Chat now with support
Chat with Support

Welcome, erwin customers to Quest Support Portal click here for for frequently asked questions regarding servicing your supported assets.

Quadrotech Nova Current - User Guide

Overviews Adoption Accelerator Delegation & Policy Control (DPC) Reporting TMS Settings About

Microsoft Permissions for Reporting

To be granted access to Nova Reporting, you need to accept Microsoft permissions during the on-boarding process of connecting your tenant. The following are Microsoft's permissions:

Permission

Permission Description

Sign and and read user profile

Allow users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.

Read all access reviews

Allows the app the read access reviews, reviewers, decisions and settings in the organization, without a signed-in user.

Read all administrative units

Allows the app to read administrative units and administrative unit membership without a signed-in user.

Read all admin consent approval requests

Allows the app to read admin consent requests, business flows and governance policy templates without a signed-in users

Read all customer lockbox approval requests

Allows the app to read customer lockbox requests, business flows, and governance policy templates without a signed-in user.

Read all entitlement management approval requests

Allows the app to read entitlement requests, business flows, and governance policy templates without a signed-in user.

Read all privileged access approval requests

Allows the app to read privileged access requests, business flows, and governance policy templates without a signed-in user.

Read all audit log data

Allows the app to read and query your audit log activities, without a signed-in user.

Read all channel messages

Allows the app to read all channel messages in Microsoft Teams.

Read all chat messages

Allows the app to read all 1-to-1 or group chat messages in Microsoft Teams.

Read Microsoft Intune apps

Allows the app to read the properties, group assignments and status of apps, app configurations, and app protection policies managed by Microsoft Intune, without a signed-in users.

Read Microsoft Intune device configurations and policies

Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.

Read Microsoft Intune devices

Allows the app to read the properties of devices managed by Microsoft Intune, without a signed-in user.

Read Microsoft Intune RBAC settings

Allows the app to read the properties relating to the Microsoft Intune Role-Based-Access-Control (RBAC) settings, without a signed-in user.

Read Microsoft Intune configuration

Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.

Read Directory Data

Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user.

Read Education App settings

Read the state and settings of all Microsoft education apps.

Read class assignments with grades

Allows the app to read assignments and their grades for all users.

Read class assignments without grades

Allows the app to read assignments without grades for all users.

Read the organization's roster

Allows the app to read the structure of schools and classes in the organization's roster and education-specific information about all users to be read.

Read files in all site collections

Allows the app to read all files in all site collections without a signed-in user.

Read all groups

Allows the app to read group properties and memberships, and read the calender and conversations for all groups, without a signed-in user.

Read identity providers

Allows the app to read your organization's identity (authentication) providers' properties without a signed-in user.

Read all identity risk information

Allows the app to read the identity risk event information for your organization without a signed-in user.

Read all identity risky user information

Allows the app to read the identity risk user information for your organization without a signed-in user.

Read all identity user flows

Allows the app to read your organization's user flows, without a signed-in user.

Read all user mailbox settings

Allows the app to read user's mailbox settings without a signed-in user. Does not include permission to send mail.

Read all hidden memberships

Allows the app to read the memberships of hidden groups and administrative units without a signed-in user.

Read all OneNote notebooks

Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.

Read online meetings details

Allows the app o read online meeting details in your organization, without a signed-in user.

Read organization information

Allows the app to read the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.

Read organizational contacts

Allows the app to read all organizational contacts without a signed-in user. These contacts are managed by the organization and are different from a user's personal contacts.

Real all users' relevant people lists

Allows the app to read any user's scored list of relevant people, without a signed-in user. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).

Read all company places

Allows the app to read company places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.

Read your organization's policies

Allows the app to read all your organization's policies without a signed-in user.

Read privileged access to Azure AD roles

Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.

Read privileged access to Azure AD groups

Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.

Read privileged access to Azure resources

Allows the app to read time-based assignment and just-in-time elevation of user privileges to audit Azure resources in your organization, without a signed-in user.

Read all programs

Allows the app to read programs and program controls in the organization, without a signed-in user.

Read all usage reports

Allows an app to read all service usage reports without a signed-in user. Services the provide usage reports include Office 365 and Azure Active Directory.

Read all directory RBAC settings

Allows the app to read the role-based-access-control (RBAC) settings for your company's directory, without a signed-in user. This includes reading directory role templates, directory roles and memberships.

