- For audit purposes, a comprehensive access history report is needed. It should contain the identity name and ID as well as entitlement name, grant date, remove date, grant method, access profile or role name and a link to all events tied to the granting or removing of the access. See attached file for detailed vision.
2. Auditors and Admins should be able to search for any identity (or group of identities) by any identity attribute. There should also be a filtering option for access profile or role name (or partial name: Example: all access profiles containing the word “Focus”).
SailPoint merged some comments in from another idea named “Ability to export Access History report for all event timelines of user from UI.”
Currently there is no option to download a CSV or PDF export for Access History report for all event timelines of user from UI. Ability to export these data will allow reports to be shared with requestor or auditors under sampling. Steps to replicate: Identities > Access History > Search Identity
There is no way to export event timelines with such detailed information. However the events query using search provides some meaningful data.
| What problem does your idea solve for you? |
|---|
There is currently no way to get a single view (on one page) of all access for one identity or a list of details for all identities with a specified (partial or complete) access profile, role or entitlement. This would help immensely with Audit requests.
How do you currently address the problem (e.g. what’s your current work around)
A lot of different searches and patching information from different searches together. It’s VERY time consuming.
ComprehensiveAccessHistoryReport.xlsx (10.3 KB)