Chat now with support
Chat with Support

Classification Module 6.1.3 - User Guide

Introduction Deploying Classification in Identity Manager Configuring Classification: Taxonomies, Categories, and Rules
An Overview of Classification Configuration Steps Required to Implement Classification Creating Taxonomies Implementing Rules for Automated Categorization Classifying Resources When Do Categorization and Classification Occur? Managing the Life Cycle of Taxonomies and Categories
Working with Categorized Resources Appendix A: PowerShell Commands Appendix B: Oracle Configuration Appendix C: Classifying Data with Data Governance Templates Appendix D: Creating a Taxonomy to Classify Data

Creating Taxonomies

Careful planning and coordination is required to get the most out of classification in Quest One Identity Manager Data Governance Edition. Ideally, one or more well-organized taxonomies will be deployed in your organization, and used to categorize resources of interest.

NOTE! You must be assigned the role of Classification Analyst or create a customized role that includes relevant permissions in order to create or modify a taxonomy.

A taxonomy is a set of related categories, organized as a tree structure. The top node represents the taxonomy as a whole, and each branch is a category.

All categories in a taxonomy should be related in some way. Create a separate taxonomy for each related set of categories. This makes it easier for users to understand their resources’ categorization.

To view the taxonomies in your environment using the web portal

  • Select Governed Data | Categorization Manager | Taxonomies.

To view all taxonomies in your environment using PowerShell

  • Run the Get-QTaxonomies command with the following mandatory parameter:
    a) ServerAddress
    Provide the name of the computer hosting the Data Governance server, and the port. Enter in the form computername:port number. The default port is 8723.

Working with Taxonomies

Using the Web Portal or Quest.Classification PowerShell snap in, you can create, edit, and import taxonomies. See Taxonomy Deployment Considerations before publishing any taxonomies in your production environment.

You can work with taxonomies using the following methods:

Creating a Taxonomy

When you create a taxonomy, you are providing the base for the category tree, as well as creating a category that could be applied to resources. For example, if you are creating a PHI taxonomy, you will then add categories to it to create the desired taxonomy. However, you can assign rules to the top level node, PHI, for it to be used in automated categorization, or you can make it available for manual categorization. There are a number of parameters associated with a category. See Working with Categories on page 34 for more information. These parameters only affect the use of the top node of the taxonomy tree applied as a category, and do not apply to the taxonomy as a whole. For example, when you select Publish this category, it does not make the entire taxonomy available, only the top node.

To create a taxonomy using the web portal

  1. Select Governed Data | Categorization Manager | Taxonomies.
  2. Click Create new taxonomy.
  3. Provide a name for the taxonomy.
    The name will appear anywhere the taxonomy is shown.
  4. Enter an optional description.
    The description appears in the list of taxonomies on the Manage Taxonomies page.
  5. Modify any of the category parameters. See Working with Categories for more information.
  6. Click Save.
    The Edit Taxonomy dialog box opens. You can either add categories now, or click OK to complete the creation of the taxonomy. For more details, see Creating a Category, Editing Category Settings and Deleting a Category.

To create a taxonomy using PowerShell

  1. Run the Add-QTaxonomy command with the following mandatory parameters:
    1. ServerAddress
      Provide the name of the computer hosting the Data Governance server, and the port. Enter in the form computername:port number. The default port is 8723.
    2. Name
      The name will appear anywhere the taxonomy is shown.
  3. If desired, you can set any of the following optional parameters:
    1. Description
      The description appears in the list of taxonomies on the Manage Taxonomies page.
    2. Category parameters: Risk, CausesGovernance, IsPublished, IsAutomaticClassificationEnabled, IsMutuallyExclusive, IsStrictlyOrdered.
      By default, the risk is set to 0, and all other parameters are set to $false. The threshold is set to 1. For more information on setting the parameters on a category, see Working with Categories.

Importing and Replacing Taxonomies

All sample taxonomies provided with Data Governance Edition (see Appendix C: Classifying Data with Data Governance Templates) as well as any previously created custom taxonomies that have been stored in the Data Governance Edition installation directory (C:\Program Files\Quest Software\Data Governance\Server\TemplateFiles) are listed in the Catalog view in the Categorization Manager.

Depending on the state of the taxonomy within your deployment, you will be able to perform one of the following:

  • Import a new taxonomy into your deployment
  • Replace an existing taxonomy in your deployment
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating