Identity Manager Data Governance Edition 8.1.5 - Technical Insight Guide

Table of Contents

One Identity Manager Data Governance Edition Technical Insight Guide

Available documentation

Data Governance Edition network communications

Service Connection Points

CN=DataGovernance.Server

Data Governance Edition required ports Component communication

Communication segments

Data Governance service

Data Governance Edition deployment process Data Governance service configuration Data Governance service internal tasks Manually deploying Data Governance service

Data Governance service options

Data Governance agents

Agent deployment process Agent files Data Governance agent configuration

Resource activity collection in Data Governance Edition

Resource Activity database maintenance

Configuring Resource Activity database maintenance

Scheduling activity compression and deletion

Manually running the activity compression utility Manually running the activity deletion utility

Verifying resource activity is making it to the Resource Activity database

Cloud managed hosts permission level to role mapping QAM module tables

QAM tables QAM views Resource types Trustee types

Configurable configuration file settings

Data Governance service configuration file settings

additionalOperatingSystems AgentLeaseRenewPeriod CollectPoi.CheckFrequencyInMinutes CollectPoi.IgnoreChangedResourceSynchronization CollectPoi.IncludeDeviations CollectPoi.MaxConcurrentQueries CollectPoi.OverdueThresholdInMinutes CollectPoi.QueryBatchSize CollectPoi.QueryTimeoutInMinutes CollectPoi.QueryUpperBound DfsDataSyncInterval DirectAccessForServiceCredentials DisablePerceivedOwnershipUpdate EMCIsilonDFSLinksEnabled EMCIsilonUseNetworkPathForAccessRequests FolderSecurity.UseAdminPathsForShareFolders ManagedHostDeleteBatchSize MessagingCacheFolder Metrics.CollectionIntervalInSeconds MinimumSupportedModuleMigrationVersion OracleBulkImportBatchSize PerceivedOwnershipActivityPeriod PerceivedOwnershipByResourceActivity PerceivedOwnershipByResourceOwner PerceivedOwnershipCalcUpdatesRefreshIntervalMinutes PerceivedOwnershipMaxReturnValue RemoteExecutor.WaitResultTimeout RestServicePort SelfService.AllowNonPublishedGroups SelfService.AllowUnsychronizedGroups SelfService.EnableSelfServiceRequest SelfService.IncludeSuitabilityTraceInfo SelfService.MarkSuitabilityVisible SelfService.MaximumMethodsCount SelfService.SuitabilityThreshold SuggestedAgentCap SyncDomainPasswordInterval VerboseHostForTrusteeLogging Activity weight multipliers Self-service suitability calculation multipliers

Data Governance agent configuration file settings

baseActivePort cloudScanThreadMax indexingEnabled (localGroup scanning) indexingEnabled (local user rights scanning) indexingEnabled (service identities scanning) indexingEnabled (share scanning) keepQueryDocuments localGroupResolutionInSeconds numberOfSharepointScanThreads OverrideFPolicyName overrideServerUri serviceIdentityIndexingResolutionInSeconds shimCloseTimeoutInMinutes shimOpenTimeoutInMinutes shimReceiveTimeoutInMinutes shimSendTimeoutInMinutes usageFlushIntervalInSeconds windowsComputerResourceResolutionInSeconds

Configurable registry settings

Data Governance service registry settings

Agent query timeout (AsyncQueryTimeoutInMinutes) Write default classification level data to database (ClassificationLevelDefaultData) Default employee SID (DefaultEmployeeSid) Explicit exclusion of groups (ExclusionByDN) Filter accounts from Manage Access view (FilterNoisyAccounts) Global agent installation location (GlobalAgentInstallLocation) Manual FPolicy creation (ManualFPolicyCreation) Resource access data points (MaxDataPoints) View deviations data points (MaxDataPoints) Data governance overview results (MaxResults) Resource Activity database connection string (QAMAuditActivityDBConnectionString) Deployment name (QAMDeploymentId) Oracle deployment: Resource Activity database (QDGDBPlatformOracle) One Identity Manager database connection string (Q1IMDBConnectionString) Oracle deployment: One Identity Manager database (Q1IMDBPlatformOracle) Write default managed resource data to database (ResourceTemplateDefaultData) Agent start/stop timeout (StartStopServiceTimeout) WCF timeouts (wcfTimeoutInMinutes) Reporting timeout (WcfTimeoutReportingInMinutes)

PowerShell commands

Adding the PowerShell snap-ins Finding component IDs Data Governance Edition deployment

Get-QDeploymentInfo Get-QEncryptionOptions Get-QServerAllLogs Get-QServerVersion Initialize-QDataGovernanceActivity Initialize-QDataGovernanceServer Register-QServiceConnectionPoint Remove-QServiceConnectionPoint Set-QDeploymentInfo Set-QEncryptionOptions Set-QServiceConnection

Service account management

Add-QServiceAccount Get-QLogonServiceAccount Get-QServiceAccounts Remove-QServiceAccount Set-QServiceAccountUpdated

Managed domain deployment

Add-QManagedDomain Get-QManagedDomains Remove-QManagedDomain

Agent deployment

Get-QAgentEvents Get-QAgentMetrics Set-QAgentConfiguration Set-QAgentStateUpdated Upgrade-QAgents

Managed host deployment

Add-QDfsManagedHost Add-QManagedHostByAccountName Clear-QResourceActivity Get-QHostsForTrustee Get-QManagedHosts Remove-QManagedHost Set-QManagedHostProperties Set-QManagedHostUpdated Trigger-QDfsSync

Account access management

Get-QAccountAccess Get-QAccountAccessOnHosts Get-QAccountActivity Get-QAccountAliases Get-QAccountsForHost Get-QADAccount Get-QGroupMembers Get-QIndexedTrustees

Resource access management

Export-QResourceAccess Get-QChildResources Get-QFileSystemSearchResults Get-QHostResourceActivities Get-QPerceivedOwners Get-QResourceAccess Get-QResourceActivity Get-QResourceSecurity Set-QResourceSecurity

Governed data management

Get-QDataUnderGovernance Get-QPerceivedOwnerPol Get-QSelfServiceClientConfiguration Get-QSelfServiceMethodsToSatisfyRequest Remove-QDataUnderGovernance Set-QBusinessOwner Set-QDataUnderGovernance Set-QSelfServiceClientConfiguration Trigger-QDataUnderGovernanceCollection Upgrade-QDataUnderGovernanceRecords

Classification management

Add-QClassificationLevel Get-QClassificationLevelConfiguration Get-QDataUnderGovernanceByClassificationLevel Remove-QClassificationLevel Set-QClassificationLevel Set-QClassificationLevelOnDuG

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Identity Manager Data Governance Edition 8.1.5 - Technical Insight Guide