]::::ERROR_GETTING_REPORT_DATA::[INSTANCE_ID=hostnamexxxxxxxx.1368045497926] IOException:[INSTANCE_JOB_ID=1054] java.lang.NullPointerException
    oracle.xdo.XDOException: java.lang.NullPointerException
    at oracle.xdo.servlet.dataengine.DataProcessor.processData(DataProcessor.java:321)
    at oracle.xdo.servlet.dataengine.DataProcessor.render(DataProcessor.java:671)
    at oracle.xdo.servlet.ReportModelCo
    2013-05-11T20:35:08.762-04:00] [bi_server1] [WARNING] [] [oracle.xdo] [tid: 3] [userId: <anonymous>] [ecid: 7333d76e25b23031:3847a9b0:13e95478586:-8000-000000000000122f,0] [APP: bipublisher#11.1.1] javax.servlet.ServletException: oracle.xdo.XDOException: java.lang.NullPointerException[[
    at oracle.xdo.servlet.XDOServlet.writeReport(XDOServlet.java:472)
    at oracle.xdo.servlet.XDOServlet.doGet(XDOServlet.java:280)
    at oracle.xdo.servlet.XDOServlet.doPost(XDOServlet.java:313)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.xdo.servlet.metadata.track.MostRecentFilter.doFilter(MostRecentFilter.java:64)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.xdo.servlet.security.SecurityFilter.doFilter(SecurityFilter.java:124)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.xdo.servlet.init.InitCheckingFilter.doFilter(InitCheckingFilter.java:63)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
    at java.security.AccessController.doPrivileged(AccessController.java:284)
    at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
    at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
    at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java

    Did you create "OIM JDBC" data source to run the standard reports. Go to BI Publisher administration and create new JDBC data source called "OIM JDBC" and then try to run the reports.
    Regards
    Log

  • OIM with BI reports, need help

    Hi, I am new in OIM!
    I want to use OIM reports for BIP. In OIM you can determine which default reports a particular user can access.
    How can I do it in BIP?
    As I have understand form documentation, in BIP you can determine user access to subset of folders, but not to a particular report.
    Thanks in advance.

    and one frame is dummy and other frame has big X
    line on it with conditions. Is this a right way to
    create check box! Please help thanks!Instead of creating a frame for X, you can create Ractangle and place X in it. Rest is fine.

Maybe you are looking for