A.2 Using Multiple Collectors

In cases where separate application scopes are required or when a significant number of Target Paths has been defined, consider using multiple applications with separate collectors.

Advantages

  • Separate scopes (Applications) might be associated with specific Target Paths

  • Quicker collection times based on scope of each collector

Disadvantages

  • Complex configuration required with multiple collectors defined

  • Custom editing of collector SQL queries required

To set up multiple collectors, define a separate File System Access collector in each desired application. To set the scope for each collector, modify the SQL query for both the Permissions and Permissions to Holders section of each collector's definition, being sure to specify the same conditions for both queries in the same collector.

A.2.1 Scoping Collection by Target Path

To scope a File System Access Collector by one or more Target Paths, simply add the appropriate WHERE condition to the SQL queries in the collector's definition:

For example, to set a File System Access Collector to only include the Target Paths:

  • \\cct-2016.cctec.org\Finance

  • \\cct-2012.cctec.org\Finance

  1. In Identity Governance, select Data Sources > Applications.

  2. Select the application containing the File System Access collector to modify.

  3. Select the collector in the application's configuration page to expand its configuration details.

  4. Click Collect Permission to expand the permission settings.

  5. Modify the Permission Query by adding an appropriate WHERE condition to the query:

  6. Click Collect Permission to Holders to expand the Permission to Holders settings.

  7. Modify the Permissions to Holders Query by adding the appropriate WHERE condition to the query:

  8. Click Save to commit the changes.

A.2.2 Scoping Collection by Target Path Category

To scope a File System Access Collector by one or more Target Paths, simply add the appropriate WHERE condition to the SQL queries in the collector's definition:

For example, to set a File System Access Collector to only include the Target Paths assigned the Finance category:

  1. In Identity Governance, select Data Sources > Applications.

  2. Select the application containing the File System Access collector to modify.

  3. Select the collector in the application's configuration page to expand its configuration details.

  4. Click Collect Permission to expand the permission settings.

  5. Modify the Permission Query by adding an appropriate WHERE condition to the query:

  6. Click Collect Permission to Holders to expand the Permission to Holders settings.

  7. Modify the Permissions to Holders Query by adding the appropriate WHERE condition to the query:

  8. Click Save to commit the changes.