Dataset Management
Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.
Note
Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.
For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.
Datasets
A dataset is a named group of one or more related resources that the source aggregates together.
When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.
Note
Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.
Dataset Aggregation
Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.
Resources
A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.
In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.
For more information, refer to Managing Resources.
Owner Correlation
Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.
Supported Datasets
Go to Dataset Management > Datasets on your Argo CD source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.
Note
Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.
The connector uses datasets to schedule aggregation of the following resource types:
| Dataset | Resource Type | Associated Resources |
|---|---|---|
| Argo CD local users | Account | Argo CD Local Users Resource |
| Argo CD project tokens | Credential | Argo CD Project Tokens Resource |
Supported Resources
A resource represents a type of object the connector collects from the connected system (such as, service accounts, bots or agents). Each resource defines the attributes collected for that object type (such as name, ID, or status) and how each object appears in SailPoint.
For more information, refer to Managing Resources.
Note
When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.
Argo CD Local Users Resource
| Field | Value |
|---|---|
| Resource ID | argocd:local-user |
| Resource type | std:account |
| Identity attribute | identity |
| Display attribute | name |
Attributes
The following table lists schema attributes for the Argo CD Local Users resource:
| Attribute | Description | Type | Entitlement | Multi-valued |
|---|---|---|---|---|
| capabilities | Capabilities assigned to the account, such as apiKey. |
string | No | Yes |
| classification | Account classification. Local users with the apiKey capability are classified as machine accounts. |
string | No | No |
| enabled | Indicates whether the local user account is enabled. | boolean | No | No |
| identity | Unique identifier for the local user in the source. Format: local-user:{accountName} |
string | No | No |
| name | Display name of the local user account. | string | No | No |
| spDescription | Human-readable description for governance. | string | No | No |
| spEnvironment | Deployment environment label, for example production or development. |
string | No | No |
| spStatus | Normalized lifecycle status: Active, Inactive, or Pending. |
string | No | No |
| tokenCount | Total number of tokens issued to the local user account. | int | No | No |
| tokens | Metadata for JWT tokens issued to the local user. | string | No | Yes |
Argo CD Project Tokens Resource
| Property | Value |
|---|---|
| Resource ID | argocd:project-token |
| Resource type | std:credential |
| Identity attribute | identity |
| Display attribute | name |
Attributes
The following table lists schema attributes for the Argo CD Project Tokens resource:
| Attribute | Description | Type | Entitlement | Multi-valued |
|---|---|---|---|---|
| description | Description of the token, if provided during creation. | string | No | No |
| expiresAt | Date and time when the token expires, in ISO-8601 UTC format. Not present if the token does not expire. | string | No | No |
| identity | Unique identifier for the token in the source. Format: project-token:{project}:{role}:{tokenId} |
string | No | No |
| isExpired | Indicates whether the token has passed its expiry date. | boolean | No | No |
| issuedAt | Date and time when the token was created, in ISO-8601 UTC format. For example, 2026-03-30T02:30:00Z. |
string | No | No |
| name | Display name of the token. Format: {project}:{role}:{tokenId} |
string | No | No |
| projectName | Name of the AppProject the token belongs to. | string | No | No |
| role | Role associated with token, if any. | string | No | No |
| spDescription | Human-readable description for governance. | string | No | No |
| spEnvironment | Deployment environment label, for example production or development. | string | No | No |
| spStatus | Normalized lifecycle status: Active, Inactive, or Pending. |
string | No | No |
| tokenId | Unique identifier for the token. | string | No | No |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.