I was wondering if there was a better way to pull access reports that I will be needing on a quarterly basis? Currently, I can get all of the information I need but it's taking quite a while to gather it. Here are the three things I am looking for:
1. A list of all users and the number of times they have logged into CT and ITP.
-I can pulled the list of number of times accessed each application (in reports, Authentication Domain Log) but it only lists the users that have accessed the environment, not those who haven't (if someone hasn't logged in for 3 months, we're evaluating if they still need access). To get the list of those who haven't accessed the system, I have to pull a list of all users, the other list that has logins and compare the two to see who hasn't logged in.
2. A list of users with access to CT.
-When I look at the list of users in Environment Access, I only see roles and not the application. Some roles such as "view only" may be in both CT and ITP. I've been pulling all users, pulling the list of those with access to ITP and comparing the two to get the list of users with access just to CT.
3. A list of users with access to ITP, what type of access and what departments.
-This I seem to be able to pull the easiest in ITP, reference data, Cost Object Permissions. I export this report and pivot it to see access by departments (or names).
I'm ok with the process for my third report - it's just the other two reports I feel like I have to go through quite the process to get the information we need for simple access control. The process document I'm writing is pretty lengthy.