Security Trimming
Query pipeline stage configuration specifications
ImportantThis stage is deprecated in Managed Fusion 5.9.0. The Graph Security Trimming stage, introduced in Managed Fusion 5.6.0, uses a single filter query for all data sources instead of one filter query per data source. Migrate your query pipeline stage to the graph security trimming stage.
This describes how to migrate your Managed Fusion releases prior to 5.8 Graph Security Trimming query pipeline stage setup to Managed Fusion 5.8 or later.It applies to deployments using:
- SharePoint Optimized V2 connector v1.1.0 or later
- LDAP ACLs V2 connector v1.4.0 or later to crawl Active Directory in Azure
- The LDAP ACLs V2 connector v1.2.0 or later to crawl Active Directory in LDAP
Migration
To migrate a deployment that is crawling Active Directory to Managed Fusion 5.8 or later, follow these steps.Update the datasource configurations
The SharePoint Optimized V2 and LDAP ACLs V2 datasources must index the content documents and ACL documents to the same collection. Ensure both datasources use the same value,contentCollection, for the field ACL Collection ID.- Sign in to Managed Fusion and click your application.
- Click Indexing > Datasources.
- Open your SharePoint Optimized V2 or LDAP ACLs V2 datasource.
- Under Security, update the configuration to use
contentCollectionas the ACL Collection ID. The Security checkbox must be checked for this field to display. - Save the configuration.
Clear and the datasources and perform a full crawl
- Click Indexing > Datasources.
- Open your SharePoint Optimized V2 or LDAP ACLs V2 datasource.
- Click Clear Datasource > yes.
- Click Collections > Collections Manager.
- Verify the
job_statecollection is empty. - Return to your datasource.
- Click Run > Start to reindex your data.
Configuration
When entering configuration values in the UI, use unescaped characters, such as
\t for the tab character. When entering configuration values in the API, use escaped characters, such as \\t for the tab character.