Is there a way to create a report that shows what role a user is in during an event?
11-13-2017 09:08 AM
I am wondering if there is a way to evaluate what role a user was using when opening an application?
I tried to create a report with this information in it but I noticed that all columns associated with "Role" from Event are blank/empty when it comes to Cloud.Saas.Application events. The only time I've seen any non-empty instances of "Roles" in reports is through the Cloud.Core.Access.Role events (did not appear useful for what I need) or with AzRole which always states the generic "WebRole" (I would like to list out specific roles we made in our Centrify environment ie Splunk Admin, AWS-Production etc).
Basically, is there any way to create a report to associate a user with the role they used at all? Or does Centrify not have that capability for some reason?
I would appreciate any guidance on the matter. Many thanks in advance!
Solved! Go to Solution.
11-15-2017 12:55 AM
There is currently no report to get a full list of what role a user is using now. You might find roles from the "Event" table but this is the role change events usually. For example,
select Event.ID AS _ID,Role.ID as _RoleID, User.ID as _UserID, whenoccurred as _I18N_Date,Role,EditType,PrincipalName,NormalizedUser as _I18N_ChangedBy from event join Role on event.RoleId = Role.ID join User on event.UserGuid = User.ID where whenoccurred > datefunc('now', '-30') and eventtype='Cloud.Core.Access.Role.Edit' order by whenoccurred desc
This is a great idea though - I recommend that you post the suggestion up on our new Idea Exchange board - this is direct line to our Product Managers who hold all the keys in deciding what new features to consider for future releases:
In the meanwhile, you might get the user role list by API - "GetUsersRolesAndAdministrativeRights"
For more details of the API, please visit :
Please do not hesitate to let us know if you have any other questions.
11-15-2017 09:49 AM
That is crazy that Centrify does not have this capability since I feel like it is a major functionality of Centrify. I will be sure to post on the exchange board and hopefully you guys can get that ball moving.
Thank you for letting me know though! I would have gone crazy trying to figure it out on my own.
11-15-2017 02:38 PM
Thank you for sharing your thoughts with us. I definitely understand where you are coming from, and I've forwarded this thread to our product management team.
The Idea Exchange is a great place to collaborate with other Centrify customers and our product management team. Your account has been enabled with the access needed to post a new idea. Please do not hesitate to send me a private message if have any questions.
Community FAQ | Documentation | Support Portal | Centrify Trust | @CentrifySupport on Twitter
Giving Kudos is a great way to thank our community contributors!
Problem Solved? Click "Accepted as Solution" so this information can help other users.
These opinions are my own and do not necessarily reflect the views and opinions of my employer.