Dataset Management
Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.
Note
Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.
For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.
Datasets
A dataset is a named group of one or more related resources that the source aggregates together.
When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.
Note
Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.
Dataset Aggregation
Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.
Resources
A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.
In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.
For more information, refer to Managing Resources.
Owner Correlation
Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.
Supported Datasets
Go to Dataset Management > Datasets on your Slack SaaS source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.
Note
Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.
The connector collects Slack Bots in a separate dataset for machine identity governance. Human Slack users remain in the existing SCIM account aggregation.
- License -
idn:machine-identity-security - Schedule - Every 12 hours (
0 */12 * * *) - Command -
std:resource:list
| Dataset name | Dataset ID | Associated resources | Required license | Default schedule |
|---|---|---|---|---|
| Slack Bots | slack:bots |
Slack Bot | Machine Identity Security | Every 12 hours |
For information about the Slack Bot resource and its schema, refer to Supported Resources and Slack Bot Attributes.
To aggregate the dataset manually, go to Dataset Management > Datasets > Slack Bots, and then select Start Aggregation.
Supported Resources
A resource represents a type of object the connector collects from Slack. Each resource defines the attributes collected for that object type and how each object appears in SailPoint.
For more information, refer to Managing Resources.
Note
When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.
Go to Dataset Management > Resources on your Slack SaaS source to view each object type the connector aggregates. Select a resource to review its schema on the Schema tab.
| Resource name | Resource type | Resource ID | Identity attribute | Display attribute | Classification |
|---|---|---|---|---|---|
| Slack Bot | std:account |
slack:bot |
id |
name |
machine |
For the complete Slack Bot resource schema, refer to Slack Bot Attributes.
Account Subtype
After you create or refresh the source, the Non-Human Identity processor provisions a system-managed source subtype with the technical name slack:bot and the display name Slack Bot. The connector does not emit the subtype.
- Machine accounts appear under Non-Human Identities > Accounts.
- Machine accounts do not appear in the source Account Management > Accounts list. That list shows SCIM human accounts.
Important
Do not add Slack Bot attributes to the source Account Schema. The Account Schema remains the SCIM user schema.
Default Owner Correlation
The Slack Bot resource includes the following default primary correlation. You can change it on the Owner Correlation tab of the resource. For more information, refer to Owner Correlation.
| Setting | Value |
|---|---|
| Attribute type | Human Identity |
| Schema attribute | slackAdministratorEmail |
| Transform | None |
| Human Identity attribute | email |
| Sync to Machine Accounts | Cleared |
Additional Owners is empty by default.
Slack Bot Attributes
Use the following schema attributes for the Slack Bot resource in the Slack Bots dataset.
- Account ID -
id, the Slack bot ID that starts withB. - Display attribute -
name, taken fromprofile.real_name.
| Attribute | Type | Description |
|---|---|---|
id |
string | Slack bot ID that starts with B. This attribute is the native identity of the machine account. |
name |
string | Slack bot display name from profile.real_name. |
alwaysActive |
boolean | Whether Slack reports the bot as always active. |
enterpriseName |
string | Slack enterprise organization name from enterprise_user.enterprise_name, when present. |
workspace |
string | Workspace name from team.info. The connector falls back to the auth.test team name. |
updated |
string | Last profile update as an ISO-8601 timestamp. Slack does not return the bot creation date on users.list. |
spStatus |
string | Normalized lifecycle status, either Active or Inactive, derived from the Slack member deleted value. |
spEnvironment |
string | Workspace name used as the environment label. |
slackAdministratorName |
string | Display name of the workspace administrator. The connector uses the primary owner, then the owner, then the admin. |
slackAdministratorEmail |
string | Email of that workspace administrator. The connector uses this attribute as the default owner correlation key. |
managementUrl |
string | URL used to manage the bot in Slack: https://{team.domain}.slack.com/services/{userId}?settings=1. |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.