You can open the data dictionary to see the tables and column names that you can use in your reports. When you create a report, you open the Data Dictionary by clicking the >> button in the upper right area of the screen.
With the Data Dictionary visible, you can find the column names in a particular table by clicking the triangle next to a table name. The Data Dictionary provides table names, column names, and data types so that you know what to enter in your SQL query.
Although there are other tables in the database that you can use in your reports, the tables mentioned below are likely to be the most useful to you.
- ADUser: The Active Directory User table stores some basic information related to users, such as SamAccountName, UserPrincipalName, Mail, and so forth.
- Application: Stores information related to web and mobile applications, such as web application type, mobile application type, application version, and so forth.
Device: Stores information related to mobile devices and Mac computers, such as operating system version, noncompliant status, and when the device last connected with the Privileged Access Service
- Event: Stores activity information related to applications, devices, and users, such as counts for application launches, logins, device types, and so forth.
Note: When creating queries with the Event table, you must specify a time boundary. There are too many records in the Event table to query all records. For details, see Filtering events by time with DateFunc().