11.4 Editing Attribute Values of Objects in the Catalog

After you have published data, you can view the items, such as users and applications, along with their attributes, such as a user’s phone number. To view the attributes of a specific item in the catalog, select Catalog, the type of data you want to view, and the object you want to view.

To edit attribute values individually, select the pencil icon for that item. Identity Governance displays any attributes that the Data Administrator has designated as editable, along with the current attribute value. When you edit the data , you override the originally collected content and Identity Governance shows an icon next to the value to indicate the change. Any attribute that you edit will be persisted through subsequent collection and publication, even if the original value for the attribute changes. You can later reset the attribute value to its collected value. You can also associate tags, or metadata, so you can more easily identify the information when you create and perform a review.

NOTE:

  • You can edit only the attributes that are marked as editable.

  • You can add new external attributes each time you collect data from a data source. However, after you publish the data for that collector, you cannot remove the attributes.

  • When you specify a string type for a new extended attribute, Identity Governance always truncates the string at 2000 characters.

  • If you edit any permission records to set the excludeFromCatalog attribute to true, the only way to see these records in the catalog again is to manually change the spermission table value back to false. If bulk editing was used to set the excludeFromCatalog attribute to true, copy the Bulk Data Update CSV file that made the original edits, and change the edited value to UNDO_CURATION.

  • You can only reset the attribute values that are collected. Attributes that are configured such as Last Account Review Date or Last Unmapped Account Review Date cannot be reset.

IMPORTANT:Identity Governance evaluates only collected attribute values for the authentication matching rules, not edited values. For more information, see Changing the Values for Authentication Matching and Identity Governance Services in Identity Governance 3.6 Installation and Configuration Guide.

11.4.1 Editing Attribute Values in Bulk

You can edit attribute values for multiple objects at the same time by importing the data into Identity Governance using a CSV file. For example, you might want to add photos for users in the catalog. When adding multiple values to a single attribute, separate the values with the pipe sign (|).

To edit a number of attribute values:

  1. Under Data Sources, select Identities or Applications depending on the type of data you want to edit.

  2. In the upper right, select Bulk data update.

  3. Select +.

  4. Specify all the mandatory fields.

  5. Select + next to Attributes to update and select the attributes.

  6. (Optional) Select + next to Decision context attributes and select the attributes Identity Governance will use to match the updated information with the correct item.

  7. Save your settings.

  8. Select the Export file icon to generate the template.

  9. Get the template from the appropriate location on the Identity Governance server. The template location is specified through the Identity Governance Configuration Utility. For more information, see Section 11.3, Configuring Bulk Data Update Settings.

  10. Add the update information to the template, and then copy the updated template to the appropriate location on the Identity Governance server. Identity Governance automatically detects updated files and applies the updated information to your data.

    NOTE:You can specify multiple users as permission owners. When performing bulk edits of permission owners, the ID name changes from uniqueUserId to uniqueOwnerId and uniqueOwnerId requires a new flag, #true, with each permission owner ID.

You can also undo an edited value or explicitly set a value to null. Identity Governance recognizes certain keywords in cells that perform specific actions:

  • UNDO_CURATION: Removes any previously edited values for this attribute.

  • SET_NULL: Sets the appropriate null or empty value on this attribute.