AIC Dashboard for Active Certifications

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Having a difficult time with building an AIC dashboard related to Active and/or Completed Certifications. It’s very finicky. The purpose for this dashboard is to bring awareness to Active access certifications and helps facilitate a conversation with the certifier. Additionally, for Completed certifications we require knowledge for ones that have not completed the provisioning activity. For example, identifying the ones that have an open revocation on them. Lastly, we certify the following types: entitlements, access profiles and roles.

I built the sheet with the Date Filter option to select the certification creation date window (from: selected start date to: selected end date). Additionally, I have a pie chart with the dimension as certification_campaign_status with the measure counting the number of certification_campaign_id. For the output, I pulled the minimal amount of data (via a table) and have experienced if I ask for too much it gives me an out of memory issue.

Whether for Active or Completed, I would like to see the decision made (like made available in the SailPoint “StatusReports”) with what I believe should have any of the following: Open or Complete. Q1: Where can I get this data from? Q2: How can I distinguish between different types of elements in the campaign like role, entitlement or access profile? I tried utilizing certification_campaign_type but it is not giving me the data as expected. Lastly, for those different types of elements in the campaign, I included the reviewed_type but it is also showing the access profile reviewed and role reviewed in the same row. Q3: How can I list these out separately in the output?

I’m a novice at this, so I’m sure I’m doing something wrong. So, any advice or guidance is appreciated.

2

HI Jerome,

For 1.

Check Status.

  1. get-identity-decision-summary | SailPoint Developer Community

There are a few reports in certification summary which may be useful. Sorry, did not personally use then but looks promising based on the API definition

Hope this helps.

Regards
Arjun

3

Hi @jratli9977,

I started to work on something similar but I have some difficulties.

As a first KPI I created a chart pie to get the result of Access \ Revoked access using the Certification_Item table with Approved data but I’m not sure this is the correct information.

I aimed to build a dashboard in AIC to monitor our certification campaigns and display revelant KPIs such as On-Going \ Completed, Access Revoked or Approved, with the capability to filter on certification campaign name.

It seems to be complicated to build this in AIC, if you have some new elements to share since your last post I am interested.

Regards

4

Thanks Arjun. We are leveraging a few of reports today, which does help us but I’m looking to go away from that and using AIC.

5

Thanks Bastien. I haven’t uncovered anything net new from last post. I’ve tried various inputs options but haven’t gotten any further.

Any AIC experts out there willing to help?