By using the Identity Manager Association Statistics feature, you can find the association details of the identities managed by Identity Manager. Identity Manager uses the association statistics to obtain the association count for the Identity Manager drivers.
To obtain active, inactive, and system managed objects for a driver, run the association statistics job. You can schedule the association statistics job on a daily, weekly, monthly, or yearly basis. By default, the job is scheduled to run every week. To modify the configuration setting for this job, use Identity Console. For more information, see Modifying the Association Statistics Job Configuration
in the NetIQ Identity Manager Jobs Guide.
The Association Statistics dashboard displays the association details. Alternatively, you can view the details by exporting the associations to a file.
NOTE:
The association count for the drivers is per server. If an object is associated with more than one driver, the association count is calculated uniquely for each driver.
If you have more than 200,000 associations, NetIQ recommends you to set the maximum heap size for the driverset to 2 GB or more. For information about setting the heap size, see Using Identity Console to Configure the Java Environment Parameters.
To view the association statistics:
In Identity Console, select IDM Administration > Click on the Action menu of the appropriate Driver Set > Driver Set Properties > Inspector and Statistics > Association Statistics.
Select the server for which you want to run the association statistics.
The association count displays the previously computed result.
Identity Console displays the association count for active, inactive, and system managed objects for all the drivers associated with the driverset.
Identity Console considers groups and organization units as system managed objects. Identity Console considers an object inactive, if the Login Disabled attribute in the object is set to true and the object has not been modified within the last 120 days. All the remaining objects are considered as active managed objects.
Click Recompute icon to obtain the updated results.
When a driver is disabled on the server, Identity Console does not display the driver in the dashboard.
Click Export Statistics icon to export the system details and association count details for the drivers associated with the server.
To export the objects associated with a specific driver, click the Export Statistics icon next to the required objects and save the file.
NOTE:In case of Fan-Out drivers, only unique objects are exported. If an object is associated with multiple instances of a Fan-Out driver, Identity Console displays all the association counts in the dashboard. However, if you choose to export the objects in a file, Identity Console exports only the unique objects.
Click Actions and select the required option to organize the association count dashboard.