Chat now with support
Chat with Support

Identity Manager Data Governance Edition 9.2.1 - Technical Insight Guide

One Identity Manager Data Governance Edition Technical Insight Guide Data Governance Edition network communications Data Governance service Data Governance agents Resource activity collection in Data Governance Edition Cloud managed hosts permission level to role mapping QAM module tables Configurable configuration file settings
Data Governance service configuration file settings Data Governance agent configuration file settings
Configurable registry settings PowerShell commands
Adding the PowerShell snap-ins Finding component IDs Data Governance Edition deployment Service account management Managed domain deployment Agent deployment Managed host deployment Account access management Resource access management Governed data management Classification management

indexingEnabled (service identities scanning)

This setting determines whether service identities scanning is enabled. By default, the server sets this to 1 indicating that service identities scanning is enabled.

Table 71: Agent configuration setting: indexingEnabled
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="securityIdentityIndexer">

Setting <Setting name ="indexingEnabled" type="dword">
Value

Valid values:

  • 0: disable services identity scanning
  • 1: enable services identity scanning (default)
How to modify

Replace value as required.

indexingEnabled (share scanning)

This setting determines whether share scanning is enabled. By default, the server sets this to 1 indicating that share scanning is enabled.

Table 72: Agent configuration setting: indexingEnabled
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="share">

Setting <Setting name ="indexingEnabled" type="dword">
Value

Valid values:

  • 0: disable share scanning
  • 1: enable share scanning (default)
How to modify

Replace value as required.

keepQueryDocuments

This a diagnostic setting and is useful when debugging or diagnosing issues with agent queries. When this configuration setting is enabled, agents record the responses they send to the Data Governance server for ALL queries.

Table 73: Agent configuration setting: keepQueryDocuments
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="SecurityDataStore">

Setting <Setting name ="keepQueryDocuments" type="dword">
Value

Valid values:

  • 0: disabled (default)
  • 1: enabled
How to modify

Replace value as required.

Notes The response documents generated by this setting can be very large and will create a significant amount of data on the disk. This setting should not be turned on for more time than is necessary to diagnose any issues encountered.

localGroupResolutionInSeconds

Use this configuration setting to change the number of seconds between scans of local groups.

Table 74: Agent configuration setting: localGroupResolutionInSeconds
Configuration file %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config
Section name

<Section name="Agent">

  <Section name="Services">

    <Section name="localGroup">

Setting <Setting name ="localGroupResolutionInSeconds" type="dword">
Value

Default: 86400 seconds (which is once a day)

How to modify

Replace value as required.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating