Introduction
Data Governance Edition Network Communications
Data Governance service
Data Governance service deployment process
Data Governance service configuration
Data Governance service internal tasks
Manually deploying Data Governance service
Data Governance agents
Resource activity collection in Data Governance Edition
Resource Activity database maintenance
QAM module tables
Configurable configuration file settings
Activity database maintenance configuration
Manually running the activity compression utility
Manually running the activity deletion utility
How to validate resource activity is making it to the Resource Activity database
Data Governance service configuration file settings
Configurable registry settings
additionalOperatingSystems
AgentLeaseRenewPeriod
CollectPoi.CheckFrequencyInMinutes
CollectPoi.IgnoreChangedResourceSynchronization
CollectPoi.IncludeDeviations
CollectPoi.MaxConcurrentQueries
CollectPoi.OverdueThresholdInMinutes
CollectPoi.QueryBatchSize
CollectPoi.QueryTimeoutInMinutes
CollectPoi.QueryUpperBound
DfsDataSyncInterval
DisablePerceivedOwnershipUpdate
FolderSecurity.UseAdminPathsForShareFolders
ManagedHostDeleteBatchSize
MessagingCacheFolder
Metrics.CollectionIntervalInSeconds
MinimumSupportedModuleMigrationVersion
OracleBulkImportBatchSize
PerceivedOwnershipActivityPeriod
PerceivedOwnershipByResourceActivity
PerceivedOwnershipByResourceOwner
PerceivedOwnershipCalcUpdatesRefreshIntervalMinutes
PerceivedOwnershipMaxReturnValue
RemoteExecutor.WaitResultTimeout
RestServicePort
SelfService.AllowNonPublishedGroups
SelfService.AllowUnsychronizedGroups
SelfService.EnableSelfServiceRequest
SelfService.IncludeSuitabilityTraceInfo
SelfService.MarkSuitabilityTraceInfo
SelfService.MaximumMethodsCount
SelfService.SuitabilityThreshold
SuggestedAgentCap
SyncDomainPasswordInterval
VerboseHostForTrusteeLogging
Activity weight multipliers
Self-service suitability calculation multipliers
Data Governance agent configuration file settings
baseActivePort
cloudGroupResolutionInSeconds
indexingEnabled (localGroup scanning)
indexingEnabled (local user rights scanning)
indexingEnabled (service identities scanning)
indexingEnabled (share scanning)
keepQueryDocuments
localGroupResolutionInSeconds
numberOfSharepointScanThreads
OverrideFPolicyName
overrideServerUri
serviceIdentityIndexingResolutionInSeconds
shimCloseTimeoutInMinutes
shimOpenTimeoutInMinutes
shimReceiveTimeoutInMinutes
shimSendTimeoutInMinutes
usageFlushIntervalInSeconds
windowsComputerResourceResolutionInSeconds
Data Governance service registry settings
PowerShell commands
Agent query timeout (AsyncQueryTimeoutInMinutes)
Write default classification level data to database (ClassificationLevelDefaultData)
Default employee SID (DefaultEmployeeSid)
Explicit exclusion of groups (ExclusionByDN)
Filter accounts from Resource access report (FilterNoisyAccounts)
Global agent installation location (GlobalAgentInstallLocation)
Manual FPolicy creation (ManualFPolicyCreation)
Resource access data points (MaxDataPoints)
View deviations data points (MaxDataPoints)
Data governance overview results (MaxResults)
Resource Activity database connection string (QAMAuditActivityDBConnectionString)
Deployment name (QAMDeploymentId)
Oracle deployment: Resource Activity database (QDGDBPlatformOracle)
One Identity Manager database connection string (Q1IMDBConnectionString)
Oracle deployment: One Identity Manager database (Q1IMDBPlatformOracle)
Write default managed group template data to database (ResourceTemplateDefaultData)
Agent start/stop timeout (StartStopServiceTimeout)
WCF timeouts (wcfTimeoutInMinutes)
Reporting timeout (WcfTimeoutReportingInMinutes)
Adding the PowerShell snap-ins
Finding component IDs
Data Governance Edition deployment
About us
Get-QDeploymentInfo
Get-QEncryptionOptions
Get-QServerAllLogs
Get-QServerVersion
Initialize-QDataGovernanceActivity
Initialize-QDataGovernanceServer
Register-QServiceConnectionPoint
Remove-QServiceConnectionPoint
Set-QDeploymentInfo
Set-QEncryptionOptions
Set-QServiceConnection