Read your organization's security actions

Allows the app to read security actions, without a signed-in user.

Read your organization's security events

Allows the app to read your organization's security events without a signed-in user.

Read items in all site collections

Allows the app to read documents and list items in all site collections without a signed-in user.

Read all users' teamwork activity feed

Allows the app to read all users' teamwork activity feed, without a signed-in user.

Read all users' installed Teams apps

Allows the app to read the Teams apps that are installed for any user, without a signed-in user. Does not give the ability to read application-specific settings.

Read all threat indicators

Allows the app to read all the indicators for your organization, without a signed-in user.

Read all users' full profiles

Allows the app to read user profiles without a signed-in user.

Read activity data for your organization

Allows the application to read activity data for your organization.

Read DLP policy events including detected sensitive data

Allows the application to read DLP policy events, including sensitive data, for you organization.

Read service health information for your organization

Allows the application to read service health information for your organization.

View all content in tenant

The app can view all content in the tenant without a signed-in user.

Get data warehouse information for Microsoft Intune

Grants access to the Intune data warehouse API.

Get device state and compliance information from Microsoft Intune

Allow the app to receive information about devices (such as compliance and enrollment state) that are managed by Intune.

Dashboards

After successfully adding your service account, the dashboard will be the first screen you will come across. Here, you will see a variety of reports and widgets already pre-built into Nova, including Active Users by Workload, which shows the amount of users using and not using each Office 365 workload in the previous 30 days.

Dashboards are where you can view your reports immediately; with data being updated every 24 to 48 hours, your dashboard gives you recent results on your Office 365 environment straight away.

Here is an example of a dashboard that shows information about an Office 365 tenant:

 

Dashboard

 

See dashboards in action in this video by clicking here.

info

NOTE: The initial look of your dashboard will depend on your role within Nova.

There are several pre-existing widgets that you can add to your dashboard straight away. To do this:

1.From the dashboard, click Edit, the Add Widgets.

2.Click on the report section you would like to add to the dashboard.

3.Click Save.

Creating a Custom Chart Widget

Adding a custom chart widget to your dashboard follows similar steps as creating a section of a chart and pivot report, which will be covered later. This section will appear on your dashboard, which you can customize to your needs. To do that:

1.On the dashboard, click Edit in the top right hand of the screen.

2.Click Add widgets, then Configurable Chart Widget.

3.Enter a Widget title and a Widget sub-title if appropriate. Optionally, you can link your widget out to a report from within the Report Center.

4.Select a data source from the drop down list.

5.Select an organization and organization group, if applicable to your environment. These help to narrow down the scope of your reports.

6.Select a chart type. You can read more about chart types in the Quadrotech Nova Reporting Guide.

info

NOTE: Only charts and pivots can be created for use in the dashboard. To create a report using any type of data presentation, use the Report Center.

 

7.Once you have selected your chart, choose an Operator. Operators are:

a.Average: This is calculated by dividing the total of all of the values by the number of values.

b.Count: The quantity of values in a data set.

c.Sum: The result of adding together the values in a data set.

d.Min: The smallest value.

e.Max: The largest value.

8.Select an Applied to data field. This is your Y axis. You can use the search boxes to find the exact data field you need, or filter by data type or data source.

9.Choose a Series name data field. This is your X axis. You can search for this the same way as the step above.

10.Optionally, choose a category. You can search for this the same way as step 8.

11. Add a filter group, if desired. Filtering allows you to narrow down the scope of your report. For example, you may only want to view users within a certain department or geographical location.

12.You can sort your data, if needed. Similar to step 8, you can search for a data field you would like to sort by ascending or descending order.

13.Set an offset. This is the starting record of your widget.

14.Set a limit. This is the maximum number of records returned within your widget.

info

NOTE: When downloading a section, this limit is ignored.

 

15. Select or deselect Overflow. This gathers data outside your limit into one section of a chart.

16.Choose your drill down fields.

17.Click OK, and your widget should appear in the dashboard. Click Save in the top right hand corner to finish the section.

Adding a Card to the Dashboard

If you would like to see a card presented on your dashboard, follow these steps:

1.From the dashboard, click Edit in the top right hand of your screen.

2.Click Add Widgets and select Card Widget.

