Introduction
Data Governance Edition Network Communications
Data Governance service
Data Governance service deployment process
Data Governance service configuration
Data Governance service internal tasks
Manually deploying Data Governance service
Data Governance agents
Resource activity collection in Data Governance Edition
Resource Activity database maintenance
QAM module tables
Configurable configuration file settings
Activity database maintenance configuration
Manually running the activity compression utility
Manually running the activity deletion utility
How to validate resource activity is making it to the Resource Activity database
Data Governance service configuration file settings
Configurable registry settings
additionalOperatingSystems
AgentLeaseRenewPeriod
CollectPoi.CheckFrequencyInMinutes
CollectPoi.IgnoreChangedResourceSynchronization
CollectPoi.IncludeDeviations
CollectPoi.MaxConcurrentQueries
CollectPoi.OverdueThresholdInMinutes
CollectPoi.QueryBatchSize
CollectPoi.QueryTimeoutInMinutes
CollectPoi.QueryUpperBound
DfsDataSyncInterval
DisablePerceivedOwnershipUpdate
FolderSecurity.UseAdminPathsForShareFolders
ManagedHostDeleteBatchSize
MessagingCacheFolder
Metrics.CollectionIntervalInSeconds
MinimumSupportedModuleMigrationVersion
OracleBulkImportBatchSize
PerceivedOwnershipActivityPeriod
PerceivedOwnershipByResourceActivity
PerceivedOwnershipByResourceOwner
PerceivedOwnershipCalcUpdatesRefreshIntervalMinutes
PerceivedOwnershipMaxReturnValue
RemoteExecutor.WaitResultTimeout
RestServicePort
SelfService.AllowNonPublishedGroups
SelfService.AllowUnsychronizedGroups
SelfService.EnableSelfServiceRequest
SelfService.IncludeSuitabilityTraceInfo
SelfService.MarkSuitabilityTraceInfo
SelfService.MaximumMethodsCount
SelfService.SuitabilityThreshold
SuggestedAgentCap
SyncDomainPasswordInterval
VerboseHostForTrusteeLogging
Activity weight multipliers
Self-service suitability calculation multipliers
Data Governance agent configuration file settings
baseActivePort
cloudGroupResolutionInSeconds
indexingEnabled (localGroup scanning)
indexingEnabled (local user rights scanning)
indexingEnabled (service identities scanning)
indexingEnabled (share scanning)
keepQueryDocuments
localGroupResolutionInSeconds
numberOfSharepointScanThreads
OverrideFPolicyName
overrideServerUri
serviceIdentityIndexingResolutionInSeconds
shimCloseTimeoutInMinutes
shimOpenTimeoutInMinutes
shimReceiveTimeoutInMinutes
shimSendTimeoutInMinutes
usageFlushIntervalInSeconds
windowsComputerResourceResolutionInSeconds
Data Governance service registry settings
PowerShell commands
Agent query timeout (AsyncQueryTimeoutInMinutes)
Write default classification level data to database (ClassificationLevelDefaultData)
Default employee SID (DefaultEmployeeSid)
Explicit exclusion of groups (ExclusionByDN)
Filter accounts from Resource access report (FilterNoisyAccounts)
Global agent installation location (GlobalAgentInstallLocation)
Manual FPolicy creation (ManualFPolicyCreation)
Resource access data points (MaxDataPoints)
View deviations data points (MaxDataPoints)
Data governance overview results (MaxResults)
Resource Activity database connection string (QAMAuditActivityDBConnectionString)
Deployment name (QAMDeploymentId)
Oracle deployment: Resource Activity database (QDGDBPlatformOracle)
One Identity Manager database connection string (Q1IMDBConnectionString)
Oracle deployment: One Identity Manager database (Q1IMDBPlatformOracle)
Write default managed group template data to database (ResourceTemplateDefaultData)
Agent start/stop timeout (StartStopServiceTimeout)
WCF timeouts (wcfTimeoutInMinutes)
Reporting timeout (WcfTimeoutReportingInMinutes)
Adding the PowerShell snap-ins
Finding component IDs
Data Governance Edition deployment
About us
Get-QDeploymentInfo
Get-QEncryptionOptions
Get-QServerAllLogs
Get-QServerVersion
Initialize-QDataGovernanceActivity
Initialize-QDataGovernanceServer
Register-QServiceConnectionPoint
Remove-QServiceConnectionPoint
Set-QDeploymentInfo
Set-QEncryptionOptions
Set-QServiceConnection
Service account management
Add-QServiceAccount
Get-QLogonServiceAccount
Get-QServiceAccounts
