Managing Datasets and Resources

You can use datasets to aggregate and govern AI agents and other non-human identities such as MCP servers, credentials, and IAM roles. Datasets group one or more resources on a single aggregation schedule. A resource defines the object type from the managed system, the attributes the source collects, and how the source identifies and displays each object. When a dataset is aggregated, the source collects all resources in that dataset from the managed system.

Managing Datasets

You can view the out-of-the-box datasets and resources for a supported connector in the source's configuration. You can configure an aggregation schedule for datasets and their resource objects or perform manual aggregations.

Supported Connectors

The following connectors include default datasets and resources. Refer to the appropriate connector guide for more information.


Anthropic Claude Enterprise	Argo CD SaaS	AWS SaaS
Cursor SaaS	Databricks SaaS	Google Workspace SaaS
JDBC SaaS	Jenkins	Microsoft Entra SaaS
n8n	Salesforce SaaS	ServiceNow Identity Governance SaaS
Snowflake SaaS	Web Services SaaS	Wiz

Creating Datasets

You can create datasets for generic sources like Web Services SaaS and JDBC SaaS.

Go to Admin > Connections > Sources.
Select or edit the source you want to configure.
In the Dataset Management section, select Datasets.
Select + Create Dataset.
Enter a name and description for the schema and then select Create.

The dataset has been created. You can now create resources and associate them with this dataset.

To update this dataset, select Actions > Edit for the dataset. Update its name and description as needed.

Configuring Dataset Aggregations

Go to Admin > Connections > Sources.
Create or select an existing source.
In the Dataset Management section, select Datasets.
Select the dataset you want to configure.
Select the Dataset Aggregations tab.
To enable scheduled aggregations, select the Enable Schedule checkbox in the Schedule Aggregations section.
To run a single aggregation, select Start Aggregation in the Manual Aggregation section.

After an aggregation has started, you can view its progress in the Latest Aggregation section.

If you need to disable an aggregation’s schedule, clear the Enable Schedule checkbox.

Removing Resource Objects

You might need to perform a dataset aggregation to test your resource schemas. If you find that changes are required, you can remove all objects that have been aggregated and update your configurations.

Go to Admin > Connections > Sources.
Select a source that supports dataset aggregation.
In the Dataset Management section, select Datasets.
Select a dataset.
Select the Dataset Aggregations tab.
In the Manual Removal tile, select Remove Objects.
Confirm the removal by selecting Remove.

The removal might take a few minutes to complete.

Note

Removals cannot be performed while an aggregation is running on this source. Conversely, an aggregation cannot be performed while objects are being removed.

Important

This action only removes objects from Identity Security Cloud. These changes are not provisioned to the source. Remove the objects from the source to prevent them from being restored during the next aggregation.

Deleting Datasets

You can delete a dataset for a generic source if it is no longer needed. SailPoint recommends deleting the resources associated with the dataset before deleting the dataset to prevent orphaned resources.

Go to Admin > Connections > Sources.
Select or edit the source you want to configure.
In the Dataset Management section, select Datasets.
Select Actions > Delete for the dataset you want to delete.
Confirm the deletion by selecting Delete.

Managing Resources

Sources with preconfigured datasets contain default resources and schemas. SailPoint recommends using these schemas unless you need to update an attribute for a specific purpose. You can update a resource to define or update its owner correlation.

For generic sources like JDBC SaaS or Web Services SaaS, you can create a resource and define its schema. You can also remove a resource from a dataset.

Creating Resources

You can create a resource and define its schema for generic sources.

Go to Admin > Connections > Sources.
Select the source you want to configure.
In the Dataset Management section, select Resources.
Select Create Resource.
Enter a name for the resource in the Resource Name field.
Select the dataset that should aggregate this resource from the Associated Dataset dropdown list.
Select a resource type from the Resource Type dropdown list.
In the Schema Attribute section, enter a name and description for a new attribute. Each resource must include an attribute during setup. You can add additional attributes later.
To configure this attribute to support multiple values, select the Multi-Valued checkbox.
Select the Designate this attribute as the Resource ID attribute checkbox to designate this attribute as the Resource ID.
Select the Designate this attribute as the Resource Name attribute checkbox to designate this attribute as the Resource Name.
From the Type dropdown list, select the type of value this attribute will contain.
Select Save to create the resource and attribute.
Select Continue to acknowledge that the new attribute will take on the Resource ID and Name until more attributes are added.

