Introduction
About this Guide
System Requirements
Minimum Required Permissions
Required Ports
Performance Calculations
Deploying Classification in Identity Manager
Classification Overview
Required Components
Component Workflow
Activating Classification
Configuring Classification: Taxonomies, Categories, and Rules
Install the Classification Components
Enable Classification in the Designer
Identify the Classification Service Account
Deploy the Classification Server
Deploy Classification Workers
Enable and Disable Automatic Classification on Specific Managed Hosts
Enabling Categorization on Folders (Security Index Roots)
Managing the File Types to be Classified
Starting Initial Classification
Upgrade an Agent for Classification
Re-classify Data
Classification Application Roles
Troubleshooting the Classification Deployment
An Overview of Classification Configuration
Steps Required to Implement Classification
Creating Taxonomies
Appendix A: PowerShell Commands
Working with Taxonomies
Implementing Rules for Automated Categorization
Creating a Taxonomy
Importing and Replacing Taxonomies
Editing a Taxonomy
Deleting a Taxonomy
Exporting Taxonomies
Working with Categories
How Rules Affect Categorization
Managing Rules in the Classification System
Classifying Resources
When Do Categorization and Classification Occur?
Managing the Life Cycle of Taxonomies and Categories
Creating a Rule
Editing a Rule
Associating Rules to Categories and Applying Rule Weights
Deleting a Rule
Advanced Rule Applications
Working with Text Extractors
Identifying Text Extractors used within the System
Creating Text Extractors
Validating the Text Extractor
Editing Text Extractors
Removing Text Extractors
Working with Regular Expression Text Extractors
Working with Dictionary Text Extractors
Managing Public Dictionary Text Extractors
Managing Protected Dictionary Text Extractors
Managing Dictionary Text Extractors with PowerShell
Working with Advanced Text Extractors
Testing and Reviewing Automated Classification
Testing a Rule against a Resource
Testing all Rules Against a Resource
Viewing the Text from a Resource
Determining Why Categorizations Were Applied to a Resource
Viewing Categorized Resources
Making a Category Available to the Classification System
Adding the PowerShell Snap-ins
Finding a Taxonomy, Category, or Extractor ID using PowerShell
Deploying the Classification Server and the Classification Worker
Troubleshooting Deployment
Managing Taxonomies
Appendix B: Oracle Configuration
Appendix C: Classifying Data with Data Governance Templates
Available Templates
Appendix D: Creating a Taxonomy to Classify Data
Text Extractor Management
The following commands in the Quest.Classification snapin can be used to manage text extractors. For information on using the Web Portal, see Working with Text Extractors.
| Use this command | If you want to... |
| Add-QAdvancedTextExtractor | Add a new advanced text extractor to the system. |
| Add-QDictionaryTextExtractor | Add a dictionary text extractor to the system. |
| Add-QRegexTextExtractor | Add a regular expression text extractor to the system. |
| Confirm-QTextExtractor | Test the validity of a text extractor. (Note: This tests whether the text extractor can be processed by the classification system.) If the text extractor is not valid, it will not be available for use with the classification system. |
| Get-QAdvancedTextExtractors | View the list of all advanced text extractors and their general properties (including IDs) used in the system. |
| Get-QDictionaryTerms | View the terms associated for a given dictionary text extractor. |
| Get-QDictionaryTextExtractors | View the list of all dictionary text extractors and their general properties (including IDs) used in the system. |
| Get-QRegexTextExtractor | View the list of all advanced text extractors and their general properties (including IDs) used in the system. |
| Get-QTextExtractors | View the list of all text extractors and their general properties (including IDs) used in the system. |
| Get-QRulesAssociatedWithTextExtractor | View the list of rules that have been associated with a given text extractor. You must know the extractor ID. |
| New-QDictionaryTerm | Create a new dictionary term. |
| Remove-QTextExtractor | Remove a text extractor from the system. You must know the text extractor ID. Note: Before you can remove a text extractor from the system, you must remove any associations to rules. You can see which rules are associated with each text extractor and remove them through the web portal. |
| Set-QAdavncedTextExtractor | Edit the advanced text extractor properties. You must know the text extractor ID. |
| Set-QDictionaryTextExtractor | Edit the dictionary text extractor properties. You must know the text extractor ID. |
| Set-QDictionaryTerms | Update the terms included in a dictionary text extractor. |
| Set-QRegexTextExtractor | Edit the regular expression text extractor properties. You must know the text extractor ID. |
| Set-QTextExtractor | Edit the text extractor general properties. You must know the text extractor ID. |
Classification Analysis
The following commands in the Quest.Classification snapin can be used to analyze classification and troubleshoot category and rule development. For information, see Testing and Reviewing Automated Classification.
