Introduction
Data Governance Edition Network Communications
Data Governance service
Data Governance service deployment process
Data Governance service configuration
Data Governance service internal tasks
Manually deploying Data Governance service
Data Governance agents
Resource activity collection in Data Governance Edition
Resource Activity database maintenance
QAM module tables
Configurable configuration file settings
Activity database maintenance configuration
Manually running the activity compression utility
Manually running the activity deletion utility
How to validate resource activity is making it to the Resource Activity database
Data Governance service configuration file settings
Configurable registry settings
additionalOperatingSystems
AgentLeaseRenewPeriod
CollectPoi.CheckFrequencyInMinutes
CollectPoi.IgnoreChangedResourceSynchronization
CollectPoi.IncludeDeviations
CollectPoi.MaxConcurrentQueries
CollectPoi.OverdueThresholdInMinutes
CollectPoi.QueryBatchSize
CollectPoi.QueryTimeoutInMinutes
CollectPoi.QueryUpperBound
DfsDataSyncInterval
DisablePerceivedOwnershipUpdate
FolderSecurity.UseAdminPathsForShareFolders
ManagedHostDeleteBatchSize
MessagingCacheFolder
Metrics.CollectionIntervalInSeconds
MinimumSupportedModuleMigrationVersion
OracleBulkImportBatchSize
PerceivedOwnershipActivityPeriod
PerceivedOwnershipByResourceActivity
PerceivedOwnershipByResourceOwner
PerceivedOwnershipCalcUpdatesRefreshIntervalMinutes
PerceivedOwnershipMaxReturnValue
RemoteExecutor.WaitResultTimeout
RestServicePort
SelfService.AllowNonPublishedGroups
SelfService.AllowUnsychronizedGroups
SelfService.EnableSelfServiceRequest
SelfService.IncludeSuitabilityTraceInfo
SelfService.MarkSuitabilityTraceInfo
SelfService.MaximumMethodsCount
SelfService.SuitabilityThreshold
SuggestedAgentCap
SyncDomainPasswordInterval
VerboseHostForTrusteeLogging
Activity weight multipliers
Self-service suitability calculation multipliers
Data Governance agent configuration file settings
baseActivePort
cloudGroupResolutionInSeconds
indexingEnabled (localGroup scanning)
indexingEnabled (local user rights scanning)
indexingEnabled (service identities scanning)
indexingEnabled (share scanning)
keepQueryDocuments
localGroupResolutionInSeconds
numberOfSharepointScanThreads
OverrideFPolicyName
overrideServerUri
serviceIdentityIndexingResolutionInSeconds
shimCloseTimeoutInMinutes
shimOpenTimeoutInMinutes
shimReceiveTimeoutInMinutes
shimSendTimeoutInMinutes
usageFlushIntervalInSeconds
windowsComputerResourceResolutionInSeconds
Data Governance service registry settings
PowerShell commands
Agent query timeout (AsyncQueryTimeoutInMinutes)
Write default classification level data to database (ClassificationLevelDefaultData)
Default employee SID (DefaultEmployeeSid)
Explicit exclusion of groups (ExclusionByDN)
Filter accounts from Resource access report (FilterNoisyAccounts)
Global agent installation location (GlobalAgentInstallLocation)
Manual FPolicy creation (ManualFPolicyCreation)
Resource access data points (MaxDataPoints)
View deviations data points (MaxDataPoints)
Data governance overview results (MaxResults)
Resource Activity database connection string (QAMAuditActivityDBConnectionString)
Deployment name (QAMDeploymentId)
Oracle deployment: Resource Activity database (QDGDBPlatformOracle)
One Identity Manager database connection string (Q1IMDBConnectionString)
Oracle deployment: One Identity Manager database (Q1IMDBPlatformOracle)
Write default managed group template data to database (ResourceTemplateDefaultData)
Agent start/stop timeout (StartStopServiceTimeout)
WCF timeouts (wcfTimeoutInMinutes)
Reporting timeout (WcfTimeoutReportingInMinutes)
Adding the PowerShell snap-ins
Finding component IDs
Data Governance Edition deployment
About us
Get-QDeploymentInfo
Get-QEncryptionOptions
Get-QServerAllLogs
Get-QServerVersion
Initialize-QDataGovernanceActivity
Initialize-QDataGovernanceServer
Register-QServiceConnectionPoint
Remove-QServiceConnectionPoint
Set-QDeploymentInfo
Set-QEncryptionOptions
Set-QServiceConnection
Service account management
Add-QServiceAccount
Get-QLogonServiceAccount
Get-QServiceAccounts
Remove-QServiceAccount
Set-QServiceAccountUpdated
Managed domain deployment
Agent deployment
Managed host deployment
Add-QDfsManagedHost
Add-QManagedHostByAccountName
