Chat now with support
Chat with Support

Identity Manager Data Governance Edition 8.1.4 - Technical Insight Guide

One Identity Manager Data Governance Edition Technical Insight Guide Data Governance Edition network communications Data Governance service Data Governance agents Resource activity collection in Data Governance Edition Cloud managed hosts permission level to role mapping QAM module tables Configurable configuration file settings
Data Governance service configuration file settings Data Governance agent configuration file settings
Configurable registry settings PowerShell commands
Adding the PowerShell snap-ins Finding component IDs Data Governance Edition deployment Service account management Managed domain deployment Agent deployment Managed host deployment Account access management Resource access management Governed data management Classification management

Get-QServiceAccounts

Retrieves a list of service accounts registered with the Data Governance server.

Syntax:

Get-QServiceAccounts [-ServiceAccountId] [<String>]] [<CommonParameters>]

Table 128: Parameters
Parameter Description
ServiceAccountId

(Optional) Specify the ID (GUID format) of the service account to be retrieved.

Run the Get-QManagedDomains cmdlet to retrieve a list of managed domains, including the managed domain and service account IDs.

Examples:
Table 129: Examples
Example Description
Get-QServiceAccounts

Retrieves a list of all registered service accounts.

Get-QServiceAccounts -ServiceAccountId 3253af66-c104-4472-b770-c8097b2df6d8 Retrieves information about the specified service account.
Details retrieved:
Table 130: Details retrieved
Detail Description (Associated key or property in QAMServiceAccount table)
ServiceAccountId The value (GUID) assigned to the service account (UID_QAMServiceAccount).
AccountSid The security identifier (SID) assigned to the Active Directory account.
UserDomainName The name of the domain to which the user belongs.
UserName Logon name (pre-Windows 2000) of the Active Directory account (UID_ADSAccount).
UserPrincipalName User principal name (email address) of the service account.
Description The descriptive text entered when the service account was registered with Data Governance Edition.
IsDefaultObjectResolution Indicates whether the account is being used as the Data Governance default account and will be used to connect to Active Directories which do not have explicit service accounts configured.
StatusDetailMessage If applicable, a message about the current state of the data from the agent.
Status The status of the agent.
CanManageDomains

Indicates whether the service account is capable of being impersonated on the Management Server it is being called upon.

NOTE: This is set within the ServiceAccounts InternalService on the Data Governance server. It will be true if impersonation is successful; and false, if impersonation fails.

ServiceAccountName The name of the service account.

Remove-QServiceAccount

Removes a server account from the Data Governance Edition deployment.

Note: Remove any associated managed domains BEFORE removing a service account. Run the Remove-QManagedDomain cmdlet to remove a managed domain from your Data Governance Edition deployment.

Syntax:

Remove-QServiceAccount [-ServiceAccountId] <String> [<CommonParameters>]

Table 131: Parameters
Parameter Description
ServiceAccountId

Specify the ID (GUID format) of the server account to be removed from the list of registered service accounts.

Run the Get-QServiceAccounts cmdlet without any parameters to retrieve a list of registered service accounts, including the assigned service account ID.

Examples:
Table 132: Examples
Example Description

Remove-QServiceAccount -ServiceAccountId b0a0e218-55c1-41d7-9585-bf7578ad1130

 Removes the specified service account from the list of service accounts registered for use by Data Governance Edition.

Set-QServiceAccountUpdated

Notifies the Data Governance server that the service account was updated and the server should process it.

Syntax:

Set-QServiceAccountUpdated [-ServiceAccountId] <String> [<CommonParameters>]

Table 133: Parameters
Parameter Description
ServiceAccountId

Specify the id of the service account to be updated.

Run the Get-QManagedDomains and Get-QServiceAccounts cmdlets to retrieve a list of available service accounts and their IDs.

Examples:
Table 134: Examples
Example Description

Set-QServiceAccountUpdated -ServiceAccountId 18CC36D3-81AE-4856-925B-9B1B1E587381

 Updates the specified service account.

Managed domain deployment

Before you can gather information on the data in your enterprise, you must specify the domain that contains the computers and data that you want to manage. Then assign the service account to access the resources within them.

The following commands are available to you to deploy managed domains. For full parameter details and examples, click a command hyperlink in the table or see the command help, using the Get-Help command.

Table 135: Managed domain deployment commands

Use this command

If you want to

Add-QManagedDomain

Add a new domain to the Data Governance Edition deployment.

For more information, see Add-QManagedDomain.

Get-QManagedDomains

View the list of managed domains in a deployment.

NOTE: You can optionally specify a managed domain ID if you are only interested in a particular domain.

For more information, see Get-QManagedDomains.

Remove-QManagedDomain

Remove a managed domain from your deployment.

For more information, see Remove-QManagedDomain.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating