What Centrify report services provides

Centrify report services provides reports on your Active Directory environment and the data is stored in a database that’s optimized for reporting. You can synchronize your Active Directory information to your reporting database, and then allow your users access to the reporting data.

You can choose to use SQL Server or PostgreSQL for your report database. If you use PostgreSQL, you must provide your own report software to create and view reports.

If you're using SQL Server, the following diagram illustrates the main report services architecture components:

If you're using PostgreSQL, the following diagram illustrates the main report services architecture components:

Centrify report services takes data from Active Directory at a particular point in time. The data collected at that point is sometimes referred to as a snapshot. The Active Directory data synchronization service puts the Active Directory data into tables in the reporting database, and then runs some algorithms on those tables. Some data is pulled over directly from Active Directory as it is, and some data is calculated.

For example, the effective role assignment for each computer and user is calculated rather than stored. Centrify does store the effective role assignment information at the levels of role, computer, and zone. This information is then stored in the database views, and those database views provide the information that you see in the reports.

The reporting service populates database views based on the data in those tables, and those views are what are used to populate reports.

Database views provide an easier and more secure way to share the reporting data without having to expose the database tables directly. Each view is essentially a database query. Some columns refer to columns in other views, and these relationships are noted.

Each default report is based on one or more of those database views, and you can build custom reports based on the information stored in one or more of those views.

For SQL Server databases, Centrify report services uses Microsoft SQL Server Reporting Services as the reporting engine for deploying and customizing reports. You can use any reporting service to generate reports by connecting to the reporting database.

Reporting data based on domains or zones

Here are some key points to be aware of if you’re thinking of using report data based on zones:

  • For zone-based reporting, each synchronization includes all Active Directory data from the specified zones. In comparison, for domain-based reporting, synchronizations after the first one include just the changes to Active Directory data.
  • For zone-based reporting, the service account needs just read permission to Active Directory. In comparison, for domain-based reporting, the service account needs permission to replicate directory changes.
  • For zone-based reporting, report services does not synchronize license information nor auto-zone computer information.
  • For zone-based reporting, you can include zones from other trusted forests. For domain-based reporting, you can add trusted forest domains.

gMSA accounts

Report services treats gMSA accounts (group Managed Service Accounts) as Active Directory users.

Information not included in the reporting database

There are few limitations on the kinds of data that can be stored in the reporting database. The following is not included:

  • NIS maps
  • UNIX import information

Report Services and Report Center

Centrify report services provides more reports and features than the previous Report Center in Server Suite. Report Center has been deprecated and removed.

Report services tools overview

Here’s an overview of the tools specific to Centrify report services. You’ll use some to all of these tools, depending on whether you’re completing your initial installation or changing some configuration settings later on.

Tool or component name

What you use this tool for

Report Services shortcut

Use this shortcut to open Centrify report services in Internet Explorer.

Configuration wizard

Use the configuration wizard to do the initial setup of your database and reports.

Re-run the configuration wizard only if you need to change some report services configuration settings or change whether you gather report data from Active Directory based on zones or domains.

For instructions, see Configuring report services and deploying your reports .

Upgrade & Deployment wizard

Use the Upgrade & Deployment wizard to upgrade your report database and deploy updated reports.

For instructions, see Upgrading your report services database.

Report Services Control Panel

Use the control panel to view the synchronization status of domains or zones, refresh report data, configure the synchronization schedule, add or remove domains or zones, change the user account that runs the report service, and view error logs.

For more details, see Administering Centrify report services with the Report Control Panel .

Server Suite installer

Use the installer to either install or upgrade the report services and other Server Suite components.

For instructions, see Installing Centrify report services .