Service account management
Add-QServiceAccount
Get-QLogonServiceAccount
Get-QServiceAccounts
Remove-QServiceAccount
Set-QServiceAccountUpdated
Managed domain deployment
Agent deployment
Managed host deployment
Add-QDfsManagedHost
Add-QManagedHostByAccountName
Clear-QResourceActivity
Get-QHostsForTrustee
Get-QManagedHosts
Remove-QManagedHost
Set-QManagedHostProperties
Set-QManagedHostUpdated
Trigger-QDfsSync
Account access management
Get-QAccountAccess
Get-QAccountAccessOnHosts
Get-QAccountActivity
Get-QAccountAliases
Get-QAccountsForHost
Get-QADAccount
Get-QGroupMembers
Get-QIndexedTrustees
Resource access management
Export-QResourceAccess
Get-QChildResources
Get-QFileSystemSearchResults
Get-QHostResourceActivities
Get-QPerceivedOwners
Get-QResourceAccess
Get-QResourceActivity
Get-QResourceSecurity
Set-QResourceSecurity
Governed data management
Get-QDataUnderGovernance
Get-QPerceivedOwnerPol
Get-QSelfServiceClientConfiguration
Get-QSelfServiceMethodsToSatisfyRequest
Remove-QDataUnderGovernance
Set-QBusinessOwner
Set-QDataUnderGovernance
Set-QSelfServiceClientConfiguration
Trigger-QDataUnderGovernanceCollection
Upgrade-QDataUnderGovernanceRecords
Classification management
Manual FPolicy creation (ManualFPolicyCreation)
Configurable registry settings > Data Governance service registry settings > Manual FPolicy creation (ManualFPolicyCreation)
Manual FPolicy creation (ManualFPolicyCreation)
On the Data Governance server, create the following registry key to manually create the FPolicy for a NetApp filer. Creating this registry key prevents the automatic creation of FPolicy on the specified NetApp filer.
| Location | Registry |
| Path | HKEY_LOCAL_MACHINE\SOFTWARE\One Identity\Broadway\Server |
| Value name | ManualFPolicyCreation |
| Value type | REG_SZ |
| Value | Fully qualified domain name of the NetApp filer. |
| Note |
Ensure that the registry key has been created on the server before deploying the agent. In addition, you must also create a new configuration file, DefaultOntapSetting.qamel, in the Data Governance server folder: %ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Server. |
Resource access data points (MaxDataPoints)
Configurable registry settings > Data Governance service registry settings > Resource access data points (MaxDataPoints)
Resource access data points (MaxDataPoints)
Create the following registry key on the client computer where the Manager is installed to specify the maximum number of data points to be included in a Resource Access report.
| Location | Registry | ||
| Path |
HKEY_CURRENT_USER\SOFTWARE\One Identity\Broadway\Client\Reporting\ResourceAccessReport
| ||
| Value name | MaxDataPoints | ||
| Value type | DWORD | ||
| Value |
Maximum number of data points. Default: 10000 |
View deviations data points (MaxDataPoints)
Configurable registry settings > Data Governance service registry settings > View deviations data points (MaxDataPoints)
View deviations data points (MaxDataPoints)
Create the following registry key on the client computer where the Manager is installed to specify the maximum number of data points to be included when viewing deviations.
| Location | Registry | ||
| Path |
HKEY_CURRENT_USER\SOFTWARE\One Identity\Broadway\Client\Controls\ViewDeviations
| ||
| Value name | MaxDataPoints | ||
| Value type | DWORD | ||
| Value |
Maximum number of data points. Default: 10000 |
Data governance overview results (MaxResults)
Configurable registry settings > Data Governance service registry settings > Data governance overview results (MaxResults)
Data governance overview results (MaxResults)
Create the following registry key on the client computer where the Manager is installed to specify the maximum number of records to be returned and displayed on the Data governance overview.
| Location | Registry | ||
| Path |
HKEY_CURRENT_USER\SOFTWARE\One Identity\Broadway\Client\DataUnderGovernanceView
| ||
| Value name | MaxResults | ||
| Value type | DWORD | ||
| Value |
Maximum number of records to be returned and displayed. Default: 5000 records |