Categorizing and classifying data through Identity Manager Data Governance Edition
requires the installation and configuration of the following components:

• Classification Server includes the services that manage the classification engine repository, the Gateway service, and the content service. When a Data Governance agent scans a managed host and recognizes a new resource to be classified, it pushes the data to the Classification server, which queues request to process data by the Worker Service.
  
• Classification Worker includes the rules engine and the file and SharePoint handlers. By default one of each is installed, but this can be configured and installed on any number of computers to manage scalability.
  
  The rules engine processes data and looks for matches to the predefined rules. Based on the matches, the Worker service determines whether categories are applied to the resource or not.
  
• Secure Communication
  
  For classification to be applied, Data Governance agents must be able to communicate securely to the Classification Server and Classification Worker. This is accomplished through installing the Classification Server and Classification Worker with an account with the required credentials. For details, see Identify the Classification Service Account.
  
• Synchronization with the Identity Manager database
  
  When data is classified or assigned a category that has been deemed to cause governance, then the resource is updated and stored in the Identity Manager database.

Contents

• Workflow Details

Agents discover resources during normal security scanning and notify the Classification Server. The Classification Server adds references to these resources to a queue where at some point a Classification Worker retrieves it for processing. The Classification Worker then retrieves the resource content from the agent and processes it to find any appropriate categorizations.

Workflow

The following diagram details the process:

Detailed Process

1. During a security scan an agent identifies a file to be classified and notifies the Classification Service.
2. The Classification Service on the agent host computer forwards the request for classification to the Classification Server.
3. The Classification Server posts the resource to be classified onto a queue for processing.
4. One of the Classification Workers retrieves the resource to be classified from the queue and begins the classification process.
5. A request for the resource content is dispatched to the Classification Service on the agent host for the agent responsible for this resource.
6. The Classification Service proxies this request to the proper agent scanning the target host.
7. The agent retrieves the content and streams it back to the Classification Service.
8. The Classification Service returns the content to the Classification Worker for processing.
9. All standard Classification/Categorization processing occurs and the results are written to the Classification Database and the Data Governance Server is notified.

Contents

• Install the Classification Components
• Identify the Classification Service Account
• Deploy the Classification Server
• Deploy Classification Workers
• Examining the Classification Deployment
• Enable and Disable Automatic Classification on Specific Managed Hosts
• Assign Classification Application Roles

For a fully functional Classification deployment, you need to perform the following tasks:

• Install the Classification.msi included with the Classification download on the Data Governance server to make it ready for a Classification deployment.
• Enable the Classification component in the Designer and recompile the database. The classification component is located in the Designer under TargetSystem\ADS\QAM.Once you have completed this process, a Classification node will be available in the Navigation view in the Manager from which you can manage your Classification deployment.

  The Classification Configuration Parameter is a node located under the Data Governance option.

• Identify the Service Account that will be used for securing the classification services. Deploy a Classification server Deploy Classification worker Enable Classification on the required managed hosts Upgrade agents on any existing managed hosts where classification has been enabled
• Ensure that you have applied the correct application roles for classification analysts, business owners, compliance officers, and Data Governance administrators.

Permissions will be required for managing taxonomies, viewing classification results, viewing the categorization results, creating taxonomies, modifying rules, and overriding manual or automatic classification. For details, see Assign Classification Application Roles.