The resource is created. You can add additional attributes to its schema by updating it.

Best Practice

SailPoint recommends adding all attributes before running a dataset aggregation to prevent duplicate non-human identities and other issues.

Updating Resources

You can update a preconfigured resource’s schema by adding custom attributes. Custom attributes can also be updated or deleted.

For generic sources, you can add, update, or delete attributes in the schemas you created for resources.

Adding Attributes

Go to Admin > Connections > Sources.
Select the source you want to configure.
In the Dataset Management section, select Resources.
Select the resource you want to update.
In the Schema tab, select + Add Attribute.
Enter a unique name and description for the attribute.
Notes
- The attribute's name should exactly match the attribute name in the source system.
- Attribute names cannot exceed 128 characters.
To configure this attribute to support multiple values, select the Multi-Valued checkbox.
Select the Designate this attribute as the Resource ID attribute checkbox to designate this attribute as the Resource ID.
Select the Designate this attribute as the Resource Name attribute checkbox to designate this attribute as the Resource Name.

Warning

If the Resource ID and Resource Name attributes require changes, it is strongly recommended to do so before an aggregation is performed. After an aggregation has run, editing these attributes can result in duplicate non-human identities and other serious issues.
From the Type dropdown list, select the type of value this attribute will contain.
Select Save to add the attribute to the schema.
Repeat the above steps for each attribute you want to add.

Updating Attributes

Go to Admin > Connections > Sources.
Select the source you want to configure.
In the Dataset Management section, select Resources.
Select the resource you want to update.
In the Schema tab, find the attribute you want to update and select the edit icon from the Actions column.
Make changes as needed.

Warning

If the Resource ID and Resource Name attributes require changes, it is strongly recommended to do so before an aggregation is performed. After an aggregation has run, editing these attributes can result in duplicate non-human identities and other serious issues.
Select Save to update the attribute.

Deleting Attributes

You can delete custom attributes from a resource schema.

Go to Admin > Connections > Sources.
Select the source you want to configure.
In the Dataset Management section, select Resources.
Select the resource you want to update.
In the Schema tab, find the custom attribute you want to remove and select the delete icon from the Actions column.
Confirm the deletion.

Configuring Owner Correlation

You can configure owner correlation for each resource. The matching human identity will become responsible for managing and reviewing aggregated non-human identities.

Note

If owner correlation is not configured or the mapping results in no match, no owner is assigned.

To configure owner correlation:

Go to Admin > Connections > Sources.
Select the source you want to configure.
In the Dataset Management section, select Resources.
Select the resource you want to configure owner correlation for.
Select the Owner Correlation tab.
In the Primary Correlation section, choose a method to identify the human identity responsible for managing and reviewing non-human identities for this resource:
- Select + Add Criteria if no criteria row is present.
- Set the Attribute Type to Human Identity or Account.
- In the Schema Attribute field, select the resource schema attribute to use in the match.
- (Optional) In the Transform field, select a transform to apply to the schema attribute value before matching.
- Complete the target attribute for the attribute type you selected:
  - When Human Identity is selected, search for and select a value in Human Identity Attribute.
  - When Account is selected, search for and select a value in Account Attribute.
    
    Tip
    
    Define correlation criteria using attributes that reliably identify the owner in your environment, such as email or employee ID mapped to a human identity attribute.
(Optional) Select Sync to Machine Accounts to apply the primary owner mapping to machine accounts when supported for the resource.
(Optional) Select + Add Criteria to add more mapping rules. Drag a criteria row to change evaluation order or select the delete icon to remove a criteria row.
Configure additional owners as needed. You can use criteria to define the human identity responsible for these non-human identities or select a governance group.
Select Save to save these configurations.

Deleting Resources

When a resource is deleted, it is removed from the resource list and any associated datasets.

Go to Admin > Connections > Sources.
Select the source you want to configure.
In the Dataset Management section, select Resources.
Find the resource you want to delete.
In the Actions column, select Delete.
Confirm the deletion.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.