Chat now with support
Chat mit Support

Identity Manager Data Governance Edition 8.1.1 - Technical Insight Guide

Introduction Data Governance Edition Network Communications Data Governance service Data Governance agents Resource activity collection in Data Governance Edition Cloud managed hosts permission level to role mapping QAM module tables Configurable configuration file settings
Data Governance service configuration file settings Data Governance agent configuration file settings
Configurable registry settings PowerShell commands
Adding the PowerShell snap-ins Finding component IDs Data Governance Edition deployment Service account management Managed domain deployment Agent deployment Managed host deployment Account access management Resource access management Governed data management Classification management

OverrideFPolicyName

When working with NetApp filer devices, it may be useful to use a shorthand name, especially when working with simulator devices. You can use this configuration setting to override the name of the policy the FPolicy change watcher connects to. You can also use this configuration setting to specify the name of a manually created FPolicy.

Table 70: Configuration setting: OverrideFPolicyName
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<"Agent">

  <"Services">

    <"ChangeMonitoring">

Setting <Setting name="OverrideFPolicyName">
Value

FPolicy name the agent is to register with.

How to modify
  1. Stop the agent service.
  2. Set the overrideFPolicyName.
  3. Start the agent service.
Notes

This configuration setting only applies to NetApp 7-Mode devices with CIFS file system protocol enabled.

If you have an FPolicy defined for the Data Governance agent outside of the One Identity Manager framework, use this configuration setting to enter the exact FPolicy name. When an FPolicy name is set using this configuration setting, the Data Governance server will not create an FPolicy and the Data Governance agent will update the FPolicy name provided when communicating with the NetApp device. If the FPolicy name is not defined using this configuration setting, the Data Governance server creates an FPolicy with a name that matches the agent instance folder name located on the server where the agent runs. An example of an FPolicy name automatically created by the Data Governance server is "DGE_TEST_myNetApp_myDomain_local".

overrideServerUri

Set this configuration setting if you want the agent to connect to a specific Uri and not use the results from an Active Directory service connection point (SCP) search.

Table 71: Agent configuration setting: overrideServerUri
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="communication">

Setting <Setting name ="overrideServerUri" type="dword">
Value

The Uri to be used.

Use the net.tcp format, for example: net.tcp://myDGEServerHost.myDomain.local:8722/Broadway/IndexServerAgent.svc

How to modify
  1. Stop the agent service.
  2. Set the overrideServerUri.
  3. Start the agent service.
Notes

Use this setting to force a connection when SCP objects cannot be created in the domain where an agent resides or you do not want to use Active Directory queries to find the Data Governance server SCP in the forest and connect to the Data Governance Edition URI configured in the SCP.

Set the value to the same URI listed in the Data Governance service app.config (DataGovernanceEdition.Service.exe.config) under one o f the baseAddresses for <service name="QAM.Server.ServiceHosts.IndexServerHost">.

serviceIdentityIndexingResolutionInSeconds

Use this configuration setting to change the number of seconds between scans of service identities.

Table 72: Agent configuration setting: serviceIdentityIndexingResolutionInSeconds
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="serviceIdentityIndexer">

Setting

<Setting name ="serviceIdentityIndexingResolutionInSeconds" type="dword">

Value

Default: 120 seconds

How to modify

Replace value as required.

shimCloseTimeoutInMinutes

The SharePointShim is used whenever you are monitoring a SharePoint 2010 host. This setting dictates the interval of time provided for a connection to the Shim to close before the transport raises an exception.

NOTE: This is a global setting and applies to all SharePointShim processes used for a multi-agent SharePoint 2010 managed host.
Table 73: Agent configuration setting: shimCloseTimeoutInMinutes
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernanceEdition.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="communication">

Setting <Setting name ="shimCloseTimoutInMinutes" type="dword">
Value

Default: 1 minute

Maximum value is 7 days.

How to modify
  1. Stop the agent service.
  2. Change the shimCloseTimeoutInMinutes, replacing the value as required.
  3. Start the agent service.
Notes

This setting is not configurable through the UI.

Verwandte Dokumente