How to configure a process to send a Consolidated Email to Line Manager with the detail of all it's direct reportees ?

When you are saying the last login timestamp of each employee, are you looking for the login into One Identity Manager or for some specific target system account (AD, ....) login?

When you are saying the last login timestamp of each employee, are you looking for the login into One Identity Manager or for some specific target system account (AD, ....) login?

Yes Markus. It's for the Active Directory Logon Time Stamp.

I would create a simple list report then containing the AD User information and send this report to the manager.

The report definition would look similar to this and uses two parameters.

Days = Integer parameter. Number of days of last login (-90, -180).

Manager = UID_Person of Manager

<DatabaseExportDefinition BaseTable="ADSAccount" TimeZone="UTC">
	<WhereClause>isnull(LastLogon, '1899-12-30 00:00:00.000') < DateAdd(dd, @Days, GetUTCDate()) AND UID_Person IN (Select UID_Person FROM Person Where UID_PersonHead = @Manager)
	</WhereClause>
	<Columns>
		<Column TableName="ADSAccount" ColumnName="CanonicalName" ExportDisplay="False" />
		<Column TableName="ADSAccount" ColumnName="SAMAccountName" ExportDisplay="False" />
		<Column TableName="ADSAccount" ColumnName="cn" ExportDisplay="False" />
		<Column TableName="ADSAccount" ColumnName="LastLogon" ExportDisplay="False" />
	</Columns>
</DatabaseExportDefinition>

HtH

Thank You Markus for the suggestion.

But can this be put into an SMTP Mail Process step?

For e.g. - Let's say I have a manager M and there are 3 employees reporting to him E1, E2 & E3.

I would like to send one consolidated email on the 90th Day of AD Inactivity like below

Dear M,

The below employee's reporting to you have not used their Active Directory account for more than 90Days

Details of Employees

E1.Name, E1.UserID, E1.ADLastLogon TimeStamp

E2.Name, E2.UserID, E2.ADLastLogon TimeStamp

E3.Name, E3.UserID, E3.ADLastLogon TimeStamp

Regards,

Signature

Currently, as per the setup which I have made, 3 different emails are being delivered to the manager for each of its employee.

You need to run your process on a daily schedule and it needs to be based on your "Managers" so that the process is only generated once per Manager and not per employee.