Managing Datasets and Resources
You can use datasets to aggregate and govern AI agents and other non-human identities such as MCP servers, credentials, and IAM roles. Datasets group one or more resources on a single aggregation schedule. A resource defines the object type from the managed system, the attributes the source collects, and how the source identifies and displays each object. When a dataset is aggregated, the source collects all resources in that dataset from the managed system.
Managing Datasets
You can view the out-of-the-box datasets and resources for a supported connector in the source's configuration. You can configure an aggregation schedule for datasets and their resource objects or perform manual aggregations as needed.
Supported Connectors
The following connectors include default datasets and resources. Refer to the appropriate connector guide for more information.
Configuring Dataset Aggregations
-
Go to Admin > Connections > Sources.
-
Create or select an existing source.
-
In the Dataset Management section, select Datasets.
-
Select the dataset you want to configure.
-
Select the Dataset Aggregations tab.
-
To enable scheduled aggregations, select the Enable Schedule checkbox in the Schedule Aggregations section.
-
To run a single aggregation, select Start Aggregation in the Manual Aggregation section.
After an aggregation has started, you can view its progress in the Latest Aggregation section.
If you need to disable an aggregation’s schedule, clear the Enable Schedule checkbox.
Managing Resources
You can update a resource by editing its owner correlation.
Configuring Owner Correlation
You can configure owner correlation for each resource. The matching human identity will become responsible for managing and reviewing aggregated non-human identities.
Note
If owner correlation is not configured or the mapping results in no match, no owner is assigned.
To configure owner correlation:
-
Go to Admin > Connections > Sources.
-
Select the source you want to configure.
-
In the Dataset Management section, select Resources.
-
Select the resource you want to configure owner correlation for.
-
Select the Owner Correlation tab.
-
In the Primary Correlation section, choose a method to identify the human identity responsible for managing and reviewing non-human identities for this resource:
-
Select + Add Criteria if no criteria row is present.
-
Set the Attribute Type to Human Identity or Account.
-
In the Schema Attribute field, select the resource schema attribute to use in the match.
-
(Optional) In the Transform field, select a transform to apply to the schema attribute value before matching.
-
Complete the target attribute for the attribute type you selected:
-
When Human Identity is selected, search for and select a value in Human Identity Attribute.
-
When Account is selected, search for and select a value in Account Attribute.
Tip
Define correlation criteria using attributes that reliably identify the owner in your environment, such as email or employee ID mapped to a human identity attribute.
-
-
-
(Optional) Select Sync to Machine Accounts to apply the primary owner mapping to machine accounts when supported for the resource.
-
(Optional) Select + Add Criteria to add more mapping rules. Drag a criteria row to change evaluation order or select the delete icon
to remove a criteria row. -
Configure additional owners as needed. You can use criteria to define the human identity responsible for these non-human identities or select a governance group.
-
Select Save to save these configurations.
Managing Owner Aggregation
You can re-run correlation to update to newly configured correlation.
To re-run owner correlation:
-
Go to Admin > Connections > Sources.
-
Select the source you want to configure.
-
In the Dataset Management section, select Resources.
-
Select the resource you want to configure owner correlation for.
-
Select the Owner Correlation tab.
-
In the Resource Owner Aggregation section, select Re-run Owner Correlation.
The owner correlation will be recalculated.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.