Custom report for department changes in the last 30 days, with old and new manager and department values

SailPoint Human Fabric (SHF) SHF Discussion and Questions
,
1

Hi everyone,

We need a report of all department changes in the last 30 days.

Required columns:

  • Employee Number
  • First Name
  • Last Name
  • Email
  • Old Manager
  • New Manager
  • Old Department
  • New Department

This is one example of the kind of report we need. We have several similar custom reports to build (attribute change tracking with before and after values), so a reusable approach would help.

2

we have created a PowerShell script to achieve this requirement

3

Hi @puppamReddy

Identity attribute changes (old and new values) aren’t directly exposed in Search on accounts, activities or events, so a custom approach is needed. We discussed a similar case here: ISC - how to generate report to capture changes in manager.

For a reusable approach, here are two suggestions:

Option 1: Script combining Search and the Historical Identity Events API (works retroactively)

  1. Get the identities modified in the last 30 days (for example with a Search query on the modified date).
  2. For each identity, call get-historical-identity-events-v-1 | SailPoint Developer Community and filter on the attribute change event type. Each event lists the changed attributes with their old and new values.
  3. Keep only the department and manager changes and build your CSV with Employee Number, First Name, Last Name, Email, Old/New Manager and Old/New Department.

Option 2: Workflow (going forward)

Create a workflow with only the Identity Attributes Changed trigger, filtered on manager and department, and no additional steps. Then use the workflow execution history to generate your report, since each execution records the old and new values.

Hope this helps!