After you have published data, you can view the items, such as users and applications, along with their attributes, such as a user’s phone number. To view the attributes of a specific item in the catalog, select Catalog, the type of data you want to view, then the object you want to view.
To edit attribute values, select the pencil icon for that item. Identity Governance displays any attributes that the Data Administrator has designated as editable, along with the current attribute value. When you change a value, Identity Governance shows an icon next to the value to indicate the change. You can later reset the value to its original setting. You can also associate tags, or metadata, so you can more easily identify the information when you create and perform a review.
NOTE:
You can edit only the attributes that are marked as editable.
You can add new external attributes each time you collect data from a data source. However, after you publish the data for that collector, you cannot remove the attributes.
When you specify a string type for a new extended attribute, Identity Governance always truncates the string at 2000 characters.
If you edit any permission records to set the excludeFromCatalog attribute to true, the only way to ever see these records in the catalog again is to manually change the spermission table value back to false, or if bulk editing was used to set it to true, copy the Bulk Data Update CSV file that made the original edits and change the edited value to UNDO_CURATION.
For more information, see the following sections:
When you edit the data, you override the originally collected content. Any attribute that you edit will be persisted through subsequent collection and publication, even if the original value for the attribute changes. To replace the edited value with the currently collected value, reset the collected value.
IMPORTANT:Identity Governance evaluates only collected attribute values for the authentication matching rules, not edited values. For more information, see Auth Matching Rules.
You can edit attribute values for multiple objects at the same time by importing the data into Identity Governance using a comma-separated value (CSV) file. For example, you might want to add photos for users in the catalog. When adding multiple values to a single attribute, separate the values with the pipe sign (|).
IMPORTANT:Identity Governance evaluates only collected attribute values for the authentication matching rules, not edited values. For more information, see Auth Matching Rules.
Before you follow this procedure, make sure you have configured the bulk database folder in the Identity Governance Configuration Utility. For more information, see Bulk Data Update Settings.
To edit a number of attribute values:
Under Data Sources select Identities or Applications depending on the type of data you want to edit.
Select Bulk data update in the upper right.
Select +.
Enter all the mandatory fields.
Select + next to Attributes to update and select the attributes.
(Optional) Select + next to Decision context attributes and select the attributes Identity Governance will use to match the updated information with the correct item.
Save your settings.
Select the Export file icon to generate the template.
Get the template from the appropriate location on the Identity Governance server. The template location is specified through the Identity Governance Configuration Utility. For more information, see Bulk Data Update Settings.
Add the update information to the template, and then copy the updated template to the appropriate location on the Identity Governance server. Identity Governance automatically detects updated files and applies the updated information to your data.
NOTE: You can specify multiple users as permission owners. When performing bulk edits of permission owners, the ID name has changed from uniqueUserId to uniqueOwnerId and uniqueOwnerId requires a new flag, #true, with each permission owner ID.
You can also undo an edited value or explicitly set a value to null. Identity Governance recognizes certain keywords in cells that perform specific actions:
UNDO_CURATION: Removes any previously edited values for this attribute.
SET_NULL: Sets the appropriate null or empty value on this attribute.