3.Name your widget, and give it a sub-title if necessary.

4.Create your card as you would with the steps above, and click OK.

 

Your card should now appear within the dashboard. If you have set analytics on your card, your card should display the color affiliated with the analytic you inserted.

 

Card6

 

info

NOTE: You are able to move your card in the dashboard to a place of your convenience. Also, you are able to resize the widget to your standards. For more on Nova dashboards, click here.

Add a Service Status Widget in the Dashboard

Users can view maintenance and incident reports straight from the Nova dashboard. This allows users to get a quick look at the outlook of their Office 365 services.

 

To add the Service Status Widget do the following:

1.Go to your Nova Dashboard, and click Edit.

2.Click Add widgets.

3.Find the Service Status widget. This will then appear in your Nova dashboard.

4.Click Save.

Dash08

Interacting With the Data

Many of the charts allow you to hover on segments and drill down to get more detail. For example, where we see the number of users who changed their password within a certain period of time, you can hover on that and you will see the precise amount of users who changed their password. Some other charts have a View Data button, which takes you to additional detail, which you can also download into a CSV file if required.

 

Dash02

 

Dashboards can be edited and customized to meet your needs. You can change the title of the dashboard, move chart widgets around, remove widgets that are not needed, and add new widgets by dragging and dropping them from the list onto the page.

 

Change the Title of a Dashboard

 

You can change the title of a dashboard so it reflects the data within it. For example, if you have a dashboard that only reflects your environment's OneDrive data, you can change the title so the dashboard represents that. To do this:

1.From the dashboard, click Edit in the top right hand corner.

2.Click on the title box and input the your desired title.

3.Once done, click Save.

Configuring, cloning and/or removing widgets

Depending on the type of widget on the dashboard (public, private or system), you have configuration options for each widget. These are:

·Configure widget: this is where you can change widgets that you created using the configurable chart widget. You can not configure any pre-built widget without cloning them first.

·Close widget: you can clone system widgets, and then configure that cloned widget to suit your needs.

·Remove widget: Any widget can be removed from the dashboard.

To configure, clone or remove a widget:

1.On the dashboard, click Edit on the top right hand of the screen.

2.Click the Spanner icon on any widget, and choose your desired option.

3.Click Save.

Move and Resize Widgets

You can move and resize widgets across your dashboard.

To move a widget:

1.On the dashboard, click Edit on the top right hand corner.

2.Click and hold the widget you would like to move, and drag to the location you would like it to be.

3.Click Save.

To resize a widget:

1.On the dashboard, click Edit on the top right hand corner.

2.Click and hold the arrow on the bottom right of the widget. You can resize it to your standards; the red preview box will show you how large the widget will be once its resized.

3.Cick Save.

Refreshing the Dashboard

On the top right hand of the dashboard, you will see a circular arrow icon. This button refreshes your dashboard and gives you real time results. Under the title, you will see when the dashboard was last updated.

Dashboard1

Network Operation Center mode (or NOC mode) clears the screen of all Nova user interface elements, leaving the chosen dashboard. The interface goes from this:

 
Dashboard

 

To this:

 
Dashboard2

 

It is a perfect overview for call center, network operations, or help desk employees.

Nova Report Center

Microsoft has several different interfaces for tools used to perform Office 365 management, reporting, and auditing tasks. In contrast, Nova users perform that work in a single user interface.

 

To achieve this, Nova gathers reporting and auditing data from Office 365. Reporting data is collected about every 24 hours and auditing data is received from Microsoft when it becomes available. This data is stored in Nova for as long as the organization remains a subscriber, which is much longer than Microsoft typically stores this data in Office 365.

 

The flexibility and power of the Nova Report Center is ideal for organizations with custom reporting needs that can not be fulfilled by the standard reports available in Nova. To create a report with the Report Center, you specify:

 

1.How you want the report to look. You decide what sections the report contains. Will it have charts, graphs, maps, or tables that will display the information?

2.The types of data the report will display. These are called data sources.

3.Any filters you want to apply against the data sources. For example, your data source might be a list of Azure AD users. You might want to filter that list, so your report only shows users in North America or a certain department.

 

Just like other Nova reports, the reports created using Report Center can be saved, scheduled, and shared. If you do not want to build an entirely new report, you could even clone an existing report and customize it to meet your new needs.

