Dataset Management

Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.

Note

Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.

For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.

Datasets

A dataset is a named group of one or more related resources that the source aggregates together.

When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.

Note

Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.

Dataset Aggregation

Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.

Resources

A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.

In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.

For more information, refer to Managing Resources.

Owner Correlation

Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.

Supported Datasets

Go to Dataset Management > Datasets on your GitHub Enterprise Server source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.

Note

Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.

The connector aggregates each dataset for every in-scope organization and adds organization to every row before combining the results.

Dataset name	Associated resources	Dataset ID
GitHub App installations	GitHub App Installation	`github:app-installations`
GitHub workflows	GitHub Workflow	`github:workflows`
GitHub Action runs	GitHub Action Run	`github:actions`
GitHub environment secrets	GitHub Environment Secret	`github:secrets`

The connector aggregates environment secret names only. It does not aggregate secret values.

Workflow, action run, and environment secret datasets require GitHub Actions and blob storage on your GitHub Enterprise Server instance.

Supported Resources

A resource represents a type of object the connector collects from GitHub Enterprise Server, such as app installations, workflows, action runs, or environment secrets. Each resource defines the attributes the connector collects for that object type and how SailPoint displays each object.

For more information, refer to Managing Resources.

Note

When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.

Go to Dataset Management > Resources on your GitHub Enterprise Server source to view each object type the connector aggregates. Select a resource to review its schema on the Schema tab.

The connector supports the following organization-qualified resources:

Resource name	Resource type	Dataset ID
GitHub App Installation	Account	`github:app-installations`
GitHub Workflow	Application	`github:workflows`
GitHub Action Run	Application	`github:actions`
GitHub Environment Secret	Credential	`github:secrets`

GitHub App Installation Attributes

Every row identifies its source organization.

Attribute	Type	Description
id	string	Unique identifier of the GitHub App installation.
name	string	Application slug associated with the installation.
app_id	string	GitHub App ID.
owner	string list	Human GitHub logins associated with the installation.
permissions	string list	Installation permissions represented as `scope:access` pairs.
repository_selection	string	Repository access scope for the installation.
target_type	string	Installation target type.
created_at	string	Date and time the installation was created.
updated_at	string	Date and time the installation was last updated.
suspended	string	Indicates whether the installation is suspended.
suspended_at	string	Date and time the installation was suspended.
organization	string	Organization login associated with this row.

GitHub Workflow Attributes

Every row identifies its source organization.

Attribute	Type	Description
id	string	Unique workflow identifier.
node_id	string	Global GitHub node identifier.
name	string	Workflow name.
owner	string list	Human GitHub logins accountable for the workflow file.
repository	string	Repository name.
repository_full_name	string	Repository name in `owner/repo` format.
workflow_id	string	Numeric GitHub workflow identifier.
path	string	Workflow file path in the repository.
state	string	Current workflow state.
html_url	string	URL of the workflow definition.
created_at	string	Date and time the workflow was created.
updated_at	string	Date and time the workflow was last updated.
organization	string	Organization login associated with this row.

GitHub Action Run Attributes

Every row identifies its source organization.

Attribute	Type	Description
id	string	Unique workflow run identifier.
name	string	Workflow run title.
node_id	string	Global GitHub node identifier.
status	string	Current workflow run status.
head_branch	string	Branch associated with the run.
actor	string	Login of the user who created the run.
triggering_actor	string	Login of the user who triggered the run.
event	string	GitHub event that triggered the run.
run_number	string	Sequential workflow counter.
workflow_id	string	Parent workflow identifier.
workflow	string	Parent workflow label used for correlation.
check_suite_id	string	Associated check suite identifier.
repository	string	Repository name in `owner/repo` format.
owner	string list	Human GitHub logins accountable for the run.
created_at	string	Date and time the run was created.
updated_at	string	Date and time the run was last updated.
organization	string	Organization login associated with this row.

GitHub Environment Secret Attributes

The connector aggregates secret names and metadata. It does not aggregate secret values.

Attribute	Type	Description
id	string	Stable secret identifier in `{owner}/{repo}/environment/{env}/secret/{name}` format.
name	string	Secret name.
scope	string	Secret scope.
organization	string	Organization where the secret is configured.
repository	string	Repository name in `owner/repo` format.
environment	string	Environment that owns the secret.
owner	string	Human GitHub logins accountable for the environment secret.
created_at	string	Date and time the secret was created.
updated_at	string	Date and time the secret was last updated.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.