Don't know about usage of NWDS, but I think the data model makes reporting very hard with any normal reporting tool that just takes bunch of SQL to execute.
While it is easy to follow the examples of how to report single user or single role and it's current information everything below that is bit tedious and would really require scripting or SQL procedure.
You would typically try to satisfy auditor's or "sox-like" requriements like
a) which users had access to this and this given resource as this given day or during this given period
b) which user changed what information and when
I've recently created set of batch reports, job run at specific intervals that retrieves data from IdM storage, populate set of temp tables that have normalized data structure (like tables user/role/membership) instead of typical attrname/searchvalue/mskey-pairs. Reporting is built on top of those normalized tables.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.