 

Below is an example of a report built using Report Center.

 

UbL1

 

Here is more about the steps to set up a custom report:

Step 1: How will the report look?

Give a custom report structure by adding sections to control how it looks. For example, you might add these sections to a report:

·A pie chart

·A heat map

·A table

Here is where you select what section you will add to your report:

1

As sections are added to a report, you are asked to define the data source information you want to display in that section. The sections control how a custom report looks and the data sources give the report substance.

 

You can make sections display larger or smaller on the report, or you might drag and drop a section to another location on the report.

Step 2: What is the data source?

Reports created using Report Center are just templates, or shells. The service needs data for the shell to become a useful report. Nova gathers data from a variety of services, as described earlier in this article. Then, that data is collated, filtered, and displayed in the report. Here are a few possible data sources:

·A list of Azure AD users

·A list of Office 365 distribution groups

·Data source availability

After a data source is selected, you are asked to choose which fields related to the data source will display in the report. The report's data sources control what fields display and how they interact with other data sources on the report. Here is an example of a screen where you select the fields that display in a section:

2

For more about data sources, go to this section.

Step 3: Do you want to filter or sort information displayed in a section?

You might add a filter to a section to show only a subset of data source information. For example, you could add a filter based on geography, so only users from a certain location display. You could add a filter that results in displaying a list of users from a specific department. Or, you could add a filter based on dates, so records older than X are filtered off the report. These are just a few examples. An organization can customize these to their specific needs.

 

You can also apply a sort order to a section. This is especially useful for table sections that show a list of information. For example, you can sort a list of users last name in ascending order, or you can sort that same list of users by who they report to.

FilterGroup1

These filters and sorts are saved as part of the report definition, so you will only have to configure them once.

To filter by date, check out this article.

 

Report Center Terminology

The Nova Report Center has some terminology which you may not be familiar with. Check out this section for more information.

 

Private and Public Reports

The Private and Public report sections in the Report Center allow users to quickly see which reports are private to you and which reports are accessible by your organization.

NovaRep

Private, Public and System Reports

There are different types of reports that are immediately available to you in the Report Center, each with their own different actions.

System Reports

System reports are pre-built reports that are available with your subscription straight away. With a variety of system reports at your fingertips, information on Microsoft workloads, user details, licensing, security and more are all ready for you to view. If you are brand new to Nova reporting, we have highlighted some system reports that you may find helpful.

Report Name

Report Description

Data Chart Type

Report Section

Section Description

OneDrive Usage Charts

An overview of users engagement with OneDrive.

Combined Line Graph

OneDrive Usage Summary

Files edited and viewed, files shared internally and externally and files synced.

Line Graph

Files Viewed per Day

Amount of OneDrive files viewed within a 30 day period

Line Graph

Files Shared Internally per Day

Amount of OneDrive files shared within your organization over the past 30 days.

Line Graph

Files Shared Externally per Day

Amount of OneDrive files shared outside of your organization per day over the past 30 days.

Line Graph

Files Synced per Day

Amount of OneDrive files synced to OneDrive within the past 30 days.

User Details

An overview of the details of users within your environment.

Table

User Details

Core user details, including display name, email, job title and department.

Pie Chart

Users by Country

Amount of users in each country of your organization.

Timeline

Most Recent Password Changes

Most recent password changes within your organization.

Table

List of Disabled Users

List of disabled users but still are users within your organization. Fields include name, email, job title and department.

License Overview

An overview of your licenses at tenant level.

Pie Chart

Tenant License Distribution

Licenses distributed within your organization, by license name.

Table

Licenses Purchases or Available

Licenses that have been purchased and/or are available within your tenant. Data fields include licenses assigned, licenses unassigned, percentage of licenses that have been assigned and percentage of licenses that are idle.

Table

Licenses Applied by User

Main license applied to each user.

Table

License Assignment Dates

Licenses applied to a user, and when that license was used most recently.

Pie Chart

Has Exchange License

How many users have and do not have an Exchange licensed assigned to them.

Pie Chart

Has Teams License

How many users have and do not have an Teams licensed assigned to them.

Pie Chart

Has SharePoint License

How many users have and do not have an SharePoint licensed assigned to them.

Pie Chart

Has Skype License

How many users have and do not have an Skype licensed assigned to them.

