LukeParke/developer.sailpoint.com
1
0
Fork 0
mirror of https://github.com/LukeHagar/developer.sailpoint.com.git synced 2025-12-09 20:37:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

CAM-27635: update with Rachel's copy edits.

Browse Source
This commit is contained in:
Phillian Haynes
2025-03-25 10:47:44 -05:00
parent 4db475bcd3
commit f67b12dd60
1 changed files with 21 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
docs/reporting/access-intelligence-center/ciem-er-diagram.md
View File

@@ -20,39 +20,39 @@ import MermaidViewer from '@site/src/components/MermaidViewer';
<MermaidViewer diagram='erDiagram
"Entitlement Service Usage" {
varchar ENTITLEMENT_VALUE PK "ISC entitlement value (usually cloud native id) associated with the access"
varchar ENTITLEMENT_VALUE PK "ISC entitlement value associated with the access. Usually the cloud native ID."
varchar CIEM_KEY PK "composite key: CLOUD_PROVIDER-SERVICE-ENTITLEMENT_ACCOUNT_NATIVE_IDENTITY-CLOUD_SOURCE_NATIVE_ID-CLOUD_SUB_SOURCE_NATIVE_ID"
varchar ACCESS_ASSIGNMENT_ID "Cloud native id of the access assignment object. AWS: <policy arn>|<statement id> GCP: <policy id>:<role id>, Azure: RoleAssignment, RoleAssignmentScheduleInstance (PIM) or RoleEligibilityScheduleInstance (PIM)"
varchar ACCOUNT_CLOUD_NAME "Cloud provider associated with the account (AWS|GCP|Okta|Azure), note this will be different than CLOUD_PROVIDER in the case of federated access"
varchar ACCESS_ASSIGNMENT_ID "Cloud native ID of the access assignment object. AWS: <policy arn>|<statement id> GCP: <policy id>:<role id>, Azure: RoleAssignment, RoleAssignmentScheduleInstance (PIM) or RoleEligibilityScheduleInstance (PIM)"
varchar ACCOUNT_CLOUD_NAME "Cloud provider associated with the account (AWS|GCP|Okta|Azure). When the access is federated, this will be different than CLOUD_PROVIDER."
varchar DISPLAY_NAME "Account display name"
varchar ACCOUNT_EMAIL "Account email. Note: AWS IAM users will not have email"
varchar ENTITLEMENT_ACCOUNT_NATIVE_ID "Account native id"
varchar CLOUD_PROVIDER "Cloud provider of the service the account has access to (aws|gcp|azure)"
varchar CLOUD_SOURCE_DISPLAY_NAME "Cloud native display name of the service source. AWS: Management account, Azure: Tenant, GCP: Org"
varchar CLOUD_SOURCE_NATIVE_ID "Cloud native id of the service’s source"
varchar CLOUD_SUB_SOURCE_DISPLAY_NAME "Cloud native display name of the service sub-source (if applicable). AWS: managed account, Azure: subscription, GCP: project"
varchar CLOUD_SUB_SOURCE_NATIVE_ID "Cloud native id of the service’s sub-source (if applicable)"
varchar CLOUD_SOURCE_NATIVE_ID "Cloud native ID of the service’s source"
varchar CLOUD_SUB_SOURCE_DISPLAY_NAME "Cloud native display name of the service sub-source (if applicable). AWS: Managed account, Azure: Subscription, GCP: Project"
varchar CLOUD_SUB_SOURCE_NATIVE_ID "Cloud native ID of the service’s sub-source (if applicable)"
varchar SERVICE "Cloud service for which usage is being determined"
varchar SOURCE_NAME "ISC source name associated with the cloud service"
array ENTITLEMENT_USAGE "aggregated usage across all accounts and services for the ENTITLEMENT_VALUE"
array ENTITLEMENT_USAGE "Aggregated usage across all accounts and services for the ENTITLEMENT_VALUE"
}
"Resource Access" {
varchar CIEM_KEY PK "composite key: CLOUD_PROVIDER-SERVICE-ENTITLEMENT_ACCOUNT_NATIVE_IDENTITY-CLOUD_SOURCE_NATIVE_ID-CLOUD_SUB_SOURCE_NATIVE_ID"
varchar ACCOUNT_NATIVE_IDENTITY PK "Account native id"
varchar ACCOUNT_NATIVE_IDENTITY "Account native ID"
varchar ACCESS_LEVEL "The access level(s) the account has to the resource (Read, Write, Admin)"
varchar ACCOUNT_SOURCE_TYPE "Cloud provider of the account GCP|AWS|Azure|Okta"
varchar RESOURCE_ACCESS_CLOUD_PROVIDER "Cloud provider of the resource (gcp|aws|azure)"
