Access Review Report/ App Insight

Overview

In this article, you can learn what data is available in the App Insights from the system generated access review report. You can read more details explaining each report category. You also have the option to download the report from different data category pages. You can create a custom query to access some of the data more efficiently. There is a Rule Builder to customize your results. Alternatively, you can write Odata to run a query by choosing Advanced Odata.

What Is the Access Review Report

Access review reports are an essential component of Identity and Access Management (IAM) software. In Apporetum, we offer access review report of Entra ID (formerly Azure Active Directory) directory. The system will generate the report and you can find the generation date at the top of the page.

The purpose of these reports is to ensure that users have access only to the resources they need to perform their job responsibilities and that access is granted in a timely and appropriate manner. The access review report is a critical tool for organizations to maintain the security and integrity of their systems and data, ensure compliance with regulations, and minimize the risk of data breaches and other security incidents.

info

If you would like some other data categories that we don't offer at this stage, we recommend you contact us to discuss further.

Navigate to Access Review Report

1. Click Apps main menu option
2. Search/find then click the app
3. Select Insights tab on the app page to view all the available data

4. Click View under each category to access more detailed user account information

info

• Alternative way

if you choose Info tab, you can choose View Report to access those insight data too.

Available Data

• All Accounts: standard users have a role in this app on Apporetum, excluding app managers or console users

• Dormant Accounts: user accounts haven't been logged in in your organizations in the last 90 days but remain enabled

• External Accounts: accounts are outside your organization but meet the eligibility of this app setting to be assigned to a role in Apporetum

• Orphaned Accounts: accounts are not associated with an identity in the HR system or can't link back to the HR system either

• Incomplete Information: accounts that are created and went through all the HR processes but haven't been logged in the directory yet

• External Pending Accounts: accounts are guest accounts, which are outside this organization that are pending acceptance of their invitation

• Accounts by Password Last Reset: accounts that reset their password

• Memberships by Role: the number of memberships sorted by their role in this Apporetum app

• Accounts SignIn Activity: accounts by last signIn date/period

• Account Status: accounts that are either enabled or disabled.

note

Disabled accounts mean those accounts are disabled in the systems and can't be logged in. However, those accounts are still in the directory and haven't been removed from it.

Custom Queries

1. Go to Access review report page
2. Click Try Custom Query

3. Choose the rule builder create a query

tip

Rule Builder would give you enough options to run queries. However, if you prefer more customized and advanced queries and are comfortable with Odata, Advanced Odata would be a more powerful tool for you to use. If you need help with Advanced Odata, please contact Apporetum tech support.

Using Rule Builder to Set up a Query

1. Click + Rule

2. Choose a property/option

3. Choose which operator to define this rule
4. Choose a value
5. Click Run Query if you just want to create a single rule
6. Click Download to get a report copy that can be saved on your local device
7. Click + Group if you want to set up combined rules

8. Choose from AND, OR operators
9. Repeat the steps of + Rule

tip

• AND will be done prior OR
• A Group will group the rules together and will sort within itself

For example, rule A and Group B or rule C, the result will be ((A and (B)) or C)