Pie Chart

Has OneDrive License

How many users have and do not have an OneDrive licensed assigned to them.

Pie Chart

Has Yammer License

How many users have and do not have an Yammer licensed assigned to them.

Mail Traffic

An overview of mailing activity at tenant level.

Line Graph

Inbound Good Mail (Last 30 Days)

Number of safe mail received in the environment within the past 30 days.

Line Graph

Outbound Good Mail (Last 30 Days)

Number of safe mail sent from the environment within the past 30 days.

Line Graph

Inbound Spam (Last 30 Days)

Number of spam mail received in the environment in the past 30 days.

Line Graph

Outbound Malware (Last 30 Days)

Number of spam mail being sent from the environment in the past 30 days.

Table

Mail Traffic Statistics (30 Days)

An overview of mail traffic within the environment within the past 30 days. Data fields include Inbound and Outbound Good and Spam mail, as well as Outbound Spam Envelope and IP Block.

Table

Spam and Malware Traffic (30 days)

Number of spam and malware mail being sent and received within the environment within the past 30 days.

Heat Map

Messages sent this month

Amount of messages sent by department in the past 30 days.

Teams Usage

An overview of Microsoft Teams usage by users at tenant level.

Stacked Line Graph

30 day call, chat and meeting count

Amount of calls, chats and meetings held within Teams in a 30 day period across the environment.

Column

Teams Chats by Department (This Month)

Amount of Teams chat messages being sent across the environment by department in the past 30 days.

Column

Teams Meetings History by Department (This Month)

Amount of Teams meetings being held across the environment by department in the past 30 days. This chart is sorted by department.

Stacked Column

Teams Meetings History by Department (This Month)

Amount of Teams meetings being held across the environment by department in the past 30 days. This chart is sorted by date.

Stacked Column

Teams Chats by Department (This Month)

Amount of Teams chats being sent across the environment by department in the past 30 days. This chart is sorted by date.

Irregular Sign-Ins

Details on unknown sign-ins at tenant level.

Table

List of Irregular Sign-Ins

Details on failed sign-ins, including Failure Reason, Sign-In Date and Time and Error Code.

Pie Chart

Location of Irregular Sign-Ins (Last 7 Days)

Irregular sign-ins by country in the past 7 days. Interactive wedges include information on Failure Reasons and Sign In Time and Date.

Table

Irregular Sign-In Details Count (Last 7 Days)

Details on the amount of errors that each Error Failure has had in the past 7 days.

Mobile Device Type and Distribution

Details on users' mobile device types and operating systems at tenant level.

Pie Chart

Devices by Client Type

Amount of users associated with each client type.

Stacked Column

Devices by OS with Department

Amount of users associated with each mobile Operating System, sub-grouped by department.

Pie Chart

Active Device OS Distribution

Amount of users associated with each mobile Operating System.

Table

Apple Devices

A list of users who have an Apple device. Data fields include assigned country, access state and device model.

Table

Android Devices

A list of users who have an Android device. Data fields include assigned country, access state and device model.

Table

Windows Devices

A list of users who have a Windows device. Data fields include assigned country, access state and device model.

Heatmap

Device by Type and Country

A chart of how many device manufacturers are associated with users by country.

Administrative Roles and Global Administrators

Details on users' roles and role distribution within an environment.

Table

Administrative roles

A list of users' who have been granted administrative roles within an organization.

Table

Global Administrators

A list of users' who have been granted a global administrator role within an organization.

Table

Defined Roles

A list of users' who have a specific role assigned to them.

Pie Chart

Role Distribution

The number of users in specific roles.

Table

Users with Administrative Role (Extended Details)

Details on a user's role, including role name, type and description.

Timeline

Changes in Roles

Names and details of users' that have had their roles changed.

System reports can be downloaded as a CSV format, but can not be edited, scheduled or deleted from the Report Center. If you would like to edit or schedule a report, you can do so by cloning it, which you can do by clicking on the ellipses or by opening the report and clicking on 'Edit', which will prompt you to clone the report. To find out more on what you can do with a report, click here.

Public Reports

Public reports can be seen, edited, printed, scheduled and/or downloaded by your organization.

Private Reports

Private reports can only be seen by you, and are hidden from the other users of your organization. You can take the same actions as public reports.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating