Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Compare the Access of 2 Users through Analytics

rama_roy
New Contributor III
New Contributor III

Hi Team,

we are having a requirement to compare the Access (Accounts and Entitlements) of 2 users via runtime analytics.

Do you have any sample query for this or link?

Regards,

Rama

12 REPLIES 12

Raghu
All-Star
All-Star

@rama_roy  please use below users and accounts access ent's

select
u.username,
u.firstname,
u.lastname,
u.statuskey as status_key,
accounts.name as account_name,
endpoints.ENDPOINTNAME,
accounts.STATUS as account_status,
et.displayname as entitlement_type,
ev.entitlement_value,
ev.displayname,
ev.status as entitlement_status,
m.username as manager_username,
m.displayname as manager_name
from
users u
left join user_accounts on user_accounts.userkey = u.userkey
left join accounts on accounts.accountkey = user_accounts.ACCOUNTKEY
left join endpoints on endpoints.ENDPOINTKEY = accounts.ENDPOINTKEY
left join account_entitlements1 ae on ae.accountkey = accounts.ACCOUNTKEY
left join entitlement_values ev on ev.entitlement_valuekey = ae.entitlement_valuekey
left join entitlement_types et on et.entitlementtypekey = ev.entitlementtypekey
left join users m on m.userkey = u.manager
where
u.statuskey = 1
and accounts.status != 'SUSPENDED FROM IMPORT SERVICE' and u.username in (xx,xx)

https://forums.saviynt.com/t5/identity-governance/reporting-about-entitlement-and-account-list/m-p/4...

 

You run report and history u can check and click on compare it will gett results.

 

Raghu_0-1720777360112.png

 

 

 


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

rama_roy
New Contributor III
New Contributor III

Thanks for the update Raghu. But what I am looking for if I can create which will allow me to provide 2 users name as Dynamic Attributes? can I use username=${username}

rama_roy
New Contributor III
New Contributor III

I am trying the below query which is giving me correct result when I am giving the username in the query but in runtime it is not giving me any data.

select u.username,
a.name as AccountName,
ev.entitlement_value as EntitlementName,
s.systemname as SecuritySystemName,
e.endpointname
from users u
left join user_Accounts ua
on u.userkey=ua.userkey
left join accounts a
on ua.accountkey = a.accountkey
left join account_entitlements1 ae
on a.accountkey=ae.accountkey
left join entitlement_values ev
on ae.entitlement_valuekey=ev.entitlement_valuekey
left join endpoints e
on e.endpointkey=a.endpointkey
left join securitysystems s on
e.securitysystemkey=s.systemkey
where a.status in (1,'Manually Provisioned','Active')
and u.username=${username1} and u.username=${username2}

Regards,

Rama

Manu269
All-Star
All-Star

Create 1 analytics (SQL Based) and add the username

Run 1st with user 1

Run 2 with user 2

and then use compare 

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

rama_roy
New Contributor III
New Contributor III

How can I give 2 username is a single analytics in runtime?

select u.username,
a.name as AccountName,
ev.entitlement_value as EntitlementName,
s.systemname as SecuritySystemName,
e.endpointname
from users u
left join user_Accounts ua
on u.userkey=ua.userkey
left join accounts a
on ua.accountkey = a.accountkey
left join account_entitlements1 ae
on a.accountkey=ae.accountkey
left join entitlement_values ev
on ae.entitlement_valuekey=ev.entitlement_valuekey
left join endpoints e
on e.endpointkey=a.endpointkey
left join securitysystems s on
e.securitysystemkey=s.systemkey
where a.status in (1,'Manually Provisioned','Active')
and u.username in (${username})


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi Rushikesh,

Thanks. I also did the same and ran it by selecting attribute type as string. Can you please tell me how can I put 2 users name in input? which type to select?

rama_roy_0-1720796723855.png

Regards,

Rama

String and values like rushi1,rushi2


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

I selected string and giving user1 then it is working as expected. but when giving user1,user2 showing no value.

It is working when selecting multiple select from list worked.

Ok go with it


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Will it be a runtime analytics or using sql query? Right now I created it using sql query.

Whenever I am editing the attributes, update button is showing greyed out. I need to change some value or update something then only it's enabling for update. Is it a known issue or environment specific problem? 

Regards,

Rama

add dot in description. known issue


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.