Lifecycle & Access Governance
Run Reports
Run Avatier's reports on users, requests, roles, groups and campaigns, on the web or from your AI assistant.
Completes when the finished report is ready: a file on the web, or the result in your conversation.
Avatier Reports connector
Ask in Plain Language
Get Reports from the AI Assistant You Already Use
Read-only: nothing is changed and nothing needs approval. Reports run through the separate Avatier Reports connector, not the Avabot MCP server, and there is no Run Reports in Avabot chat. One completed report = one Secure Outcome; failed attempts are never billed.
You: Run a report on requests and approvals for This Quarter. Avatier: sign-in: verified · report: picked from catalog · filters: This Quarter · result: totals, chart data and export links
Why it matters
Audit Evidence Should Be a Report, Not a Spreadsheet Project.
Reviews and audits ask who has access, what changed and who approved it, and the answer should come from one place.
What a report needs
A report from the catalog, its filters (a date range, domain, users, OU, group and other options), and a format.
What goes wrong by hand
Pulling access data by hand from each system means exports, spreadsheets and guesswork about what is current.
What Run Reports does
It builds the report in the background on the Avatier reporting service and notifies you when it is ready, in PDF, Excel (XLSX), CSV or JSON.
What per-seat pricing charges
Per-seat IAM charges for every licensed seat, whether anyone runs a report this month or not. Pay Per Identity Action™ charges only for completed reports.
The Action
How Run Reports Runs
On the web, Run Reports walks through these screens. Through the Avatier Reports connector, your assistant searches the catalog, reads the report's filters, runs it and returns the result in the conversation.
Sign In Through the Reports Connector
Reports connector only. You sign in through OAuth with your tenant's configured Avatier MFA methods, such as Avatier Questions, Google Authenticator, PingID Push or Identity Challenge Card. By default, running a report needs an MFA completed in the last 5 minutes; browsing the catalog and filters doesn't. On the web there is no extra check beyond your sign-in.
Pick a Report
Open Run Reports and browse the report categories, with Expand All or Collapse All. Switch between List and Downloaded.
Set the Filters
Fill in the report's filters: a date-range preset such as Today, Last Week or This Quarter, domain, user(s), organizational unit, group and other options. Some are required.
Generate
Tap Generate report and choose PDF, Excel (XLSX), CSV or JSON.
Open the Report
The report is built in the background. Open it from the notification or the Downloaded tab. In Teams, a finished report opens in a new window instead of downloading; on mobile, files are saved to the device.
Available on Web, Mobile, Teams and MCP.
Run Reports works on the .NET 4.8 and .NET 10 Avatier servers, and requires the separate Avatier reporting service.
There is no Run Reports in Avabot chat. In MCP, reports run through the separate Avatier Reports connector, not the Avabot MCP server, and return 500 rows by default and 2,000 at most, with the full data through export links that work for up to one hour.
Secure Outcome
What Counts as Done
A Secure Outcome is a completed, verified, policy-compliant identity action. A report completes when it finishes on the Avatier reporting service. On the web you get a notification with a download link, and the file appears under Downloaded. Through the Reports connector the result comes back in the conversation, with totals, chart data and rows, plus CSV and JSON download links and a hosted dashboard. Nothing is changed and no request is created. One completed report = one Secure Outcome.
Evidence
- The report file under Downloaded (PDF, XLSX, CSV or JSON)
- The ready notification, with a download link
- Through the Reports connector, the result in the conversation, with export links that work for up to one hour
Guardrails
Your Assistant Asks. Avatier Decides.
Verified First
Avatier verifies the person before sensitive changes, with the methods your policy already allows.
Acts as the Signed-In User
OAuth sign-in to your own tenant. No shared service account, no API key to manage.
Pay Per Identity Action™
Pay per Completed Report
Pay per completed report. Failed attempts are never billed.
| Compared | Manual or Per-Seat IAM | Run Reports, Pay Per Identity Action™ |
|---|---|---|
| What you pay for | Every licensed seat, whether it acts or not | Completed reports only |
| Failed attempts | No line between an attempt and a result | Attempts, failures and retries are never billed |
| The work | Manual intervention or tickets | The report is built in the background and delivered as a file, or as a result in the conversation |
| Evidence | Silent failures and missing audit trails | The report itself, in PDF, Excel, CSV or JSON, or as export links through the Reports connector |
Pay Per Identity Action™ is in invitation-only preview. Pricing is shared with qualified organizations.
Works with the Data Run Reports Reads
Run Reports reads Avatier's own data across your connected sources. It changes nothing.
- Users and Enrollments
- Requests and Approvals
- Roles and Privileges
- Managed Groups
- Separation-of-Duties Rules
- Access Governance Campaigns
- Licensing and Usage
Avatier MCP
New to Avatier MCP?
The Model Context Protocol is an open standard, stewarded by the Linux Foundation, that lets AI assistants call real systems through connectors instead of custom integrations.
Run Reports uses the separate Avatier Reports connector. Book a Preview to set it up.
Frequently Asked Questions
Why do I only see Reports (Legacy) and not Run Reports?
Run Reports needs the Avatier reporting service deployed and its address configured, plus the Enable Reports delegation and, when one is configured, membership in the Reports API access group.
Which formats can I generate?
PDF, Excel (XLSX), CSV or JSON. You're notified when the file is ready, and it stays in your Downloaded list.
Can I run reports from Claude, Copilot or ChatGPT?
Yes, through the Avatier Reports connector, which is separate from the Avabot MCP server. It finds the report, applies its filters, runs it and returns totals and charts, with a link to the full data.
Does Avatier provide AI-driven compliance reporting?
Yes. Avatier turns continuous identity and access data into audit-ready reports on demand, using AI to assemble who has access to what, what changed, and who approved it, mapped to the controls auditors expect. Instead of a manual evidence scramble before each audit, you generate plain-language, exportable reports covering SOC 2 Type II and ISO 27001, plus the evidence needs associated with NIST, SOX, HIPAA, and GDPR.
What is AI-driven configuration?
Avatier's AI-driven config turns plain-language intent into working policy. Rather than hand-coding rules, connectors, and roles, administrators describe what they need and Avatier recommends and sets up provisioning rules, role mappings, and workflows, then validates them before they go live. It shortens deployment from months to days and keeps configuration consistent, auditable, and free of custom scripting.
What is Pay Per Identity Action™?
Pay Per Identity Action™ is Avatier's pricing mechanic. Customers pay only for completed, verified, policy-compliant identity actions, called Secure Outcomes.
Is it the same as pay-per-action advertising?
No. Pay per action (PPA) is performance-marketing vocabulary for paying when an ad converts. Pay Per Identity Action™ charges for completed identity work.
How do I get started?
Getting started is free, deployment services are included, and a 45-day money-back guarantee applies. Contact Avatier for pricing for your organization.
What is MCP?
The Model Context Protocol is an open standard, stewarded by the Linux Foundation, that lets AI assistants call real systems through connectors instead of custom integrations.
How is it billed?
Pay Per Identity Action™ is in invitation-only preview: each completed, verified action is one Secure Outcome, and attempts, failures and retries are never billed.
Run Reports
Every Report, When the Audit Asks.
Pick a report, set its filters, and get the file on the web or the result in your conversation.