Report: Password lists (and/or folders?) without admins

[Valentijn Scholten]

Hi,

 

Sometimes it happens that people are leaving our company. When their account is deleted (or disabled) it can result in passwordlists having no admin anymore.

 

As far as I can tell there's no easy way to generate a report of these lists, so that would be a welcome addition to passwordstate.

 

Any work arounds maybe?

 

Valentijn

[support]

Hello,

Thanks for your request. As a work around, you could run the SQL Query below. Any Password Lists with a TotalPermissions of 0, means there is no Admin on the list.

 

USE Passwordstate

SELECT PasswordLists.PasswordListID, PasswordLists.PasswordList, PasswordLists.Description, PasswordLists.TreePath, (SELECT COUNT(PasswordListID) FROM [PasswordListsACL] PSSWD WHERE (PSSWD.PasswordListID = PasswordLists.PasswordListID) AND (PSSWD.Permissions = 'A')) As TotalPermissions
FROM [PasswordLists] 
WHERE (PasswordLists.PrivatePasswordList = 0) AND (PasswordLists.Folder <> 1) 
GROUP BY PasswordLists.PasswordListID, PasswordLists.PasswordList, PasswordLists.Description, PasswordLists.TreePath
ORDER BY PasswordLists.PasswordList

Regards

Click Studios

[Azkabahn]

Hi,

 

used this SQL query for several times. I would put +1 for this feature to have it in the reporting. I would improve with the additional column indicating the number of records in the password list.

[Valentijn Scholten]

I agree the query works fine, but it requires SQL access. I wouldn't want to allow too many servicedesk people access to the database (and bypassing audit logs).

So would be nice to have the report in place. 

The primary usecase I would use this report is when/before deleting a user. So ideally the report would be "Password lists for which a user is the only admin".

[Valentijn Scholten]

I also think the query above does not take the number of members of a group into account? I might take a look at adjusting the query as we are possibly looking at making sure all lists have at least 2 admins.

[Ulf]

+1

[Jeffrey]

+1

[Raytion]

+1