Dataset Management
Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.
Note
Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.
For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.
Datasets
A dataset is a named group of one or more related resources that the source aggregates together.
When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.
Note
Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.
Dataset Aggregation
Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.
Resources
A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.
In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.
For more information, refer to Managing Resources.
Owner Correlation
Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.
Supported Datasets
Go to Dataset Management > Datasets on your CircleCI source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.
Note
Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.
| Dataset name | Associated resources | Dataset ID | Aggregation schedule |
|---|---|---|---|
| CircleCI NHI Graph | CircleCI Checkout / SSH / Deploy Key, CircleCI OIDC Custom Claim | circleci:nhi |
Disabled |
The dataset holds CircleCI non-human identity resources: checkout keys and OIDC custom claims. The organization acts as a scope anchor that you supply in connection settings, not as an entitled resource.
The aggregation schedule is disabled until you enable it. Set the schedule in Dataset Management > Datasets.
The dataset uses the std:test-connection and std:resource:list commands.
For resource property and attribute definitions, refer to:
Supported Resources
Resource schemas appear under Dataset Management > Resources. Each resource is read-only.
For more information, refer to Managing Resources.
Note
When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.
The CircleCI source lists the following resources. Select a resource to review its schema on the Schema tab.
| Resource name | Resource type | Resource ID |
|---|---|---|
| CircleCI Checkout / SSH / Deploy Key | Credential | circleci:checkout-key |
| CircleCI OIDC Custom Claim | Credential | circleci:oidc-claim |
You supply the organization ID in connection settings as a scope anchor. The connector does not create a resource for the organization.
To review attribute names and descriptions after you create the source:
- Go to Admin > Connections > Sources.
- Open your CircleCI source.
- Select Dataset Management > Resources.
- Select a resource.
- Open the Schema tab. Connector-specific attributes are read-only. You can add, edit, or delete custom attributes.
CircleCI Checkout / SSH / Deploy Key
| Property | Value |
|---|---|
| Resource ID | circleci:checkout-key |
| Dataset ID | circleci:nhi |
| Name (UI) | CircleCI Checkout / SSH / Deploy Key |
| Type (UI) | Credential |
| Type (spec) | std:credential |
| Identity attribute | identity |
| Display attribute | fingerprint |
Attributes
The connector defines its attributes as read-only. You can add, edit, or delete custom attributes.
| Attribute | Description | Type | Entitlement | Multi-valued |
|---|---|---|---|---|
createdAt |
Creation timestamp. | string | No | No |
fingerprint |
Key fingerprint. | string | No | No |
identity |
<projectSlug>#<fingerprint> |
string | No | No |
preferred |
Preferred checkout key flag. | boolean | No | No |
projectId |
Owning project UUID. | string | No | No |
projectSlug |
Owning project slug. | string | No | No |
publicKey |
Public key text. | string | No | No |
sourceKeyType |
CircleCI source key type. | string | No | No |
CircleCI OIDC Custom Claim
| Property | Value |
|---|---|
| Resource ID | circleci:oidc-claim |
| Dataset ID | circleci:nhi |
| Name (UI) | CircleCI OIDC Custom Claim |
| Type (UI) | Credential |
| Type (spec) | std:credential |
| Identity attribute | identity |
| Display attribute | identity |
Attributes
The connector defines its attributes as read-only. You can add, edit, or delete custom attributes.
| Attribute | Description | Type | Entitlement | Multi-valued |
|---|---|---|---|---|
audience |
Configured audiences. | string | No | Yes |
audienceUpdatedAt |
Audience last updated timestamp. | string | No | No |
identity |
org:<orgId> or org:<orgId>#project:<projectId> |
string | No | No |
orgId |
Organization UUID. | string | No | No |
projectId |
Project UUID (project scope only). | string | No | No |
ttl |
Configured time to live (TTL). | string | No | No |
ttlUpdatedAt |
TTL last updated timestamp. | string | No | No |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.