Maximo – Auditing security groups and authorizations

The Security groups and application authorizations reports are aimed at providing a simple tool to have an high level view of how Maximo security groups are designed and how application authorizations are designed.

Download: mx_security.zip

Security Overview report installation instructions

1. 
   

2. Open the Administration > Report Administration application

3. 
   

4. Create a new record and enter the following information:
   

5. 
   

6. Report file name: mx_security.rptdesign

7. 
   

8. Description: Security Security

9. Application: SECURGROUP (Security Groups)

10. 
    

11. Save the record

12. 
    

13. Select Import Report action from the menu and in the Report Design File pick the mx_security.rptdesign file.

14. Click on Generate Request Page and then on Preview button to run the report.

Application Security Overview report installation instructions

1. 
   

2. Open the Administration – Report Administration application

3. 
   

4. Create a new record and enter the following information:
   

5. 
   

6. Report file name: mx_securityapp.rptdesign

7. 
   

8. Description: Application Security Overview

9. Application: SECURGROUP (Security Groups)

10. 
    

11. Parameters:
    

12. 
    

13. Parameter Name: securitygroup

14. 
    

15. Attribute Name: GROUPNAME

16. 
    

17. Lookup Name: birtsecuritygroups

18. 
    

19. Display Name: Security Group

20. 
    

21. Display Sequence: 1

22. Multi-Lookup Enabled: Yes

23. 
    

24. Save the record

25. 
    

26. Select Import Report action from the menu and in the Report Design File pick the mx_securityapp.rptdesign file.

27. Click on Generate Request Page and then on Preview button to run the report.

Report Information

1. 
   

2. The first report is called Security Overview and simply lists all the Security Groups and Start Centers counting how many users are assigned to them.

3. 
   

4. The second report is called Application Security Overview. It tries to represent which security groups provide access to applications.

5. 
   

6. The report lists all the applications in the rows and the security groups in the columns. The cell is yellow if read access is granted, orange if write access is granted, the number is the count of sigoptions granted.

7. The report can easily get too big if more than 20 security groups are defined so I decided to accept a list of security groups as filter so I can analyze smaller sets of data separately.

#maximo