Provisioning: Activity Improvements

There's such a wealth of information about what the Provisioner framework is doing, but I wanted to report that I'm not finding what I'm looking for when I'm troubleshooting or otherwise answering questions. This Jira is an attempt to describe some changes that would help, but we want to warn you that ideas will probably come to us iteratively.

Some of what happens when we try to use existing transparency:

We turn to the Activity Report for a provisioner pretty frequently, but we're often faced with all the information looking something like this:

What 'Activity' is this trying to tell us? It seems to be saying that the Provisioner didn't see the membership in the target system at 1:47, but that it did see it in the system a few hours later at 4:18. However, it seems to indicate that it didn't make any changes. To me this is reporting that the provisioner lost track of memberships in the target system at 1:47 and then rediscovered they were actually there at 4:18. This is odd for various reasons, but isn't what we're typically looking for.

Note: This person's membership in this group hasn't changed for over a month, and many successful Full Sync provisioners have run before these 1:47 and 4:18 instances:

Note that the 1:17 did provision a lot of memberships, but they are not related to the activity line above. Also note that we can't use the existing UI to understand what those 16k changes were.

Suggestions:

1. Have the ability to see Provisioned Changes

1. 1. This could be within the Activity-Report page, but it doesn't seem compatible with all the Begin/End/Etc Dates and other information the Activity Report shows
   2. This would show things like:
      1. Created/Updated/Deleted Group in target system with grouper group name, and ideally, the Group's target system information too (DN, etc)
      2. Added/Removed membership in target system [Subject, Group]
      3. Created/Updated/Deleted Entity in target system [Subject]
2. Be able to page through the changes
3. Be able to filter the changes based on Date, Group, and/or subject
4. Link to this Provisioned Changes report from a provisioned group, obviously filtered on that group
5. Link to this Provisioned Changes report from membership changes shown in an Audit entry, filtering on the Subject and Group
6. In the existing Activity Report:
   1. Be able to page through information
   2. Filter based on Group (and be able to link to it from Group's provisioner menu)

Thank you