Creating Audit Permissions Report

[makkawi]

This page describes how to create an Audit report based on incorta objects, Permissions(can view, can share, can edit), users who grant permissions, and Users

1-As prerequisite for this report, incorta metadata schema has to be already deployed.

2-Make sure that Incortametadata schema has "ContentLookup" table created and loaded based on this file: ContentLookup.csv which is available in the attachments.

3-Create the following formula column in PERMISSION table to be used in the report:

Name: Object_Name

Label: Object Name

Dimension

case(
    _IncortaMetadata.PERMISSION.CONTENTTYPE = 0, 
    lookup(
        _IncortaMetadata.USER.LOGINNAME, 
        _IncortaMetadata.USER.ID, 
        _IncortaMetadata.PERMISSION.CONTENTID
    ), 
    _IncortaMetadata.PERMISSION.CONTENTTYPE = 1, 
    lookup(
        _IncortaMetadata.GROUP.NAME, 
        _IncortaMetadata.GROUP.ID, 
        _IncortaMetadata.PERMISSION.CONTENTID
    ), 
    _IncortaMetadata.PERMISSION.CONTENTTYPE = 3, 
    lookup(
        _IncortaMetadata.FOLDER.NAME, 
        _IncortaMetadata.FOLDER.ID, 
        _IncortaMetadata.PERMISSION.CONTENTID
    ), 
    _IncortaMetadata.PERMISSION.CONTENTTYPE = 4, 
    lookup(
        _IncortaMetadata.DASHBOARD.NAME, 
        _IncortaMetadata.DASHBOARD.ID, 
        _IncortaMetadata.PERMISSION.CONTENTID
    ), 
    _IncortaMetadata.PERMISSION.CONTENTTYPE = 5, 
    lookup(
        _IncortaMetadata.SCHEMA.NAME, 
        _IncortaMetadata.SCHEMA.ID, 
        _IncortaMetadata.PERMISSION.CONTENTID
    ), 
    ''
)

4- Create the following internal session variable in the schema page:

Name:  ISV_Tenant_ID

variable:

queryDistinct(
_IncortaMetadata.USER.TENANTID, 
lower(
_IncortaMetadata.USER.LOGINNAME
) = lower(
$user
)
)

5- Import dashboard_demo_Audit_Permission.zip dashboard into incorta dashboards.

Note: the dashboard, schema formula, and session variables are built using the incorta metadata schema based on its current name "_IncortaMetadata" , if the schema has a different name, it will have to be modified to match the current installed metadata schema name.