PingOne Advanced Identity Cloud

Important points about reports

The following are important tips and points to know about Advanced Identity Cloud reports:

  • Out-of-the-box reports: There are 15 out-of-the-box reports available to your company. Nineteen additional reports are available for those who have the Identity Governance[1] service. Tenant administrators can access and run the out-of-the-box reports.

  • Report states: Each report has two states:

    • Draft: A staging state to validate a report before publishing. You must publish a report to make it live.

    • Published: A published report is read-only and live.

  • Report creation: You can create reports using the following:

    • Reports page: An intuitive extension to the Advanced Identity Cloud admin console

    • REST APIs

  • Report formats: You can export reports in JSON or CSV format.

  • Report results: For out-of-the-box reports, the backend streams events at set intervals, for example, 15 and 45 minutes, which could cause a delay in the report results. For near real-time reporting, learn about the Advanced Reporting feature.

  • Realm support: When a user logs into a specific realm and selects the User identity object in Advanced Reporting, the User attributes are specific to the Alpha realm.

  • Query data restrictions: Tenant administrators can only query data from the most recent 30 days for certain reports. The query limits apply to both draft and published reports.

    The 30-day data restriction applies to reports that cover the following AM entities and some IDM operations:

    • Journeys

    • Nodes

    • AM access attempts

    • AM access outcomes

    • IDM synchronization

    • IDM reconciliation

    Reports that cover the following topics are excluded from the query limit restrictions:

    • Identities and their attributes

    • Relationships like entitlements, roles, organizations (current state or historical snapshots)

    Reports covering the current state of an object and its relationships are always available, even if changes or assignments occurred before the restricted query period. However, if a report requires a history change trail, the query limitation will apply.

    If you see an error message stating:

    "Report run failed. Report run failed with the errors [Custom quota exceeded: Your usage exceeded the custom quota for QueryUsagePerDay, which is set by your administrator.]"

    Advanced Identity Cloud’s reports have high query limits, so customers are unlikely to encounter this error. Ping Identity enforces fair usage policies to prevent excessive or unnecessary use of certain features. Typically, this error occurs when fair usage limits are exceeded, resulting in temporary query restrictions. If you see this error, please contact your Ping Identity representative.

  • Duplicate functionality: You can duplicate some reports to create variations. Learn more in Duplicate report.

  • Download limits: Ping Identity limits downloads to 10,000 rows per download. This helps maintain system performance and reduces security risks associated with large data downloads. If your report uses timestamps, the download includes only the most recent 10,000 entries.

    If you require more data, apply filters (date ranges, categories, or other properties) to define your report before exporting.
1. Identity Governance is an add-on capability to Advanced Identity Cloud. Contact your Ping Identity representative if you want to add PingOne® Identity Governance to your Advanced Identity Cloud subscription.