Introduction
Data Governance Edition Network Communications
Data Governance service
Data Governance service deployment process
Data Governance service configuration
Data Governance service internal tasks
Manually deploying Data Governance service
Data Governance agents
Resource activity collection in Data Governance Edition
Resource Activity database maintenance
QAM module tables
Configurable configuration file settings
Activity database maintenance configuration
Manually running the activity compression utility
Manually running the activity deletion utility
How to validate resource activity is making it to the Resource Activity database
Data Governance service configuration file settings
Configurable registry settings
additionalOperatingSystems
AgentLeaseRenewPeriod
CollectPoi.CheckFrequencyInMinutes
CollectPoi.IgnoreChangedResourceSynchronization
CollectPoi.IncludeDeviations
CollectPoi.MaxConcurrentQueries
CollectPoi.OverdueThresholdInMinutes
CollectPoi.QueryBatchSize
CollectPoi.QueryTimeoutInMinutes
CollectPoi.QueryUpperBound
DfsDataSyncInterval
DisablePerceivedOwnershipUpdate
FolderSecurity.UseAdminPathsForShareFolders
ManagedHostDeleteBatchSize
MessagingCacheFolder
Metrics.CollectionIntervalInSeconds
MinimumSupportedModuleMigrationVersion
OracleBulkImportBatchSize
PerceivedOwnershipActivityPeriod
PerceivedOwnershipByResourceActivity
PerceivedOwnershipByResourceOwner
PerceivedOwnershipCalcUpdatesRefreshIntervalMinutes
PerceivedOwnershipMaxReturnValue
RemoteExecutor.WaitResultTimeout
RestServicePort
SelfService.AllowNonPublishedGroups
SelfService.AllowUnsychronizedGroups
SelfService.EnableSelfServiceRequest
SelfService.IncludeSuitabilityTraceInfo
SelfService.MarkSuitabilityTraceInfo
SelfService.MaximumMethodsCount
SelfService.SuitabilityThreshold
SuggestedAgentCap
SyncDomainPasswordInterval
VerboseHostForTrusteeLogging
Activity weight multipliers
Self-service suitability calculation multipliers
Data Governance agent configuration file settings
baseActivePort
cloudGroupResolutionInSeconds
indexingEnabled (localGroup scanning)
indexingEnabled (local user rights scanning)
indexingEnabled (service identities scanning)
indexingEnabled (share scanning)
keepQueryDocuments
localGroupResolutionInSeconds
numberOfSharepointScanThreads
OverrideFPolicyName
overrideServerUri
serviceIdentityIndexingResolutionInSeconds
shimCloseTimeoutInMinutes
shimOpenTimeoutInMinutes
shimReceiveTimeoutInMinutes
shimSendTimeoutInMinutes
usageFlushIntervalInSeconds
windowsComputerResourceResolutionInSeconds
Data Governance service registry settings
PowerShell commands
Agent query timeout (AsyncQueryTimeoutInMinutes)
Write default classification level data to database (ClassificationLevelDefaultData)
Default employee SID (DefaultEmployeeSid)
Explicit exclusion of groups (ExclusionByDN)
Filter accounts from Resource access report (FilterNoisyAccounts)
Global agent installation location (GlobalAgentInstallLocation)
Manual FPolicy creation (ManualFPolicyCreation)
Resource access data points (MaxDataPoints)
View deviations data points (MaxDataPoints)
Data governance overview results (MaxResults)
Resource Activity database connection string (QAMAuditActivityDBConnectionString)
Deployment name (QAMDeploymentId)
Oracle deployment: Resource Activity database (QDGDBPlatformOracle)
One Identity Manager database connection string (Q1IMDBConnectionString)
Oracle deployment: One Identity Manager database (Q1IMDBPlatformOracle)
Write default managed group template data to database (ResourceTemplateDefaultData)
Agent start/stop timeout (StartStopServiceTimeout)
WCF timeouts (wcfTimeoutInMinutes)
Reporting timeout (WcfTimeoutReportingInMinutes)
Adding the PowerShell snap-ins
Finding component IDs
Data Governance Edition deployment
About us
Get-QDeploymentInfo
Get-QEncryptionOptions
Get-QServerAllLogs
Get-QServerVersion
Initialize-QDataGovernanceActivity
Initialize-QDataGovernanceServer
Register-QServiceConnectionPoint
Remove-QServiceConnectionPoint
Set-QDeploymentInfo
Set-QEncryptionOptions
Set-QServiceConnection
Service account management
Add-QServiceAccount
Get-QLogonServiceAccount
Get-QServiceAccounts
Remove-QServiceAccount
Set-QServiceAccountUpdated
Managed domain deployment
