Custom attribute for relationships in Advanced Reporting

Advanced Reporting supports custom attributes for relationships in its reports. When an administrator creates a custom relationship in the admin console for the user identity object, the relationship is available in Advanced Reporting (custom reports) and filters.

A relationship represents a connection between two identity objects, such as users, devices, groups, or roles. Relationships define how these entities interact, enabling hierarchical structures, access controls, and delegation of responsibilities.

Advanced Identity Cloud add-on capability

Contact your Ping Identity representative if you want to add Advanced Reporting to your PingOne Advanced Identity Cloud subscription. Learn more in Add-on capabilities.

Steps

In this example, you have a user who is a developer lead with an Analyst role. The user supervises other developers in the company.

The tenant administrator creates a relationship, custom_alpharoles that represents the connection between two identity objects, alpha_user and alpha_role.

The general steps are:

Create a custom relationship
Create a new report using the custom relationship
Generate your custom relationship report

Create a custom relationship

In the Advanced Identity Cloud admin console, go to Identities > Configure.
On the Managed Object Types page, select Alpha realm - User.
Click the Relationships tab, and then click add Relationship.
In the Create Relationship modal:
1. In the Object Type list, select the target resource to map to Alpha realm - Role.
2. In the cardinality selectors, choose the relationship cardinality (for example, set the user side to Has many and role side to Has many).
3. Click Next.
On the Relationship Property page, configure both sides of the relationship:
1. Under Alpha realm - User:
  - In the Property Name field, enter alpharoles. Advanced Identity Cloud automatically prefixes the property as alpha_user.custom_alpharoles.
  - In the Display Properties list, select name. This determines which role attribute displays when viewing a user profile.
2. Under Alpha realm - Role:
  - In the Property Name field, enter a name for the reverse property that references users, such as members or users.
  - (Optional) In the Display Properties list, select user properties to display when viewing a role, such as userName.
3. Click Next.
(Optional) On the Derived Properties step, click Next.
On the Relationship Settings page, click Save.
Assign the role to a test user:
1. In the Advanced Identity Cloud admin console, go to Identities > Manage and click Alpha realm - Users.
2. Locate and click your test user to open the Details page.
3. On the Details page, locate the custom_alpharoles field and select the Analyst role.
4. Click Save.

Create a new report using the custom relationship

In the Advanced Identity Cloud admin console, go to Reports.
1. Click add New Report.
2. In the New Report modal, enter the following:
  - Name: Enter a descriptive name for the new report.
  - Description (optional): Enter a general description for the report.
  - Who can run: Select Users.
3. Click Next.
Click add Data Source.
1. In the Add a Data Source modal, select Users and click Next.
2. On the draft report page, select the properties in the right pane you want to appear in the report. For example:
  - Username
  - First Name
  - Last Name
On the same page in the right pane, scroll down to Related Data Sources.
1. Next to Custom_alpharoles, click add and then click add Add as Data Source.
2. Scroll down to users/custom_alphaRoles and click Role Name.
  
  You can rearrange the columns by dragging and dropping them in the desired order.
3. Click Save.

Generate your custom relationship report

On the Reports page, locate your custom report and click Run.
On your report page, click Run Now.
After your report has generated, click View Report.

The report displays all users with a custom relationship.
Review your report if you are satisfied with the results, click > Publish to activate it.