3.2 Manage Data in the Table

You can add or remove columns in the table, as well as search for and sort data in a column. When you change the table, such as searching for a specific user, the visualization updates to match the table.

Some values must be included in the table to reduce the potential for loss of data in the visualization. For example, Identity Intelligence groups process instances by their starting event, which is represented by the value /Authorization/*/Request/Create in the Category Behavior column. If you filter Category Behavior by the term approval, you remove values that include the initial request action. Thus, Identity Intelligence cannot display process instances. In a similar way, if you filter Category Behavior by the term create, Identity Intelligence sees only the starting events for the process instances. Thus, the visualization will show those processes as incomplete because you filtered out the ending events.

3.2.1 Default Attributes in the Table

By default, the Table includes the following data attributes for most View configurations. Note that some fields might apply only to data received from Identity Governance, such as a review name.

Attribute

Description

Category Behavior

Indicates the type of action that the identity or workflow initiated

For example, a /Authorization/Add/Request/Create value indicates that someone requested a new access right or identity

Category Object

Indicates the type of object central to the action taken in the workflow process

For example:

  • 'Actor/User' indicates that the activity might involve creating, modifying, or deleting an identity

  • 'Host/Application/Workflow' indicates a workflow-related action such as an identity approving a request

Category Outcome

Indicates whether the activity results in one of the following outcomes:

  • Attempt represents actions that do not denote a successful or failed outcome

  • Success represents an approved request

  • Failure represents a request that failed to be approved

Destination Identity Given Name

Represents the given name of the identity affected by the activity

Destination Identity Family Name

Represents the family name of the identity affected by the activity

Destination Username

Represents the username, as supplied by the data source, of the identity affected by the activity

For example, Identity Manager provides the username as a distinguished name (DN)

Also see Source Username and Destination Identity Given Name

Device Custom String 5

Applies only when the value for Device Custom String 5 Label equals correlationid

Serves as the correlation ID that groups all the activities associated with a single workflow process

For example, one process instance might include the initial request action, three approval actions, and the successful closure action of the request

Also see Device Custom String 5 Label in Attributes You Might Add to the Table

Device Receipt Time

Indicates when the activity occurred

File Name

Represents the name, as supplied by the data source, of the access right affected by the activity

For example, Identity Manager provides DNs for the names of access rights

Also see Permission Name

Name

Represents a short description of the activity as provided by the data source

For example, Role Request or Workflow Denied

Permission Name

Represents the name of the access right affected by the activity

Also see File Name

Source Identity Given Name

Represents the given name of the identity that generated the activity

Source Identity Family Name

Represents the family name of the identity that generated the activity

Source Username

Represents the username, as supplied by the data source, of the identity that generated the activity

Also see Destination Username and Source Identity Given Name

3.2.2 Attributes You Might Add to the Table

To aid your investigation or understanding of identity governance activities, you might want to add some of the following attributes to the Table:

Field Name

Description

Destination Account Authority

Represents the driver that provided the data for the account that is associated with the recipient of the activity

Destination Account Name

Represents the name of the account that is associated with the recipient of the activity, as provided by the data source

Destination Account Status

Indicates whether the account that is associated with the recipient of the activity is Active or Inactive

Destination Address

Lists the address of the recipient of the activity

Destination Persona Id

Lists the identification code for the recipient of the activity

For example, some companies assign an alpha-numeric ID to individuals in the organization

Destination Persona Organization

Represents the name of the department or organization to which the recipient of the activity belongs

For example, Human Resources

Destination Persona Title

Provides the organization title of the recipient of the activity

For example, Senior Vice President

Destination Persona Type

Indicates the category of employment or interaction with the organization for the recipient of the activity

For example, full-time or contractor, depending on your organization’s method for identifying an individual’s status

Destination Identity Email

Provides the email address of the recipient of the activity

Destination Identity Location

Represents the location, as defined by the data source, of the recipient of the activity

Destination Identity Middle Name

Represents the middle name, if any, of the recipient of the activity

Destination Identity Phone Home

Lists the home phone number associated with the recipient of the activity

Destination Identity Phone Mobile

Lists the mobile phone number associated with the recipient of the activity

Destination Identity Phone Office

Lists the office phone number associated with the identity that initiated the activity

Device Custom String 5 Label

Represents the description of the value that the data source provides for the Device Custom String 5 attribute

In general, Identity Intelligence considers Device Custom String 5 only when this attribute contains a value of correlationid

Device Product

Indicates the source of the data

For example, Identity Governance

File Type

Indicates whether the activity relates to a Role or Resource

Message

Indicates whether the associated identity Requested or Initiated the activity

Permission Description

Provides a description of the access right based on the user-created description received from Identity Manager or Identity Governance

Source Account Authority

Represents the driver that provided the data for the account that is associated with the recipient of the activity

Source Account Name

Represents the cn of the account that is associated with the recipient of the activity

Source Account Status

Indicates whether the account that is associated with the identity that initiated the activity is Active or Inactive

Source Persona Id

Lists the identification code for the identity that initiated the activity

For example, some companies assign an alpha-numeric ID to individuals in the organization

Source Persona Organization

Represents the name of the department or organization to which the identity that initiated the activity belongs

For example, Human Resources

Source Persona Status

Indicates whether the identity that initiated the activity is Active or Inactive, depending on your organization’s method for identifying an individual’s status

Source Persona Title

Provides the organization title of the identity that initiated the activity

For example, Senior Vice President

Source Persona Type

Indicates the category of employment or interaction with the organization for the identity that initiated the activity

For example, full-time or contractor, depending on your organization’s method for identifying an individual’s status

Source Identity Email

Provides the email address of the identity that initiated the activity

Source Identity Location

Represents the location, as defined by the data source, of the identity that initiated the activity

Source Identity Middle Name

Represents the middle name, if any, of the identity that initiated the activity

Source Identity Phone Home

Lists the home phone number associated with the identity that initiated the activity

Source Identity Phone Mobile

Lists the mobile phone number associated with the identity that initiated the activity

Source Identity Phone Office

Lists the office phone number associated with the identity that initiated the activity