The following application roles are specifically for Classification functionality. They are to be used in conjunction with Quest One Identity Manager and Data Governance specific application roles. For details on applying application roles, see the Quest One Identity Manager Getting Started Guide and the Data Governance Edition User Guide.

Administrators

Employees assigned this role are responsible for the care and maintenance of the Data Governance Edition deployment including the Classification services. This Employee uses the administration tools (Manager/Identity Manager) to ensure the Business Owners, Classification Analyst, and Compliance Officers have access to all required information through the web portal.

They are primarily responsible for the deployment of the managed hosts, managed domains, service accounts, Classification Servers, and Classification Workers.

Members of this role can:

• Manage the Classification infrastructure and services using the Manager.
• Configure the file extensions that will be classified by the automated system.
• Modify taxonomy structures, as well as any category properties.
• Manage the categorizations of any resource, regardless of ownership.
• Manage the automated classification and categorizations, including rules and category associations.
• Create and manage rules and text extractors used by the automated system.
• Run PowerShell commands to manage taxonomies and analyze the classification environment.

Classification Analyst

Employees assigned this role are responsible for implementing classification, taxonomies, and rules and managing the automated system as designed by the business. This employee uses the web portal to modify rules, troubleshoot categorizations, view classified resources across the entire deployment, and manage taxonomies.

Members of this role can:

• Configure file extensions that will be classified by the automated system using the web portal.
• Modify taxonomy structures and category properties.
• Manage the categorizations of any resource regardless of ownership.
• Manage the automated classification and categorization, including rules and category associations.
• Create and manage rules and text extractors used by the automated system.
• Run PowerShell commands to manage taxonomies and analyze the classification environment.

Compliance and Security Officer

Employees assigned this role are responsible for over seeing the Classification deployment and ensuring security requirements are met as defined by the organization. They are responsible for reviewing classified resources across the system regardless of ownership.

Members of this role can:

• View all taxonomy structures and category properties and settings through the web portal.
• View all classifications and categorizations of all resources in the system, regardless of ownership.

Business Owner

Employees assigned this role are responsible, through the web portal, for managing and attesting to the classification of resources that they own.

The Direct Owner role (which is automatically assigned to users when they are assigned as the owner of a resource), can perform the same functions as the Business Owner.

Members of this role can:

• Manage the categorizations of their owned resources.Read all classifications on their owned resources.

To assign application roles

1. In the Quest One Identity Manager Navigation view, select Employees.
2. In the Results list, select the required employee.
3. In the Task view, select Assign Identity Manager application roles.
4. Apply the required application role, and save your changes.

Contents

• Gather Diagnostic Information on the Classification Server and Workers
• Review Deployed Classification Workers
• Review the Classification Service

There are a number of PowerShell commands available to help you examine your environment and troubleshoot any issues with it. For details, see Appendix A: PowerShell Commands.

The Get-QCSSupportBundle command gathers Classification system information (such as Classification services status, Classification system configuration, event bus configuration/queue size, log files, and registered services) and Windows system information (such as environment variables, installed services, logical disk, memory cache, memory devices, network adapters, operating system, page file usage, processor information, running processes, and Windows event logs.)

You need to import the QuestQCS snapin by running the Import-Module QuestQCS command and run the Connect-QCSClient command before you can run the Get-QCSSupportBundle.

You can use the Get-QWorkerServers command to view a list of computers hosting your worker servers to help you troubleshoot connection or other issues. You can also confirm that the proper version of the classification worker is installed.