Client Tools Guide › Role Discovery › Discovery – Structured Search

Discovery – Structured Search

The Structured Search supported by the Discovery process that the client tools provide extends the Rule-Based search process. The rule-based role search process finds roles that match each attribute chosen in a flat manner. The Structured Search creates roles that reflect the hierarchic structure of the search attributes that you choose. Roles that are created using this mechanism are provided with the text Structured at the beginning of the role name. Roles discovered via a Structured Search are provided with a rule that reflects the hierarchic path of the search, and are added to the configuration. You can set several parameters to refine the process by which rule based roles are identified.

To assign attributes for the Structured Search process

1. From the Discovery menu, select Structured Search.

   The Structured Search window opens.

2. Set the Search Parameters as described for Basic Roles.
3. In the Rules Parameters group, specify Rule Parameters to create rule-based roles during discovery. The following options are available:

   Role Name Prefix

   Defines a prefix to be included as part of each role discovered.

   User Attributes to Search

   You can set several Users Attributes to serve as the basis for the rules-based role search. CA GovernanceMinder creates roles for each group of users that match the attributes added to the Attributes to Search list. Thus, if you select the Organization and organization Type attributes, the client tools create roles for groups of Users that match the selection and that have common resources.

   Select All Attributes

   When selected, the client tools override all previously selected user attributes and takes all the configuration’s User Attributes into consideration when conducting the search.

   Let DNA Order Attributes

   When selected, Client Tools override the Search order as listed in the User Attributes list.

   Ignore Null Value

   Select this option to prevent rules being created where an attribute does not contain any values.

   Min. Percent within Group

   Specify the range of values for which roles will be searched. This is useful in case you wish to search for a single role, or for a part of a hierarchy.

   Max. Rules per Group

   Specify the threshold for creating a characteristic role. For example, you may require a role that characterizes at least 90% of the users in each of the sub-groups. If you specify a high value, CA GovernanceMinder may not find a role for all selected groups. In any case, CA GovernanceMinder will only associate with the role users that have the role's resources. Use "almost matching" search to identify users that almost match.

   Preferred Search Mode

   Indicates whether to discover roles with a preference to Users, Resources or User-Resource Connections as the focus of the roles created by the rule.

4. Click Search, to start the discovery process.

   Newly created roles are listed in a new configuration file.

More information:

Basic Roles