CA Identity Governance Programming Guide › CSV File Import › Representing Endpoint Objects in CA Identity Governance

Representing Endpoint Objects in CA Identity Governance

An endpoint object is anything on the application that a given user may or may not be privileged to. Endpoint objects are defined by the following elements:

• Endpoint Type—the type of application from which the data is coming from, for example, SAP
• Endpoint Name—the name of the application instance from which the data is coming from, for example, 'SAP-PROD'
• Object Type—the object type, such as SAP Role or UNIX Group
• Unique ID—any string that uniquely identifies the endpoint object among other objects of the same type. This ID can be a name, a path, or a DN.
• Friendly Name—any string to describe what the object is. This name does not have to be unique.

Once you determine what endpoint objects exist on the endpoint, identify if it should be represented as a role or a resource within CA Identity Governance. Note the following:

• If the endpoint object represents a single privilege, it is represented as a resource in CA Identity Governance.
• If the endpoint object represents a privilege that gives other privileges, it is represented as a role in CA Identity Governance.