View a list and description of system reports

Permissions Management has various types of system reports that capture specific sets of data. These reports allow management, auditors, and administrators to:

• Make timely decisions.
• Analyze trends and system/user performance.
• Identify trends in data and high risk areas so that management can address issues more quickly and improve their efficiency.

This article provides you with a list and description of the system reports available in Permissions Management. Depending on the report, you can download it in comma-separated values (CSV) format, portable document format (PDF), or Microsoft Excel Open XML Spreadsheet (XLSX) format.

Download a system report

1. In the Permissions Management home page, select the Reports tab, and then select the Systems Reports subtab.

2. In the Report Name column, find the report you want, and then select the down arrow to the right of the report name to download the report.

   Or, from the ellipses (...) menu, select Download.

   The following message displays: Successfully Started To Generate On Demand Report.

Summary of available system reports

Report name	Type of the report	File format	Description	Availability	Collated report?
Access Key Entitlements and Usage Report	Summary Detailed	CSV	This report displays: - Access key age, last rotation date, and last usage date availability in the summary report. Use this report to decide when to rotate access keys. - Granted task and Permissions creep index (PCI) score. This report provides supporting information when you want to take the action on the keys.	AWS Azure GCP	Yes
All Permissions for Identity	Detailed	CSV	This report lists all the assigned permissions for the selected identities.	Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP)	N/A
Group Entitlements and Usage	Summary	CSV	This report tracks all group level entitlements and the permission assignment, PCI. The number of members is also listed as part of this report.	AWS, Azure, or GCP	Yes
Identity Permissions	Summary	CSV	This report tracks any, or specific, task usage per User, Group, Role, or App.	AWS, Azure, or GCP	No
NIST 800-53	Detailed Summary Dashboard	CSV PDF	Dashboard: This report helps track the overall progress of the NIST 800-53 benchmark. It lists the percentage passing, overall pass or fail of test control along with the breakup of L1/L2 per Auth system. Summary: For each authorized system, this report lists the test control pass or fail per authorized system and the number of resources evaluated for each test control. Detailed: This report helps auditors and administrators to track the resource level pass or fail per test control.	AWS, Azure, or GCP	Yes
PCI DSS	Detailed Summary Dashboard	CSV	Dashboard: This report helps track the overall progress of the PCI-DSS benchmark. It lists the percentage passing, overall pass or fail of test control along with the breakup of L1/L2 per Auth system. Summary: For each authorized system, this report lists the test control pass or fail per authorized system and the number of resources evaluated for each test control. Detailed: This report helps auditors and administrators to track the resource level pass or fail per test control.	AWS, Azure, or GCP	Yes
PCI History	Summary	CSV	This report helps track Monthly PCI History for each authorized system. It can be used to plot the trend of the PCI.	AWS, Azure, or GCP	Yes
Permissions Analytics Report (PAR)	Summary	PDF	This report helps monitor the Identity Privilege related activity across the authorized systems. It captures any Identity permission change. This report has the following main sections: User Summary, Group Summary, Role Summary & Delete Task Summary. The User Summary lists the current granted permissions along with high-risk permissions and resources accessed in 1-day, 7-day, or 30-days durations. There are subsections for newly added or deleted users, users with PCI change, high-risk active/inactive users. The Group Summary lists the administrator level groups with the current granted permissions along with high-risk permissions and resources accessed in 1-day, 7-day, or 30-day durations. There are subsections for newly added or deleted groups, groups with PCI change, High-risk active/inactive groups. The Role Summary and the Group Summary list similar details. The Delete Task summary section lists the number of times the Delete Task has been executed in the given period.	AWS, Azure, or GCP	No
Permissions Analytics Report (PAR)	Detailed	CSV	This report lists the different key findings in the selected authorized systems. The key findings include Super identities, Inactive identities, Over-provisioned active identities, Storage bucket hygiene, Access key age (AWS), and so on. This report helps administrators to visualize the findings across the organization and make decisions.	AWS, Azure, or GCP	Yes
Role/Policy Details	Summary	CSV	This report captures Assigned/Unassigned and Custom/system policy with used/unused condition for specific or all AWS accounts. Similar data can be captured for Azure and GCP for assigned and unassigned roles.	AWS, Azure, or GCP	No
User Entitlements and Usage	Detailed Summary	CSV	This report provides a summary and details of User entitlements and usage. Data displayed on Usage Analytics screen is downloaded as part of the Summary report. Detailed permissions usage per User is listed in the Detailed report.	AWS, Azure, or GCP	Yes

Next steps

• For information on how to view system reports in the Reports dashboard, see View system reports in the Reports dashboard.
• For information about how to create, view, and share a system report, see Create, view, and share a custom report.
• For information about how to create and view a custom report, see Generate and view a custom report.
• For information about how to create and view the Permissions analytics report, see Generate and download the Permissions analytics report.