Agent deployment
Managed host deployment
Add-QDfsManagedHost
Add-QManagedHostByAccountName
Clear-QResourceActivity
Get-QHostsForTrustee
Get-QManagedHosts
Remove-QManagedHost
Set-QManagedHostProperties
Set-QManagedHostUpdated
Trigger-QDfsSync
Account access management
Get-QAccountAccess
Get-QAccountAccessOnHosts
Get-QAccountActivity
Get-QAccountAliases
Get-QAccountsForHost
Get-QADAccount
Get-QGroupMembers
Get-QIndexedTrustees
Resource access management
Export-QResourceAccess
Get-QChildResources
Get-QFileSystemSearchResults
Get-QHostResourceActivities
Get-QPerceivedOwners
Get-QResourceAccess
Get-QResourceActivity
Get-QResourceSecurity
Set-QResourceSecurity
Governed data management
Get-QDataUnderGovernance
Get-QPerceivedOwnerPol
Get-QSelfServiceClientConfiguration
Get-QSelfServiceMethodsToSatisfyRequest
Remove-QDataUnderGovernance
Set-QBusinessOwner
Set-QDataUnderGovernance
Set-QSelfServiceClientConfiguration
Trigger-QDataUnderGovernanceCollection
Upgrade-QDataUnderGovernanceRecords
Classification management
shimReceiveTimeoutInMinutes
Configurable configuration file settings > Data Governance agent configuration file settings > shimReceiveTimeoutInMinutes
The SharePointShim is used whenever you are monitoring a SharePoint 2010 host. This setting dictates the interval of time that a connection can remain inactive, where no application messages are received from the Shim before it is dropped.
|
|
NOTE: This is a global setting and applies to all SharePointShim processes used for a multi-agent SharePoint 2010 managed host. |
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernanceEdition.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="communication"> |
| Setting | <Setting name ="shimReceiveTimoutInMinutes" type="dword"> |
| Value |
Default: 10 minutes Maximum value is 7 days. |
| How to modify |
|
| Notes | This setting is not configurable through the UI. |
shimSendTimeoutInMinutes
Configurable configuration file settings > Data Governance agent configuration file settings > shimSendTimeoutInMinutes
The SharePointShim is used whenever you are monitoring a SharePoint 2010 host. When writing to the Shim, this setting dictates the interval of time provided for a write operation to complete before the transport raises an exception.
|
|
NOTE: This is a global setting and applies to all SharePointShim processes used for a multi-agent SharePoint 2010 managed host. |
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernanceEdition.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="communication"> |
| Setting | <Setting name ="shimSendTimoutInMinutes" type="dword"> |
| Value |
Default: 1 minutes Maximum value is 7 days. |
| How to modify |
|
| Notes | This setting is not configurable through the UI. |
usageFlushIntervalInSeconds
Configurable configuration file settings > Data Governance agent configuration file settings > usageFlushIntervalInSeconds
Use this configuration setting to define the frequency (in seconds) at which auditing information being held in memory is flushed to disk.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="ResourceUsage"> |
| Setting | <Setting name ="usageFlushIntervalInSeconds" type="dword"> |
| Value |
Default: 10 seconds |
| How to modify |
Replace value as required. |
| Notes | The shorter the interval, the smaller the window in which potential data loss can occur. Each flush operations causes disk access, which may lead to undue disk space usage it if the value is set too low. |
windowsComputerResourceResolutionInSeconds
Configurable configuration file settings > Data Governance agent configuration file settings > windowsComputerResourceResolutionInSeconds
Use this setting to change the number of seconds between full scans of the various resources within the Windows Computer resource namespace.
| Configuration file | %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services\DataGovernance.Agent.exe.config |
| Section name |
<Section name="Agent"> <Section name="Services"> <Section name="windowsComputer"> |
| Setting | <Setting name ="windowsComputerResourceResolutionInSeconds" type="dword"> |
| Value |
Default: 60 seconds |
| How to modify |
Replace value as required. |