Classification management
Classification is included in Data Governance Edition, however you should first define the classification levels in Data Governance Edition to match those defined by your company. Once defined, you can use these classification levels to classify governed resources.
The following commands are available to manage the classification levels used in your Data Governance Edition deployment and to assign a classification level to a governed resource. For full parameter details and examples, click a command hyperlink in the table or see the command help, using the Get-Help command.
Add-QClassificationLevel
Defines a new classification level for use in your Data Governance Edition deployment.
Syntax:
Add-QClassifictionLevel [-Name] <String> [-Description] <String> [[-SortOrder] <Int>] [<CommonParamters>]
Table 252: Parameters
| Name |
Specify the name to be associated with the new classification level.
The length of the name is limited to 512 characters. Any text is allowed, including spaces and other 'special characters'. |
| Description |
Enter descriptive text to be associated with the new classification level.
Any text is allowed, including spaces and other 'special characters'. |
| SortOrder |
(Optional) Specify the display order of the new classification level.
The classification levels are displayed in ascending order based on SortOrder. If no SortOrder value is specified, the classification level will appear at the top of the list. |
Examples:
Table 253: Examples
|
Add-QClassificationLevel -Name "Internal Eyes Only" -Description "Intended for internal distribution within the organization." -SortOrder 1 |
Adds a new "Internal Eyes Only" classification level. |
Get-QClassificationLevelConfiguration
Retrieves details about the classification levels configured in your Data Governance Edition deployment.
Syntax:
Get-QClassificationLevelConfiguration [<CommonParameters>]
Examples:
Table 254: Examples
| Get-QClassificationLevelConfiguration |
Returns details about each classification levels previously configured, including the classification ID. |
Details retrieved:
For each classification level configured, this cmdlet returns the following details.
Table 255: Details retrieved
| Id |
The identifier assigned to the classification level by Data Governance Edition (UID_QAMClassificationLevel). |
| Name |
The name of the classification level. For example: Critical Handling (Name). |
| Description |
The descriptive text associated with the classification level (Description). |
| SortOrder |
The display order value assigned to the classification level (SortOrder). |
Get-QDataUnderGovernanceByClassificationLevel
Retrieves a list of governed resources assigned a specific classification level.
Syntax:
Get-QDataUnderGovernanceByClassificationLevel [-ClassificationLevelId] <String> [<CommonParameters>]
Table 256: Parameters
| ClassificationLevelId |
Specify the identifier assigned to the classification level.
Run the Get-QClassificationLevelConfiguration cmdlet to retrieve a list of configured classification levels, including their assigned identifiers. |
Examples:
Table 257: Examples
|
Get-QDataUnderGovernanceByClassificationLevel -ClassificationLevelId 51442B53-A9BE-4EE0-8A89-B5D5ED3CF387 |
Returns a list of the governed resources associated with the specified classification level. |
Details retrieved:
Table 258: Details retrieved
| ManagedHostId |
Value (GUID) assigned to the managed host computer. |
| IsForITShop |
Indicates if the resource is available for requests through the IT Shop. |
| DatePublishedToITShop |
The date (UTC) when the resource was published to the IT Shop. |
| IsPublishable |
Indicates that the resource is able to be published to the IT Shop. |
| IsPointOfInterest |
Indicates that a point of interest was intentionally placed under governance. |
| RequiresOwnership |
Indicates that the resource requires that an owner be assigned. |
| DisplayName |
Name of the governed resource. |
| DisplayPath |
Path and name of the governed resource. |
| Description |
Descriptive information entered for the governed resource. |
| FullPath |
Full path of the governed resource. |
| FullPathHashSHA1 |
Hash value over the full path for unique identification. |
| Justification |
The reason for assigning this owner to the resource. |
| OwnershipSetBy |
Name of the account that set the owner. |
| PlacedUnderGovernanceBy |
Name of the account that placed the resource under governance. |
| RiskIndex |
Calculated risk index of all assignments to this data. |
| ActivityResourceId |
The value that relates the roots in this database to data in the Data Governance activity resource database. |
| DateOwnershipSet |
The date (UTC) when the ownership of the resource was set. |
| UID_QAMDuG |
The identifier assigned to the governed resource by Data Governance Edition. |
| IsStale |
Indicates whether the resource was renamed or deleted. |
| LastEncounteredTime |
The time detailed security information was successfully collected. |
| PersonOwnerKey |
If you have assigned a person as the business owner of this resource, this is the primary key of that person. |
| PersonOwnerDisplay |
If a person is assigned as the business owner, the name of that employee. |
| RoleOwnerKey |
If you have assigned a role as the business owner of this resource, this is the primary key of that role. |
| RoleOwnerDisplay |
If an application role is assigned as the business owner, the name of that application role. |
| ResourceType |
The governed data type. |
| ManagedHostName |
The name of the managed host computer. |
| UseBackingFolderSecurity |
Indicates to use the backing folder of a share. |
| LastPoiCollection |
The date (UTC) when the POI was last collected. |
| LastPoiSubmission |
The date (UTC) when the POI was last submitted. |
| Security |
The security used for governance. (SecurityForGovernance) |
| ClassificationLevelId |
If a classification level is assigned, the identifier assigned to the classification level. (UID_QAMClassificationLevelMan Value) |
| ClassificationLevelName |
If a classification level is assigned, the name assigned to the classification level. (UID_QAMClassificationLevelMan) |
