How to find the history of users when they are in and out of a business role through dynamic role calculation?

Hi Sudhir,

First of all you need to ensure that you have configured the system to 'log' when an assignment is added or removed.

Designer > One Identity Manager Schema > Tables > Type: View > PersonInOrg

Columns: UID_Org, UID_Person

'More' tab ..... "Log changes" checked, "Log changes when deleting" checked.

Once this is done, committed, compiled, etc. .... from that point on ..... additions and removals will be logged.

Then it's a case of using one of the history reports to get what you need .... I can't recall what might help you with that right now but I expect there should be something to get you started.

HTH, Barry.

The configuration parameters Common\ProcessState\PropertyLog and Common\ProcessState\PropertyLog\AllDefaultPropertiesForModel should be enabled.

More here https://support.oneidentity.com/technical-documents/identity-manager/8.1.1/configuration-guide/63#TOPIC-1250685

This is the error I receive after I enable the above mentioned config parameters.

I tried clicking on the report and this is what I receive.

Error during execution of statement: select
op.UID_DialogWatchOperation, op.UID_ProcessInfo, op.OperationDate, op.OperationUser,
op.OperationType, op.ObjectKeyOfRow, c.Columnname, p.HasContentFull, p.ContentShort, p.ContentFull
from WatchOperation op
left outer join WatchProperty p
on p.UID_DialogWatchOperation = op.UID_DialogWatchOperation
left outer join SourceColumn c
on c.UID_DialogColumn = p.UID_DialogColumn
where (op.ObjectKeyOfRow in ('<Key><T>Person</T><P>2cd01d86-fa60-4b72-bf43-f6084b169f4b</P></Key>'))
order by op.OperationDate desc, op.UID_DialogWatchOperation, c.Columnname
Database error 208: Invalid object name 'WatchOperation'.
Invalid object name 'WatchOperation'.

Is this one OOTB report? Because there are no tables called WatchOperation and WatchProperty in the database.

Yes. It will be seen when you select any user in the Manager application - Tasks pane - "Overview with businessroles and user accounts".

I have enabled these and tried removing the members from a dynamic role. still don't see the change history

This sounds new to me, never heard that before. The oob report for 8.1.4 does not use this kind of SQL query. It is using the historical data queries to fetch the data. That's why I assume this is a customized report you want to check.