Dataset Management
Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.
Note
Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.
For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.
Datasets
A dataset is a named group of one or more related resources that the source aggregates together.
When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.
Note
Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.
Dataset Aggregation
Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.
Resources
A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.
In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.
For more information, refer to Managing Resources.
Owner Correlation
Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.
Supported Datasets
Go to Dataset Management > Datasets on your Harness source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.
Note
Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.
| Dataset Name | Associated Resources | Dataset ID | Default Schedule |
|---|---|---|---|
| Service Accounts | Service Account | service-account |
2:00 AM UTC daily |
| Tokens | API Token, Delegate Token | token |
2:00 AM UTC daily |
Supported Resources
Resource schemas appear under Dataset Management > Resources. Connector-specific attributes are read-only.
For more information, refer to Managing Resources.
Note
When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.
| Resource Name | Resource Type | Resource ID |
|---|---|---|
| Service Account | Account | harness:service-account |
| API Token | Credential | harness:api-token |
| Delegate Token | Credential | harness:delegate-token |
Service Account Attributes
Schema attributes for the Service Account resource (harness:service-account). The identity attribute is identity, and the display attribute is name.
| Attribute Name | Description | Type | Multi-Valued |
|---|---|---|---|
accountIdentifier |
The Harness account the service account belongs to. | string | No |
classification |
Account classification. Harness service accounts are machine accounts. | string | No |
description |
Description of the service account purpose. | string | No |
email |
Email address associated with the service account. | string | No |
identifier |
Unique identifier of the service account within its scope. | string | No |
identity |
Scoped unique identity of the service account. | string | No |
name |
Display name of the service account. | string | No |
orgIdentifier |
The organization the service account is scoped to, if any. | string | No |
projectIdentifier |
The project the service account is scoped to, if any. | string | No |
roles |
Role identifiers assigned to the service account through role assignments. | string | Yes |
tags |
Key-value tags applied to the service account (JSON value). | string | No |
API Token Attributes
Schema attributes for the API Token resource (harness:api-token). The identity attribute is identity, and the display attribute is name.
| Attribute Name | Description | Type | Multi-Valued |
|---|---|---|---|
accountIdentifier |
The Harness account the token belongs to. | string | No |
apiKeyIdentifier |
Identifier of the parent API key grouping the token belongs to. | string | No |
apiKeyType |
Indicates whether the token is a personal access token (USER) or service account token (SERVICE_ACCOUNT). | string | No |
createdAt |
Date and time of token creation in ISO-8601 UTC format, for example 2026-03-30T02:30:00Z. |
string | No |
expiryAt |
Date and time of token expiry in ISO-8601 UTC format, for example 2026-03-30T02:30:00Z. |
string | No |
identifier |
Unique identifier of the token. | string | No |
identity |
Scoped unique identity composed of parent identifier and token identifier. | string | No |
lastModifiedAt |
Date and time of the last modification in ISO-8601 UTC format, for example 2026-03-30T02:30:00Z. |
string | No |
name |
Display name of the token. | string | No |
owner |
Owner of the token. Personal access tokens (USER) use the owning user identifier. Service account tokens (SERVICE_ACCOUNT) use the service account identifier. | string | No |
parentIdentifier |
Identifier of the owning user or service account. | string | No |
valid |
Indicates whether the token is currently valid. | boolean | No |
validFrom |
Date and time from which the token is valid in ISO-8601 UTC format, for example 2026-03-30T02:30:00Z. |
string | No |
validTo |
Date and time after which the token expires in ISO-8601 UTC format, for example 2026-03-30T02:30:00Z. |
string | No |
Delegate Token Attributes
Schema attributes for the Delegate Token resource (harness:delegate-token). The identity attribute is identity, and the display attribute is name.
| Attribute Name | Description | Type | Multi-Valued |
|---|---|---|---|
createdAt |
Date and time of token creation in ISO-8601 UTC format, for example 2026-03-30T02:30:00Z. |
string | No |
createdBy |
Creator of the delegate token. Uses the next-gen user unique ID when available. Otherwise stores the creator details as JSON. | string | No |
identity |
Unique identity of the delegate token. This value matches uuid. |
string | No |
name |
Display name of the delegate token. | string | No |
owner |
Human owner of the delegate token. Uses the next-gen user unique ID when available. Otherwise uses the creator UUID. | string | No |
ownerIdentifier |
Organization or project identifier that owns the delegate token, if scoped. | string | No |
parentUniqueId |
Harness unique ID of the account, organization, or project that owns the delegate token. | string | No |
status |
Lifecycle status of the delegate token. | string | No |
uuid |
Unique identifier of the delegate token. | string | No |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.