Identity Manager Data Governance Edition 9.2

Identity Manager Data Governance Edition 9.2 - User Guide

This guide contains the information required to administer One Identity Manager Data Governance Edition to manage the unstructured data in your organization. It contains detailed information about the Data Governance Edition features and includes instructions to help administrators perform day-to-day administration activities.

Before you can gather information on the unstructured data in your organization, you must:

Identify the domains that you want to access and provide the credentials that can perform operations on those resources. For more information, see Adding and editing a service account.
Select the domains that contain the computers and data that you want to manage and assign the Service Account. For more information, see Adding a managed domain.
Add the hosts that hold the resources that you want to manage. For more information, see Adding and configuring managed hosts.

This initial setup information is also covered in the One Identity Manager Data Governance Edition Deployment Guide and should already be completed.

Once you have added a managed host, you can:

Examine a file system, SharePoint farm or other supported platforms to see what users and groups have access to it, and modify the access if required. For more information, see Browsing your environment.
Examine a user or group to ensure they have the correct data access. For more information, see Managing account access.
Compare account access for selected users or groups. For more information, see Comparing accounts.
Simulate the addition or removal of users or groups from selected groups. For more information, see Simulating the effects of group membership modifications on an account.
Calculate perceived ownership to identify potential business owners for data within your environment. For more information, see Calculating perceived owner.
Place data under governance and leverage the self-service request attestations, policies, and reports that help you to ensure your data is in compliance. For more information, see Placing a resource under governance.

Available documentation

Data Governance node and views

The Data Governance Edition elements are embedded into the Manager client application. The user interface elements communicate with the Data Governance service and directly with the One Identity Manager database. Communication with the database is performed in the same way as any other One Identity Manager database communication, using the authentication information provided when the user launches the client tools.

The Manager is the main administration tool for configuring Data Governance Edition components and governing unstructured data to secure and control access to your organization's data. The Data Governance node in the Manager's navigation view provides access to the data required to perform the following tasks:

Configure Data Governance Edition, including:
- Configuring Data Governance service accounts for managed domains
- Adding and configuring managed hosts
- Deploying Data Governance agents
Manage resource access
Manage account access
Manage and set security permissions for network objects
Manage and set SharePoint security permission levels
Bring data under governance
Define classification levels for use in classifying governed data

From the Data Governance navigation view, the following main views become available to configure and manage your Data Governance Edition deployment:

In addition to these main views, the following Data Governance Edition views are available to manage resource access, account access and governed data:

Info system view

Selecting Info system in the Data Governance navigation view displays dashboards for viewing general statistics and the overall status of your Data Governance Edition deployment in real-time.

Note: In addition, you can view these dashboards using the Data Governance server landing page (https://<DGEServerIPAddress>:8723/server/home).

Note: The Data Governance Edition statistics displayed in these dashboards are calculated on an hourly schedule. To change the schedule, edit the hourly schedule defined in the QAM statistics schedule in the Designer (Getting Started | Edit schedules or Base Data | General | Schedules).

The Info system view in the Manager includes three One Identity Manager statistics (as indicated in the table) and these are calculated based on the schedule defined in the Calculate statistics schedule. The Calculate statistics schedule is disabled by default and must be enabled in order to calculate these One Identity Manager statistics. These statistics are not available on the Data Governance server landing page.

Table 1: Data Governance Edition statistics
Statistic / Metric	Description
Managed Hosts	Pie chart shows the number of computer objects found in your environment, indicating the number that are managed hosts and the number that are not yet managed (unmanaged). NOTE: This statistic does not include SharePoint Farm, DFS Root or NFS managed hosts.
Managed Host Status	Pie chart shows the number of managed hosts by status (OK vs. Not OK). NOTE: This statistic does not include SharePoint Farm, DFS Root or NFS managed hosts.
Managed Host Type	Pie chart shows the number of managed hosts defined in your Data Governance Edition deployment, broken down by host type.
Managed Hosts with Resource Activity	Pie chart shows the number of managed hosts that are collecting resource activity (Enabled) and the number of managed hosts that are not collecting resource activity (Disabled). NOTE: Since resources on Cloud managed hosts cannot collect resource activity, those resources are always included as Disabled.
Managed Hosts Without Governed Data	Graphic shows managed hosts that have resources that have not been placed under governance. The graphic uses the following thresholds: Green: Less than 25% of all managed hosts have data that is not being governed. Orange: Between 25% and 75% of all managed hosts have data that is not being governed. Red: More than 75% of all managed hosts have data that is not being governed. The total number of managed hosts with ungoverned data is displayed under the graphic. NOTE: On the Data Governance server landing page, this is a pie chart showing managed hosts with data that has not been placed under governance.
Governed Data Without Business Owners	Graphic shows governed data without an assigned business owner. The graphic uses the following thresholds: Green: Less than 25% of all governed data does not have a business owner assigned. Orange: Between 25% and 75% of all governed data does not have a business owner assigned. Red: More than 75% of all governed data does not have a business owner assigned. The total number of governed data without an assigned business owner is displayed under the graphic. NOTE: On the Data Governance server landing page, this is a pie chart showing governed data without an assigned business owner.
Governed Data by Resource Type	Pie chart shows the number of governed resources, broken down by resource type.
Published vs Unpublished Governed Data	Pie chart shows the number of governed resources that are published to the IT Shop and the number of governed resources that are not published. NOTE: Since resources on NFS and Cloud managed hosts cannot be published to the IT Shop, those resources are always included as Unpublished.
Published Data with Organizational Restrictions	Pie chart shows the number of published resources belonging to a restriction list, broken down by organizational structure (department, location, or cost center).
Security Index by Account Type	Pie chart shows the number of accounts with direct access points that have been scanned by a Data Governance agent, broken down by account type: Azure AD Group Azure AD User Domain Group Domain User Machine Local Group Machine Local User Other SharePoint Group SharePoint Identity SharePoint Online Group SharePoint User Unix Group Unix Owner
Attestations	Pie chart shows the number of attestations cases, broken down by Overdue, Outstanding, Closed overdue, and Closed in time cases. NOTE: This statistic does not include Cloud managed hosts. NOTE: This is a One Identity Manager statistic. In order to calculate and update this statistic, you must enable the Calculate statistics schedule in the Designer (Getting Started \| Edit schedules or Base Data \| General \| Schedules). Once enabled, data for this graphic is updated based on the defined schedule.
Policy violations (current)	Graphic shows the number of current policy violations. The graphic uses the following thresholds: Green: Zero violations Red: One or more violations The total number of violations is displayed below the graphic. NOTE: This statistic does not include Cloud managed hosts. NOTE: This is a One Identity Manager statistic. In order to calculate and update this statistic, you must enable the Calculate statistics schedule in the Designer (Getting Started \| Edit schedules or Base Data \| General \| Schedules). Once enabled, data for this graphic is updated based on the defined schedule.
Compliance Rule Violations (current)	Graphic shows the number of current compliance rule violations. The graphic uses the following thresholds: Green: Zero violations Red: One or more violations The total number of violations is displayed below the graphic. NOTE: This statistic does not include Cloud managed hosts. NOTE: This is a One Identity Manager statistic. In order to calculate and update this statistic, you must enable the Calculate statistics schedule in the Designer (Getting Started \| Edit schedules or Base Data \| General \| Schedules). Once enabled, data for this graphic is updated based on the defined schedule.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Identity Manager Data Governance Edition 9.2 - User Guide

User Guide Introduction

Available documentation

Data Governance node and views

Info system view