| Use this command | If you want to... |
| Get-QClassificationAnalysis | Gain deeper understanding into a resource’s categorization. View all categories with matching rules. |
| Get-QAppliedCategories | View a list of the categories applied to a resource. |
| Get-QResourceTextExtracted | See what text is being evaluated for a resource. |
| Get-QAllRuleResults | View the results of all rules in the system when run against a test file. |
| Get-QRuleResults | View the results of a specific rule in the system when run against a test file. |
| Get-QClassifiedResources | View a list of resources that have been classified on a specified managed host. |
Appendix B: Oracle Configuration
Using an Oracle Database for Classification
If you are using an Oracle database, you need to create the required tablespaces before installing the Classification server. You can either run the following SQL script or manually create the tablespaces.
 |
You must also ensure that the Classification server has the ADO client for Oracle (32bit version of ODP.Net) installed. Supported versions include ODAC 11.2 Release 3 or higher. For details, see Using an Oracle Database for Classification. |
To create and configure the tablespaces with a script
- Connect to your SQL editor as the Sys account with the SYSDBA role and run the following script:
DEFINE topic_tbs_name = 'TopicService'DEFINE topic_tbs_file = 'topicservice_ts.dbf'DEFINE topic_user_name = 'TopicService'DEFINE topic_user_pwd = 'myPassword1'DEFINE content_tbs_name = 'ContentService'DEFINE content_tbs_file = 'contentservice_ts.dbf'DEFINE content_user_name = 'ContentService'DEFINE content_user_pwd = 'myPassword1'DEFINE temp_tbs_name = 'TEMP'--Create TopicService tablespace and UserCREATE TABLESPACE &topic_tbs_name DATAFILE '&topic_tbs_file' SIZE 10M AUTOEXTEND ON NEXT 100M MAXSIZE UNLIMITEDLOGGINGEXTENT MANAGEMENT LOCAL AUTOALLOCATESEGMENT SPACE MANAGEMENT AUTOFLASHBACK ON;CREATE USER &topic_user_name IDENTIFIED BY &topic_user_pwd DEFAULT TABLESPACE &topic_tbs_name TEMPORARY TABLESPACE &temp_tbs_name QUOTA UNLIMITED ON &topic_tbs_name;GRANT CONNECT, CREATE SESSION TO &topic_user_name;GRANT CREATE TABLE, CREATE PROCEDURE, CREATE SEQUENCE, CREATE TRIGGER, CREATE ROLE TO &topic_user_name;--Create ContentService tablespace and UserCREATE TABLESPACE &content_tbs_name DATAFILE '&content_tbs_file' SIZE 10M AUTOEXTEND ON NEXT 100M MAXSIZE UNLIMITEDLOGGINGEXTENT MANAGEMENT LOCAL AUTOALLOCATESEGMENT SPACE MANAGEMENT AUTOFLASHBACK ON;CREATE USER &content_user_name IDENTIFIED BY &content_user_pwd DEFAULT TABLESPACE &content_tbs_name TEMPORARY TABLESPACE &temp_tbs_name QUOTA UNLIMITED ON &content_tbs_name;GRANT CONNECT, CREATE SESSION TO &content_user_name;GRANT CREATE TABLE, CREATE PROCEDURE, CREATE SEQUENCE, CREATE TRIGGER, CREATE ROLE TO &content_user_name;
To manually create and configure the tablespaces
- Create a tablespace for the Topic Service to use.
- Create an Oracle user for the Topic Service to use that has a default tablespace of the tablespace created in step 1.
- Grant the user CONNET, CREATE SESSION, CREATE TABLE, CREATE PROCEDURE, CREATE SEQUENCE, CREATE TRIGGER, CREATE ROLE in that tablespace.
- Create a tablespace for the Content Service to use.
- Create an Oracle user for the Content Service to use that has a default tablespace of the tablespace created in step 4.
- Grant the user created in step 5 CONNECT, CREATE SESSION, CREATE TABLE, CREATE PROCEDURE, CREATE SEQUENCE, CREATE TRIGGER, CREATE ROLE in that tablespce.
When the installer creates the database, it creates a role that grants CONNECT, CREATE SESSION, SELECT, INSERT, DELETE, UPDATE and EXECUTE on the QCS objects. It will also assign the user to that role.