Clear-QResourceActivity
Get-QHostsForTrustee
Get-QManagedHosts
Remove-QManagedHost
Set-QManagedHostProperties
Set-QManagedHostUpdated
Trigger-QDfsSync
Account access management
Get-QAccountAccess
Get-QAccountAccessOnHosts
Get-QAccountActivity
Get-QAccountAliases
Get-QAccountsForHost
Get-QADAccount
Get-QGroupMembers
Get-QIndexedTrustees
Resource access management
Export-QResourceAccess
Get-QChildResources
Get-QFileSystemSearchResults
Get-QHostResourceActivities
Get-QPerceivedOwners
Get-QResourceAccess
Get-QResourceActivity
Get-QResourceSecurity
Set-QResourceSecurity
Governed data management
Get-QDataUnderGovernance
Get-QPerceivedOwnerPol
Get-QSelfServiceClientConfiguration
Get-QSelfServiceMethodsToSatisfyRequest
Remove-QDataUnderGovernance
Set-QBusinessOwner
Set-QDataUnderGovernance
Set-QSelfServiceClientConfiguration
Trigger-QDataUnderGovernanceCollection
Upgrade-QDataUnderGovernanceRecords
Classification management
overrideServerUri
Configurable configuration file settings > Data Governance agent configuration file settings > overrideServerUri
Set this configuration setting if you want the agent to connect to a specific Uri and not use the results from an Active Directory service connection point (SCP) search.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="communication"> |
| Setting | <Setting name ="overrideServerUri" type="dword"> |
| Value |
The Uri to be used. Use the net.tcp format, for example: net.tcp://myDGEServerHost.myDomain.local:8722/Broadway/IndexServerAgent.svc |
| How to modify |
|
| Notes |
Use this setting to force a connection when SCP objects cannot be created in the domain where an agent resides or you do not want to use Active Directory queries to find the Data Governance server SCP in the forest and connect to the Data Governance Edition URI configured in the SCP. Set the value to the same URI listed in the Data Governance service app.config (DataGovernanceEdition.Service.exe.config) under one o f the baseAddresses for <service name="QAM.Server.ServiceHosts.IndexServerHost">. |
serviceIdentityIndexingResolutionInSeconds
Configurable configuration file settings > Data Governance agent configuration file settings > serviceIdentityIndexingResolutionInSeconds
serviceIdentityIndexingResolution
InSeconds
Use this configuration setting to change the number of seconds between scans of service identities.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="serviceIdentityIndexer"> |
| Setting |
<Setting name ="serviceIdentityIndexingResolutionInSeconds" type="dword"> |
| Value |
Default: 120 seconds |
| How to modify |
Replace value as required. |
shimCloseTimeoutInMinutes
Configurable configuration file settings > Data Governance agent configuration file settings > shimCloseTimeoutInMinutes
The SharePointShim is used whenever you are monitoring a SharePoint 2010 host. This setting dictates the interval of time provided for a connection to the Shim to close before the transport raises an exception.
|
|
NOTE: This is a global setting and applies to all SharePointShim processes used for a multi-agent SharePoint 2010 managed host. |
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernanceEdition.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="communication"> |
| Setting | <Setting name ="shimCloseTimoutInMinutes" type="dword"> |
| Value |
Default: 1 minute Maximum value is 7 days. |
| How to modify |
|
| Notes |
This setting is not configurable through the UI. |
shimOpenTimeoutInMinutes
Configurable configuration file settings > Data Governance agent configuration file settings > shimOpenTimeoutInMinutes
The SharePointShim is used whenever you are monitoring a SharePoint 2010 host. This setting dictates the interval of time provided for a connection to open to the Shim before the transport raises an exception.
|
|
NOTE: This is a global setting and applies to all SharePointShim processes used for a multi-agent SharePoint 2010 managed host. |
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernanceEdition.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="communication"> |
| Setting | <Setting name ="shimOpenTimoutInMinutes" type="dword"> |
| Value |
Default: 1 minute Maximum value is 7 days. |
| How to modify |
|
| Notes | This setting is not configurable through the UI. |