Dataset Management

Dataset Management lets you review the object types a source collects and control how the source aggregates those objects into SailPoint. Use Dataset Management to view and manage resource attributes, datasets and their resources, enable dataset aggregation schedules, perform manual aggregation, and view aggregation history.

Note

Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.

For more information, refer to Managing Datasets and Resources for datasets, resources, owner correlation, and aggregation.

Datasets

A dataset is a named group of one or more related resources that the source aggregates together.

When aggregation runs for a dataset, the source collects all resources in that dataset from the managed system in one aggregation job. Activate or deactivate aggregation at the dataset level, not for individual resources.

Note

Each resource belongs to exactly one dataset for that source. The source defines which resources belong to each dataset. You can enable aggregation and review associated resources, but you cannot create or delete datasets or move resources between them.

Dataset Aggregation

Configure aggregation on the Dataset Aggregations tab for each dataset. Configure each dataset separately. During aggregation, your owner correlation rules are automatically applied to link machine identities to their human owners. For more information, refer to Configuring Dataset Aggregations.

Resources

A resource defines an object type from the managed system. It specifies the kind of object, the attributes the source collects, and how the source identifies and displays each object. Resources form the building blocks of the data model.

In the UI, each resource appears under Dataset Management > Resources with its schema. A resource does not run aggregation by itself. The dataset that owns the resource collects it during aggregation.

For more information, refer to Managing Resources.

Owner Correlation

Configure owner correlation on each resource to link aggregated objects to human owners. If you do not configure owner correlation, or if the mapping produces no match, an owner is not assigned. For more information, refer to Configuring Owner Correlation.

Supported Datasets

Go to Dataset Management > Datasets on your Spacelift source to view the datasets the connector aggregates. Select a dataset to review its associated resources and configure aggregation.

Note

Configure aggregation for each dataset separately. For more information, refer to Dataset Aggregation.

Dataset Name	Dataset ID	Associated Resource
Spacelift Credentials	`spacelift:credentials`	Spacelift API Key

Supported Resources

The Spacelift Credentials dataset includes one resource.

For more information, refer to Managing Resources.

Note

When you enable dataset aggregation for a selected dataset, all resources in that dataset are collected at once. Activate or deactivate aggregation at the dataset level, not for individual resources.

Resource Name	Resource Type	Resource ID
Spacelift API Key	Credential	`spacelift:api-key`

Spacelift API Key Attributes

Identity attribute: Id

Display attribute: Name

Attribute Name	Description
`Id`	Unique identifier of the API key. For OIDC keys, this value is prefixed. For example, `oidc::spacelift::XXXXXXXXXXXXXXXXXXXXXXX`.
`Admin`	Indicates if the API key has administrative access.
`Created At`	Timestamp indicating when the API key was created.
`Creator`	Identity of the creator of the API key.
`Deleted`	Indicates if the API key is deleted.
`Expires At`	Timestamp indicating when the API key expires. This field is absent when the key does not expire.
`Last Used At`	Timestamp indicating when the API key was last used. This field is absent when the key has never been used.
`Name`	Name of the API key.
`Issuer`	OIDC issuer URL.
`Client Id`	OIDC client ID (audience).
`Subject Expression`	Regular expression against which the system matches the subject of the OIDC token.
`Claim Mapping`	OIDC claim mapping formatted as `name:value` entries. This field remains empty for secret-based keys.
`Team Count`	Number of teams associated with the API key.
`Teams`	Teams associated with the API key. Teams provide the key with a virtual group membership.
`Space Count`	Number of spaces associated with the API key.
`Access Rules`	List of permissions given explicitly to user, formatted as `space:spaceAccessLevel.`
`Is Machine User`	Indicates if the API key represents a machine user.
`Type`	Type of the API key, either `SECRET` or `OIDC`.
`Description`	Description of the API key.
`Roles`	IDs of roles bound to this API key, retrieved from `apiKeyRoleBindings.role.id`.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.