Generate Automated Permissions Reports

Generate Automated Permissions Reports

0 vote

avatar

Hi Team
Currently we cant find a way to generate user permissions reports (i.e. who has access to which vaults and what type of access - Admin, RO, RW etc) from the standard Report options that are available in the Devolution Password Server web portal .
This report is a key requirement for our security team as part of their IAM monitoring and an automated way of generating this report either via scheduling csv exports or via an API would be very beneficial feature.

Thank you
Mustansir

All Comments (10)

avatar

Good morning Mustansir,

Thanks for the request,
Could you give me more details on the report you are looking for?

Are you looking for something like that?

Username | Vault | Connection | Can View | Can Edit | Can View Password...
---------------------------------------------------------------------------------------------------------------------------------
dsavard | VaultA | Connection1 | Yes | No | No
dsavard | VaultA | Connection2 | Yes | Yes | No
mustansir | VaultB | Connection4 | No | No | No

Regards,
David

David Savard

avatar

Hi David
Yes right on those tracks, with a few more columns headers like

  • Overall permissions/ account type (i.e. admin, user, read only etc)
  • Roles/groups associated to
  • Last time access.


Also having automation ( ability to generate these reports on a schedule to send out via email or grab via API endpoint) is key here.

Thank you
Mustansir

avatar

Thanks for getting back to me,
I'll add it to our to-do list and let you know when I have an ETA,

In our next release 2021.1, we reworked the scheduled reports to add almost all our reports so when we add that one,
you will definitely be able to receive that report in csv via an email.

Regards,
David

David Savard

avatar

Hi David
Yes having the ability to schedules all the other available reports is a must, currently I can only see the "Expired Entry List" report type available in the scheduling section which is not sufficient at all for our daily security automation checks.

Any updates on the ETA for 2021.1 release and just to clarify that our new permissions report request will also be added in this same 2021.1 release correct?

Thank you
Mustansir

avatar

Good morning Mustansir,

the version 2021.1 should be available next week, but it will not include the report you requested.
Unfortunately, the request came in late in our release process and I was not able to work on it.

that kind of report can be really be time/resource consuming since I would need to resolved the permissions of every user for every entries.
Our system currently only resolve the permissions for a specific user for specific entries/vaults when it is needed,
to be able generate the fully resolved permissions on a report, it will require some changes on the server before we can create that report.

I'll keep you posted

Regards,
David

David Savard

avatar

Hi David
Nice, looking forward to the new version releasing next week, we will be able to schedule all the reports which are currently available on the portal.

Sad to hear that our permissions report couldn't make it for this release but understand the time and resource constraints, thanks for updating.
I was wondering, will it be possible to get this data out of the database directly on our end in the meantime? If you can provide some guidance or resources on how we can configure this, that will be awesome.

Thank you
Mustansir

avatar

Hi David
Any updates on my last comment = if I can get this permissions data out off the database directly and if so please provide guidance or resources on how we can configure this?

Thank you
Mustansir

avatar

Good morning Mustansir,

I think, we could help you doing it in PowerShell, please open a ticket at ticket@devolutions.net.

Regards,
David

David Savard

avatar

Hi Team
When will this new permission report template release?
Its been a year since I raised this requests initially and sadly still cant see this template in the reporting section.
Thanks
Mustansir

avatar

Hello,

Here is a PowerShell script to generate such report.
https://github.com/Devolutions/devolutions-server/blob/main/Powershell%20Module/Samples/PermissionsReport.ps1

Let me know if this is what you're looking for.

Best regards,

Érica Poirier