Identity Finder. Introduction for Data Stewards and Data Managers. Contents

Transcription

1 Identity Finder Intrductin fr Data Stewards and Data Managers (Revisin Date: 7/8/2013) Cntents Intrductin fr Data Stewards and Data Managers... 1 Intrductin... 1 Rles and Respnsibilities... 1 Lgging int the Identity Finder Cnsle... 2 Using the Endpint List: Endpints, Tags and Filters... 2 Dashbard tab... 6 Status Tab... 7 Admin Tab... 7 Results Tab... 8 Reprts Tab... 9 Intrductin This dcument prvides an intrductin fr Data Stewards and Data Managers fr managing identity data using the Identity Finder cnsle. Rles and Respnsibilities A Data Steward has planning and plicy respnsibilities fr data within a specific functinal area(s) r data dmain. Data Managers handle the day-t-day respnsibilities fr data management. Data Stewards and Data Managers bth have respnsibility fr understanding, prtecting and managing access t CCC data. Data Stewards can decide nt t select a Data Manager and instead perfrm the duties f a Data Manager themselves. As it relates t the Identity Finder prject, a Data Manager duties are t: Perfrm searches n shared lcatins (such as departmental shares) and take apprpriate actin n DCL3 data, such as quarantining the data t the DCL3 flder lcated inside that share. Manage access t the files lcated in thse DCL3 flders.

2 Ensure that staff within their functinal area are perfrming regular searches f the files n their cmputer, user share and . Ensure that apprpriate actin is being taken by the staff in the functinal area n files that cntain DCL3 data. Lgging int the Identity Finder Cnsle The brwser requirements are: Internet Explrer 8 and Silverlight. T cnnect t the Identity Finder enterprise cnsle: Frm inside the CnnSCU netwrk, pen a web brwser and visit: At the lgin prmpt: In the User Name field, enter yur fully qualified NetID r lgin credentials In the Passwrd field, enter yur passwrd Click the padlck icn t lgin By default yu will be n the Dashbard tab Depending n access, yu may r may nt see the Results tab Using the Endpint List: Endpints, Tags and Filters Upn successfully lgging int the cnsle, yu will be in the Dashbard tab f the cnsle: Tags

3 The Dashbard tab uses the Endpint List t manage what yu are reprting n. This applies t the Results and Status tabs as well. The Endpint List is n the left f the screen. The endpints displayed can als be categrized by tags. There are several types f tags simple, filter and ldap tags that are used t categrize endpints as well as used t run reprts n multiple endpints (i.e. yu can select a tag and lk at a chart f all endpints that belng t that tag. The default view is cnfusing s first, yu will want t custmize hw the Endpint List rganizes the endpints. By default endpints are all cllapsed under Endpint List by type. Yu can custmize the Endpint List t make it mre useful than the default view by clicking the cg next t Endpint List t cnfigure the panels: Then, enable All Tags and disable all ther tags individually and click OK. This will then shw all endpints under All Tags instead f their type (filter tag, simple tag, etc). NOTE: This will be saved as yur default view fr the Endpint List frm nw n, yu will nt need t d this each time yu lg int the cnsle. Nw if yu expand All Tags under the Endpint List, yu will see tags that cntain endpints and tags yu are authrized t see. Just expand r cllapse the tags by clicking the black arrws next t the tag name t see the endpints that are in that tags:

4 The 3 tabs: Dashbard, Results and Status all use the Endpint List. When yu want t manage/view endpint(s) n ne f these 3 tabs, yu can use a single endpint by clicking n just the endpint in the Endpint List r multiple endpints (just like yu wuld in Windws File Explrer using the Ctrl and Shift keys). Yu can als click n a tag and yu will then have all endpints in that tag selected. Endpints Nw yu see the endpints (wrkstatins) rganized by Data Dmain(s) that yu have access t. When yu select n endpints the right windw changes t display infrmatin abut the endpints yu have selected in the Endpint List. Try changing between the Dashbard, Results and Status tabs. Select ne r multiple endpints by using the Shift and Ctrl keys just as yu wuld d in Windws. Endpint names are the machine names that identify where the machines are lcated but als include the staff member s name that uses the endpint. Yu shuld see endpints and Data Dmain tags that yu are authrized t see. If yu ntice Data Users are missing frm Data Dmains r shuld be added, please pen a ticket with the Supprt Center t address changes in Data Users in yur Data Dmain. Filters Yu can set yur wn filters using the filter buttns at the tp f each tabbed menu. Each menu has different filter ptins available: Filter by Searches Yu have t already have at least ne endpint selected t filter by searches. Once yu have selected endpints in the Endpint List, click the drp dwn

5 menu under Filter by Searches t see all the searches that have been perfrmed n the selected endpints. Yu can then check specific searches using the checkbxes t the left f a listed search t see just infrmatin frm the selected search(es): Filter by Date Yu have t already have at least ne endpint selected t filter by date. Once yu have selected endpints, yu can then filter the infrmatin frm thse endpints by date. Filter List This filters the endpints by name, s if yu click the Filter List drp dwn and enter s, nly endpints that have s smewhere in their names will be listed in the Endpint List. Yu then wuld select what endpints yu were interested in. Filter On the Results tab (if available) yu als can filter by result fields such as Lcatin, Actin r Lcatin type. Clear All Filters Remves any filters applied t the Endpint List Filters remain applied t endpints as yu change between the Dashbard, Results and Status tabs. If yu aren t seeing the endpints yu expect, check t see if any filters are applied in the menu. After disabling/setting/clearing a filter, all endpints are cllapsed under All Tags and yu ll need t expand it by clicking the drp dwn arrw and then selecting an endpint: Refresh

