Contents

• Working with Taxonomies
• Working with Categories

Careful planning and coordination is required to get the most out of classification in Quest One Identity Manager Data Governance Edition. Ideally, one or more well-organized taxonomies will be deployed in your organization, and used to categorize resources of interest.

You must be assigned the role of Classification Analyst or create a customized role that includes relevant permissions in order to create or modify a taxonomy.

A taxonomy is a set of related categories, organized as a tree structure. The top node represents the taxonomy as a whole, and each branch is a category.

All categories in a taxonomy should be related in some way. Create a separate taxonomy for each related set of categories. This makes it easier for users to understand their resources’ categorization.

To view the taxonomies in your environment using the web portal

• Select Governed Data | Categorization Manager | Taxonomies.

To view all taxonomies in your environment using PowerShell

• Run the Get-QTaxonomies command with the following mandatory parameter:
  a) ServerAddress
  Provide the name of the computer hosting the Data Governance server, and the port. Enter in the form computername:port number. The default port is 8723.

Contents

• Creating a Taxonomy
• Importing and Replacing Taxonomies
• Editing a Taxonomy
• Deleting a Taxonomy
• Exporting Taxonomies

Using the Web Portal or Quest.Classification PowerShell snap in, you can create, edit, and import taxonomies. See Taxonomy Deployment Considerations before publishing any taxonomies in your production environment.

You can work with taxonomies using the following methods:

• Web Portal, under the Governed Data Node
• Powershell snap-in (see Adding the PowerShell Snap-ins)

When you create a taxonomy, you are providing the base for the category tree, as well as creating a category that could be applied to resources. For example, if you are creating a PHI taxonomy, you will then add categories to it to create the desired taxonomy. However, you can assign rules to the top level node, PHI, for it to be used in automated categorization, or you can make it available for manual categorization. There are a number of parameters associated with a category. See Working with Categories on page 34 for more information. These parameters only affect the use of the top node of the taxonomy tree applied as a category, and do not apply to the taxonomy as a whole. For example, when you select Publish this category, it does not make the entire taxonomy available, only the top node.

To create a taxonomy using the web portal

1. Select Governed Data | Categorization Manager | Taxonomies.
2. Click Create new taxonomy.
3. Provide a name for the taxonomy.
   The name will appear anywhere the taxonomy is shown.
4. Enter an optional description.
   The description appears in the list of taxonomies on the Manage Taxonomies page.
5. Modify any of the category parameters. See Working with Categories for more information.
6. Click Save.
   The Edit Taxonomy dialog box opens. You can either add categories now, or click OK to complete the creation of the taxonomy. For more details, see Creating a Category, Editing Category Settings and Deleting a Category.

To create a taxonomy using PowerShell

1. Run the Add-QTaxonomy command with the following mandatory parameters:
2. 1. ServerAddress
      Provide the name of the computer hosting the Data Governance server, and the port. Enter in the form computername:port number. The default port is 8723.
   2. Name
      The name will appear anywhere the taxonomy is shown.
3. If desired, you can set any of the following optional parameters:
   1. Description
      The description appears in the list of taxonomies on the Manage Taxonomies page.
   2. Category parameters: Risk, CausesGovernance, IsPublished, IsAutomaticClassificationEnabled, IsMutuallyExclusive, IsStrictlyOrdered.
      By default, the risk is set to 0, and all other parameters are set to $false. The threshold is set to 1. For more information on setting the parameters on a category, see Working with Categories.

Contents

• Importing Taxonomies
• Replacing a Taxonomy

All sample taxonomies provided with Data Governance Edition (see Appendix C: Classifying Data with Data Governance Templates) as well as any previously created custom taxonomies that have been stored in the Data Governance Edition installation directory (C:\Program Files\Quest Software\Data Governance\Server\TemplateFiles) are listed in the Catalog view in the Categorization Manager.

Depending on the state of the taxonomy within your deployment, you will be able to perform one of the following:

• Import a new taxonomy into your deployment
• Replace an existing taxonomy in your deployment