Veritas Data Insight User's Guide
- Section I. Introduction
- Section II. Data Insight Workspace
- Navigating the Workspace tab
- Analyzing data using the Workspace views
- Viewing access information for files and folders
- About viewing file or folder summary
- Viewing the overview of a data source
- Managing data custodian for paths
- Viewing user activity on files or folders
- Viewing file and folder activity
- Viewing CIFS permissions on folders
- Viewing NFS permissions on folders
- Viewing SharePoint permissions for folders
- Viewing OneDrive permissions for folders
- Viewing Box permissions on folders
- Viewing audit logs for files and folders
- About visualizing collaboration on a share
- Viewing access information for users and user groups
- Viewing the overview of a user
- Viewing the overview of a group
- Managing custodian assignments for users
- Viewing folder activity by users
- Viewing CIFS permissions for users
- Viewing CIFS permissions for user groups
- Viewing NFS permissions for users and user groups
- Viewing SharePoint permissions for users and user groups
- Viewing Box permissions for users and user groups
- Viewing audit logs for users
- Section III. Data Insight reports
- Using Data Insight reports
- About Data Insight reports
- How Data Insight reporting works
- Creating a report
- About Data Insight security reports
- Activity Details report
- Permissions reports
- Inactive Users
- Path Permissions
- Permissions Search report
- About Permissions Query templates
- Creating a Permissions Query Template
- Creating custom rules
- Permissions Query Template actions
- Using Permissions Search report output to remediate permissions
- Entitlement Review
- User/Group Permissions
- Group Change Impact Analysis
- Ownership Reports
- Create/Edit security report options
- About Data Insight storage reports
- Create/Edit storage report options
- About Data Insight custom reports
- Considerations for importing paths using a CSV file
- Managing reports
- About managing Data Insight reports
- Viewing reports
- Filtering a report
- Editing a report
- About sharing reports
- Copying a report
- Running a report
- Viewing the progress of a report
- Customizing a report output
- Configuring a report to generate a truncated output
- Sending a report by email
- Automatically archiving reports
- Canceling a report run
- Deleting a report
- Considerations for viewing reports
- Organizing reports using labels
- Using Data Insight reports
- Section IV. Remediation
- Configuring remediation workflows
- About remediation workflows
- Prerequisites for configuring remediation workflows
- Configuring Self-Service Portal settings
- About workflow templates
- Managing workflow templates
- Creating a workflow using a template
- Managing workflows
- Auditing workflow paths
- Monitoring the progress of a workflow
- Remediating workflow paths
- Using the Self-Service Portal
- About the Self-Service Portal
- Logging in to the Self-Service Portal
- Using the Self-Service Portal to review user entitlements
- Using the Self-Service Portal to manage Data Loss Prevention (DLP) incidents
- Using the Self-Service Portal to confirm ownership of resources
- Using the Self-Service Portal to classify sensitive data
- Managing data
- About managing data using Enterprise Vault and custom scripts
- Managing data from the Shares list view
- Managing inactive data from the Folder Activity tab
- Managing inactive data by using a report
- Archiving workflow paths using Enterprise Vault
- Using custom scripts to manage data
- Pushing classification tags while archiving files into Enterprise Vault
- About adding tags to devices, files, folders, and shares
- Managing permissions
- Configuring remediation workflows
- Appendix A. Command Line Reference
- Index
Managing data custodian for paths
You can assign one or more custodians for a given data location. You can perform the following tasks on the tab for a web application, site collection, filer, share or equivalent data source or a folder:
For a data resource, view all the data custodians assigned to it. You can view the inherited data custodians, explicitly assigned custodians, and the parent repository from which they are inherited.
Add new custodians.
Remove explicitly assigned custodians on the path.
Once a custodian is assigned on a path, the custodian tag is automatically inherited by all the child paths under the parent path Custodian assignment cannot be overridden by a child path. For example, when you assign a custodian at a filer level, the shares and folders on the filer inherit the custodian assignment. But, if you assign a custodian on any share on the file server, the assignment does not get assigned to its parent.
You can assign and delete a custodian on any level, except on files on the Overview page for the same.
To assign a custodian do the following
- From the Workspace, navigate to the Data Sources list-view.
- Drill down to share, site collection, or equivalent data source to view the folders, sites, document libraries, or picture libraries present within the share or the site collection.
- Click a folder. The Summary panel populates to display additional details.
- Click Expand Profile on the Summary panel to display the underlying folder-centric views.
By default, the Overview tab displays a summary of the selected data repository.
- To assign a specific user as a custodian for the path, click the Settings icon and, from the drop-down list select Add Custodian > Select User.
- Enter the name of the user in the Search field. Select the appropriate user from the search results, and click OK.
You can filter users by domain or by using attribute-based queries.
- To assign a custodian based on user or group directory attributes, from the drop-down list Select User/Group Attribute.
- To assign a custodian based on user or group attributes, click User or Group radio button or enter a user/group name in the search bar.
- Select an attribute. All the users referred to by the attribute value are assigned as custodian.
If the attribute has multiple values, Data Insight does not allow granular assignment of only one of them.
For attribute based custodian assignment, Data Insight picks up attributes that point to other objects in the directory service. For example, managedBy.
- You can assign an inferred owner on a path as the custodian for the path. On the User Activity > Summary tab, right-click an inferred data owner and click Add as Custodian.
- Optionally, you can assign a user who actively accesses a data location as the custodian of that data location. On the User Activity > Active Users tab, right-click an active user from the list displayed on the page, and select Add as Custodian.
- Optionally, you can choose custodian from a set of users who have permissions on the path. On the Permissions tab, right-click a user from the list displayed on the page, and select Add as Custodian.
- Click the Export icon at the bottom of the page to save the data to a
.csvfile. - Click the Email icon to email custodian assignment information from the Overview page of a data location to desired email recipients.
To delete a custodian do the following
- From the Workspace, navigate to the list-view of the Data Sources tile.
- Drill down to share or site collection to view the folders, sites, document libraries, or picture libraries present within the share or the site collection.
- Click a folder. The Summary panel populates to display additional details. Click the profile arrow. The Summary panel expands to display the profile view.
- On the Overview tab of a resource, you can view the list of custodians assigned or inherited for that path. You can delete custodian assignments for a path in the following two ways:
Select the assigned custodian and click the delete icon.
To explicitly remove all custodian assignments for a path, click the custodian icon and select Remove all.
Note:
You cannot delete assignments that have been inherited from parent paths. You must navigate to the parent location and delete the assignment from Overview page of the level at which the assignment was made.
A Data Insight administrator can assign custodians to multiple paths simultaneously by using the Settings > Custodian Manager option. For more information, see the Veritas Data Insight Administrator's Guide.