Remove-QServiceAccount
Set-QServiceAccountUpdated
Managed domain deployment
Agent deployment
Managed host deployment
Add-QDfsManagedHost
Add-QManagedHostByAccountName
Clear-QResourceActivity
Get-QHostsForTrustee
Get-QManagedHosts
Remove-QManagedHost
Set-QManagedHostProperties
Set-QManagedHostUpdated
Trigger-QDfsSync
Account access management
Get-QAccountAccess
Get-QAccountAccessOnHosts
Get-QAccountActivity
Get-QAccountAliases
Get-QAccountsForHost
Get-QADAccount
Get-QGroupMembers
Get-QIndexedTrustees
Resource access management
Export-QResourceAccess
Get-QChildResources
Get-QFileSystemSearchResults
Get-QHostResourceActivities
Get-QPerceivedOwners
Get-QResourceAccess
Get-QResourceActivity
Get-QResourceSecurity
Set-QResourceSecurity
Governed data management
Get-QDataUnderGovernance
Get-QPerceivedOwnerPol
Get-QSelfServiceClientConfiguration
Get-QSelfServiceMethodsToSatisfyRequest
Remove-QDataUnderGovernance
Set-QBusinessOwner
Set-QDataUnderGovernance
Set-QSelfServiceClientConfiguration
Trigger-QDataUnderGovernanceCollection
Upgrade-QDataUnderGovernanceRecords
Classification management
SelfService.IncludeSuitabilityTraceInfo
Configurable configuration file settings > Data Governance service configuration file settings > SelfService.IncludeSuitabilityTraceInfo
This key is used to turn on the suitability trace information property in the results of a self-service request. When enabled, additional trace logging is provided regarding the "best fit" group calculation.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Server\DataGovernanceEdition.Service.exe.config |
| Section name | <appSettings> |
| Setting | <add key="SelfService.IncludeSuitabilityTraceInfo" value="false"/> |
| Value |
Valid values:
|
| How to modify | Replace the value as required. |
SelfService.MarkSuitabilityTraceInfo
Configurable configuration file settings > Data Governance service configuration file settings > SelfService.MarkSuitabilityTraceInfo
This key indicates whether the suitability integer of the groups returned through a self-service request is visible in the user interface.
|
|
NOTE: The suitability integer is the total after all of the calculators have been run and is used to rank the groups from which the business owner can choose. The group with the highest total (suitability integer) is marked as the "best fit" group. |
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Server\DataGovernanceEdition.Service.exe.config |
| Section name | <appSettings> |
| Setting | <add key="SelfService.MarkSuitabilityVisible" value="false"/> |
|
Value |
Valid values:
|
| How to modify | Replace the value as required. |
SelfService.MaximumMethodsCount
Configurable configuration file settings > Data Governance service configuration file settings > SelfService.MaximumMethodsCount
This key configures the maximum number of self-service groups to be returned for consideration. It is used by the AccessSelfService internal service that handles self-service requests initiated from the IT Shop.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Server\DataGovernanceEdition.Service.exe.config |
| Section name | <appSettings> |
| Setting | <add key ="SelfService.MaximumMethodsCount" value="5"/> |
| Value |
Default: 5 |
| How to modify | Replace the value as required. |
SelfService.SuitabilityThreshold
Configurable configuration file settings > Data Governance service configuration file settings > SelfService.SuitabilityThreshold
This key defines the lowest possible suitability index that can be returned by the self-service access request algorithm. Any group whose suitability drops below this threshold will be removed from the list of suitable groups. This key is used by the AccessSelfService internal service that handles self-service requests initiated through the IT Shop.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Server\DataGovernanceEdition.Service.exe.config |
| Section name | <appSettings> |
| Setting | <add key ="SelfService.SuitabilityThreshold" value="100"/> |
| Value |
Default: 100 |
| How to modify | Replace the value as required. |
| Notes | This setting affects what groups are shown to the business owner. |