Administration Guide › Reporting › How to Enable Reporting for Tenant Administrators › Enable Advanced Authentication Reporting

Enable Advanced Authentication Reporting

This section describes the pre-configuration steps for required for enabling Advanced Authentication reports tasks.

Configure the Database for Advanced Authentication Reporting

1. Install the Oracle client on the Report Server.
2. Add the advanced authentication database details to the tnsnames.ora file.
3. Change directory to JBoss/server/all/deploy/iam_im.ear/user-console.war/reports.
4. Copy cam-aa-oracle-reports.biar and cam-am-oracle-reports.xml to the im_admin_tools_dir/ReportServerTools folder.
5. Edit cam-am-oracle-reports.xml and edit the values, which are marked in italics in the following example:

   <username>DB User name</username>
   <password>DB Password</password>
   <datasource>Oracle SID, the DSN name used by the Oracle client in the report server</datasource>
   <server>DB Host name</server>
   

6. Run the BIconfig utility on cam-am-oracle-reports.xml to export cam-aa-oracle-reports.biar into the Report Server.
7. Log into the advanced authentication database as the AA database user.
8. Run the following commands:

   create or replace
   FUNCTION IM_Audit_Start_Date (rangeVal int, multiplier int, startdatetime DATE)
   
   RETURN DATE is
   tempid1 DATE;
   BEGIN
   
   if rangeVal = -1
   then tempid1 := startdatetime;
   else
   case rangeVal
     when 1 then tempid1 := sysdate - multiplier;
   --Last N days
     when 2 then tempid1 := trunc(sysdate, 'DAY') - (7 * multiplier);
   --weekly
     when 3 then tempid1 := add_months(trunc(sysdate, 'month'), -multiplier);
   -- first day of the month
     when 4 then tempid1 := add_months(trunc(sysdate, 'month'), -(3 * multiplier));
   -- quarter of the month
     when 5 then tempid1 := add_months(trunc(sysdate,'y'), -(12 * multiplier));
   --Yearly
     else tempid1 := sysdate;
   end case;
   end if;
   return tempid1;
   END;
   
   create or replace
   FUNCTION IM_Audit_End_Date (rangeVal int, enddatetime DATE)
   
   RETURN DATE is
   tempid1 DATE;
   BEGIN
   if rangeVal = -1
   then tempid1 := enddatetime;
   else
   case rangeVal
     when 1 then tempid1 := sysdate;
   --Last N days
     when 2 then tempid1 := trunc(sysdate, 'day') -1 + (1439/1440);
   --weekly
     when 3 then tempid1 := trunc(sysdate, 'month') - 1 + (1439/1440);
   -- last day of the month
     when 4 then tempid1 := trunc(sysdate, 'month') - 1 + (1439/1440);
   -- quarter of the month
     when 5 then tempid1 := trunc(sysdate,'y')-1 + (1439/1440);
   --Yearly
   else tempid1 := sysdate;
   end case;
   end if;
   return tempid1;
   END;
   

   Note: The previous commands are also found in the datefunctions.sql script. If you have access to this script, simply run the datefunctions.sql script file.

Enable the Advanced Authentication Roles

1. Log in to the User Console as the CSP administrator.
2. Select Roles and Tasks, Admin Roles, Enable/Disable Admin Role.
3. Select the check box to enable the Advanced Authentication Manager role.
4. Select the check box to enable the Advanced Authentication Reports User role.
5. Click Select.
6. Click Yes to confirm.

   The system enables the Advanced Authentication Manager and the Advanced Authentication Reports User roles.

Now the tenant administrator can request advanced authentication reports in the User Console.