6 There is a refresh buttn available in the menu as well t refresh everything, just the Endpint List r just the results/dashbard/status windw (right windw). NOTE: If yu ntice that the right windw is NOT updating crrectly as yu change endpints in the Endpint List yet the Refresh buttn wrks t refresh the right windw, yu may need t clear yur cache and restart yur brwser t fix this situatin. Use the infrmatin in the next 3 sectins t see what yu can d with the selected endpints frm the Endpint List. Dashbard tab On the Dashbard tab, yu can view basic charts fr simple reprting f endpint searches and the matches fund in thse searches as well as summary infrmatin n lcatins and types f lcatins the matches were fund in (i.e. files, , attachments, etc). In this example, a tag is selected in the Endpint List and the Dashbard windw nw shws the Tp 10 Endpints with the mst matches fr all endpints in that tag: In the Dashbard tab, yu can: View the summary inf n matches, searches, prtected and matches by file lcatin Click n ne f the charts n the right t shw different reprts fr the selected endpints.

7 Filter the endpints using the Filter buttns n the tp. Filters are kept when yu change between the Dashbard, Results and Status tabs. Remember t click Clear All Filters if yu are nt seeing the endpints/results yu expect. Duble click n a pie piece r an endpint in the chart legend t g t the Results tab with a filter applied. Yu will see results fr just that piece f pie (i.e. matches frm a specific endpint). See the inf n the Results tab fr hw t use the Results tab. Please NOTE: Yu cannt use the unprtected matches infrmatin n the cnsle t determine if a wrkstatin has unprtected matches still t prtect. An unprtected match nly means that an Identity Finder search was run that identified matches n a wrkstatin and that an actin was nt perfrmed n thse matches using the Identity Finder client. A majrity f unprtected matches are frm s that cntained identity matches that were manually mved ut f mail using Outlk. Identity Finder cannt be used t Quarantine messages and therefre the nly way t quarantine is t manually mve it utside f the Identity Finder client as detailed in this CnnSCU dcument: This culd als be a result f lcatins nt being there anymre after a search identified the lcatin as cntaining identity data. Fr example, if a lcatin was a temprary file and then the temprary files n lnger existed; thse lcatins wuld be cnsidered unprtected. We recmmend nt using unprtected matches as a way t reprt n wrkstatins that still cntain identity data. NOTE: The nly way t make unprtected matches true is t remve the data frm the cnsle s database and rerunning the searches t shw that searches were run n lcatins and n unprtected matches were fund. Status Tab The Status Tab is used t manage r view an endpint s state (i.e. if it s n the netwrk, the versin its running, scheduled task status, etc.). We will update this sectin with mre infrmatin as it relates t hw a Data Steward r Data Manager will use this tab. When using this tab, t reprt n an endpint s status, select an endpint r a tag in the Endpint List n the left and then in the right windw, click ne endpint that yu want t see detailed status n. That endpint s status will appear in the bttm, right windw. Yu can then view endpint details, scheduled tasks and the state histry t manage an endpint s scheduled tasks, but mre details n hw a Data Manager will use this tab is cming sn. Admin Tab On the Admin tab, yu can adjust yur persnal settings fr yur cnsle lgin.

8 The mst imprtant setting is the Search Results Setting. This cntrls the timestamp f each match as seen n the Results page. It can be ne f tw settings depending n if this is enabled r nt: If enabled, the timestamp will be the timestamp f the first time the identity match was fund. If it is nt enabled, it will be the timestamp that the search was perfrmed: Results Tab The Results Tab is used t view results (where searches fund matches in lcatins) f endpints selected in the Endpint List. Yu may nt have access t the Results tab. Remember that any filters yu apply are applied here as well. Yu can select Clear All Filters t reset any filters. Use the Filter by Searches t filter results frm a particular search. NOTE: Any search that des nt have results (i.e. a search fund n matches) is nt listed in Filter by Searches. Select a search frm the Filter by Searches list by clicking ne r mre than ne bx next t the search data and then click anywhere else utside the windw t view thse results. Tggle between Tree View and Flat View t change the way the results are rganized. Use the Grup By field t grup the results fr easier viewing. Use the Clumns field t hide/shw clumns.

9 The clr f the result indicates what actin was taken if any (i.e. green: shredded, yellw: ignred, red: n actin). Reprts Tab The reprts tab des nt use the Endpint List but instead uses a Reprt List. The left windw will display the list f reprts categrized in flders. Acrss the tp are a few ptins fr running reprts (searching fr a reprt, pausing a reprt r refreshing a reprt) Select the reprt yu wish t review by clicking the reprt name in the left windw. The reprt will execute and the results will be displayed in the right windw. We will be updating this sectin t dcument the reprts that are available and when yu wuld use certain reprts. Fr nw, brwse the reprts that are available t get used t hw reprting wrks and what yu can reprt n. Filtering reprt data: Unlike the Dashbard, Results and Status tabs, reprts run against all endpints yu have access t. In rder t see reprts frm a particular endpint, yu n lnger use the Endpint List, but instead yu wuld use the Filter Data buttn tfilter the reprt results clicking n the filter buttn in the menu: t launch the filter windw: Use the drpdwn t select the filter criteria, click Add and cnfigure the filter criteria Repeat fr as many filters as yu want t apply.

10 When dne, click Apply T remve an applied filter, click the Filter buttn again and click Remve fr each filter yu wish t remve r click Reset t remve the entire filter. Saving reprt data: If yu wish t save reprt data, click the Exprt buttn in the menu. The Exprt dialg will appear fr yu t cnfigure as needed. When dne, click the Save buttn: