Dataset Management

Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.

Note

Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.

For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.

Datasets

A dataset is a named group of one or more related resources that the source aggregates together.

When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.

Note

Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.

Dataset Aggregation

Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.

Resources

A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.

In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.

For more information, refer to Managing Resources.

Owner Correlation

Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.

Supported Datasets

Go to Dataset Management > Datasets on your Salesforce SaaS source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.

Note

Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.

Dataset Name	Description	Dataset ID	Required Licenses	Schedule
AgentForce	Salesforce Agentforce agents and their assigned permission sets and profiles.	`agentforce:agents`	`idn:agentic-identity-governance`	Every 12 hours
Connected Apps	Salesforce Connected Apps with OAuth scopes, consumer keys, and metadata.	`salesforce:connected-apps`	`idn:agentic-identity-governance`	Every 12 hours

Supported Resources

A resource represents a type of object the connector collects from Salesforce, such as Agentforce agents and Connected Apps. Each resource defines the attributes collected for that object type, such as name, ID, or status, and how each object appears in SailPoint.

For more information, refer to Managing Resources.

Note

When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.

Under Dataset Management > Resources, the Salesforce source lists each object type the connector aggregates. Select a resource to review its schema on the Schema tab.

AgentForce

The AgentForce dataset contains the following resource:

Resource Name	Resource Type	Resource ID
Salesforce Agentforce Agent	`std:agent`	`salesforce:agentforce-agent`

For schema attribute definitions, refer to Salesforce Agentforce Agent Attributes.

Connected Apps

The Connected Apps dataset contains the following resource:

Resource Name	Resource Type	Resource ID
Salesforce Connected App	`std:application`	`salesforce:connected-app`

For schema attribute definitions, refer to Salesforce Connected App Attributes.

Salesforce Agentforce Agent Attributes

Schema attributes for the Salesforce Agentforce Agent resource.

Property	Value
Resource ID	`salesforce:agentforce-agent`
Resource type	`std:agent`
Identity attribute	`Id`
Display attribute	`MasterLabel`

Attribute	Type	Description
Id	string	Unique identifier of the agent.
apiFriendlyName	string	Unique, API-safe name for the agent.
MasterLabel	string	User-friendly label shown in the Salesforce UI.
Type	string	Type of agent (`Bot`, `ExternalCopilot`, `InternalCopilot`).
BotUserId	string	ID of the associated Salesforce user account that represents the bot's identity.
CreatedById	string	ID of the user who created the agent.
CreatedDate	string	Creation timestamp.
LastModifiedDate	string	Last update timestamp.
LastModifiedById	string	ID of the user who last updated the agent.
SystemModstamp	string	Read-only timestamp tracking the last time the record was modified.
permissionSets	`array<string>`	Permission sets assigned to the agent via the Agent User.
profile	`array<string>`	Profiles that can access the agent.
spStatus	string	Active status of the agent, derived from the presence of an active BotVersion.
spBusinessApplication	string	SailPoint business application identifier used by SAF OOTB signatures.

Salesforce Connected App Attributes

Schema attributes for the Salesforce Connected App resource.

Property	Value
Resource ID	`salesforce:connected-app`
Resource type	`std:application`
Identity attribute	`id`
Display attribute	`name`

The createdById attribute is correlated to the account Id attribute by the OWNER_PRIMARY rule.

Attribute	Type	Description
`id`	string	Unique Salesforce Tooling API ID for the Connected App.
`name`	string	Application name of the Connected App.
`spDescription`	string	Description of the Connected App.
`developerName`	string	Unique, API-safe developer name.
`fileName`	string	Metadata file path, for example, `connectedApps/{DeveloperName}.connectedApp`.
`applicationUrl`	string	Salesforce Setup UI link constructed from the token ID.
`spStatus`	string	Derived application status (`Active` or `Inactive`).
`createdById`	string	ID of the user who created the Connected App.
`lastModifiedDate`	string	Last modification timestamp.
`lastModifiedById`	string	ID of the user who last modified the Connected App.
`manageableState`	string	Metadata manageable state, such as unmanaged or installed.
`scopes`	array	OAuth scopes representing application permissions from the SOAP retrieve operation.
`contactEmail`	string	Contact email configured on the Connected App.
`spBusinessApplication`	string	SailPoint business application identifier used by SAF OOTB signatures.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.