varchar RESOURCE_ACCESS_CLOUD_SOURCE_NATIVE_ID "cloud sub-source native id of the resource’s source (if applicable)"
varchar RESOURCE_ACCESS_CLOUD_SOURCE_SUB_NATIVE_ID "Cloud provider of the service the account has access to (aws|gcp|azure)"
varchar RESOURCE_ACCOUNT_NAME "Cloud native display name of the resource source. AWS: account name, Azure: subscription name, GCP: project name"
varchar RESOURCE_ID "Cloud native id of the resource"
varchar RESOURCE_NAME "Human readable name of resource (if exists)"
varchar RESOURCE_TYPE "Resource type, derived from the cloud api response types"
varchar RESOURCE_ACCESS_CLOUD_PROVIDER "Cloud provider of the resource (GCP|AWS|Azure)"
varchar RESOURCE_ACCESS_CLOUD_SOURCE_NATIVE_ID "Cloud sub-source native ID of the resource’s source (if applicable)"
varchar RESOURCE_ACCESS_CLOUD_SOURCE_SUB_NATIVE_ID "Cloud provider of the service the account has access to (GCP|AWS|Azure)"
varchar RESOURCE_ACCOUNT_NAME "Cloud native display name of the resource source. AWS: Account name, Azure: Subscription name, GCP: Project name"
varchar RESOURCE_ID "Cloud native ID of the resource"
varchar RESOURCE_NAME "Human readable name of the resource (if available)"
varchar RESOURCE_TYPE "Resource type, derived from the cloud API response types"
varchar RESOURCE_ACCESS_SERVICE "Cloud service associated with the resource"
varchar RESOURCE_ACCESS_SOURCE_NAME "ISC source name associated with the resource"
}
ENTITLEMENT {
varchar ENTITLEMENT_VALUE PK "ISC entitlement value (usually cloud native id) associated with the access"
varchar ENTITLEMENT_VALUE PK "ISC entitlement value associated with the access. Usually the cloud native ID."
varchar ENTITLEMENT_ATTRIBUTE "Entitlement type as determined by ISC sources"
varchar ENTITLEMENT_DISPLAY_NAME "Human readable name of the entitlement as constructed by ISC"
timestamp ENTITLEMENT_SYNC_DATE "Timestamp of latest sync of entitlement to source tables"
@@ -63,25 +63,25 @@ import MermaidViewer from '@site/src/components/MermaidViewer';
timestamp IDENTITY_CREATED "Identity created date in ISC"
timestamp IDENTITY_UPDATED "Identity modified date in ISC"
varchar NAME "Name of the identity"
varchar IDENTITY_DISPLAY_NAME "User friendly label for the identity; usually First Name Last Name"
varchar MANAGERS_NAME "Managers name for the identity"
varchar IDENTITY_DISPLAY_NAME "User friendly label for the identity. Usually First Name Last Name."
varchar IDENTITY_MANAGERS_NAME "Name of the manager of the identity"
varchar EMAIL "Email of the identity"
varchar STATUS "Status of the identity"
varchar JOB_TITLE "Job title of the identity"
varchar LOCATION "Location of the identity"
varchar LOCATION_CODE "Location code of the identity"
varchar DEPARTMENT "Department of identity"
varchar DEPARTMENT "Department of the identity"
timestamp IDENTITY_SYNC_DATE "Timestamp of latest sync of identity to source tables"
}
ACCOUNT {
varchar ACCOUNT_NATIVE_IDENTITY PK "Cloud native id of account"
varchar ACCOUNT_NATIVE_IDENTITY PK "Cloud native ID of account"
varchar IDENTITY_ID PK "ISC unique identifier of the identity correlated with the account (null if uncorrelated)"
varchar ACCOUNT_ID "ISC unique identifier of account"
varchar ACCOUNT_NAME "Name of account as configured in ISC"
varchar ACCOUNT_CREATED_DATE "Account creation date (ingestion/creation in ISC)"
varchar ACCOUNT_UPDATED_DATE "Account update date (updated in ISC)"
varchar ACCOUNT_DISPLAY_NAME "Display name of account as configured in ISC"
varchar ACCOUNT_STATUS "Status of account (enabled|disabled|locked)"
varchar ACCOUNT_STATUS "Status of account (Enabled|Disabled|Locked)"
varchar ACCOUNT_SYNC_DATE "Timestamp of latest sync of record to source tables"
}
IDENTITY ||--o{ ACCOUNT : "associated to"