Detailed access request report

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello all,

I have a requirement to fetch an access report for a particular application. Basic details should be included in the report like:

  • Requested access item name
  • Requester
  • Recipient
  • Approvers
  • Requested Date
  • Approval Status
  • Provisioning Status

I am unable to get all these information in a single report using a Search query. Has anyone faced such situation or anyone has came up with some solution for this kind of situation?

Thanks

2

Hi @zeel_sinojia , Did you get any work around for this single access report for a particular application, with listed basic details ? as we have a similar requirement and looking for the help on this.
Thanks

3

check {{baseUrl}}/access-request-status API
or

but i think both will not give option to filter based on the source .

1 Like
4

No Rohit, unfortunately we didn’t find proper solution to this. We had to generate multiple reports and then do manual updates to those to achieve the final expected report.

5

This is good place to start especially when you can access the APIs for report generation. I was asking this question more from a report admin perspective. They don’t have access to APIs but still want to generate some reports for audit and business.

6

If I may suggest, creating a PowerBI report using available access request APIs could help. I did one similar for identities, the data can be easily refreshed when needed.

7

The lack of such a [seemingly] rudimentary report OOTB somewhat begs the question, how mature is the product? Because one would argue that “We can do this via custom stitching so and so APIs” as a solution is not a mature, hit the ground running solution. For one, graphical interface / ease of reaching such a report points to usability of the solution.

8

For detailed access request reports:

The out-of-the-box reporting is limited, but you can combine data from multiple APIs to get what you need.

Use the access-request-status API for basic request information (IDs, requestors, status). Then call the AccessRequests API for each request ID to get details about what was requested, approvers, and comments.

Create a scheduled workflow that:

  • Calls these APIs with appropriate filters
  • Combines the data
  • Outputs to CSV or your reporting tool

For the workflow, use the Transform operators in ISC workflows where you can write custom JavaScript to manipulate the data between steps. Handle pagination properly for large datasets.

For real-time access, consider building a custom application using SailPoint’s Developer platform APIs and SDKs to display the report data in a user-friendly interface.

Note that historical data beyond a certain point may not be available through APIs. For longer history, store the data in an external database as it’s generated.

9

Hi Hyung,

Do you have an example of this workflow?