you can use it if you have enabled anonymization for resolving an anonymus user to a named user. if you enabled anonymization the reporting shows only user1, user2, domain1, domain2, etc. you need two passwords for anonymization/deanonymization it's an four eye prinzipal.