Migrate to Graph Security Trimming in Managed Fusion
This article describes how to migrate your Managed Fusion releases prior to 5.8 Graph Security Trimming query pipeline stage setup to Managed Fusion 5.8 or later. It applies to deployments using:
-
The SharePoint Optimized V2 connector v1.1.0 or later
-
The LDAP ACLs V2 connector v1.4.0 or later to crawl Active Directory in Azure
-
The LDAP ACLs V2 connector v1.2.0 or later to crawl Active Directory in LDAP
Migration
To migrate a deployment that is crawling Active Directory to Managed Fusion 5.8 or later, follow these steps.
Update the datasource configurations
The SharePoint Optimized V2 and LDAP ACLs V2 datasources must index the content documents and ACL documents to the same collection. Ensure both datasources use the same value, contentCollection
, for the field ACL Collection ID.
-
Sign in to Managed Fusion and click your application.
-
Click Indexing > Datasources.
-
Open your SharePoint Optimized V2 or LDAP ACLs V2 datasource.
-
Under Security, update the configuration to use
contentCollection
as the ACL Collection ID.The Security checkbox must be checked for this field to display. -
Save the configuration.
Repeat this process for all required datasources.
Clear and the datasources and perform a full crawl
-
Click Indexing > Datasources.
-
Open your SharePoint Optimized V2 or LDAP ACLs V2 datasource.
-
Click Clear Datasource > yes.
-
Click Collections > Collections Manager.
-
Verify the
job_state
collection is empty. -
Return to your datasource.
-
Click Run > Start to reindex your data.
Repeat this process for all required datasources.
Update the Graph Security Trimming stage configuration
The Graph Security Trimming query pipeline stage must be configured to be compatible with your datasources.
-
Click Querying > Query Pipelines.
-
Open the query pipeline associated with your SharePoint Optimized V2 or LDAP ACLs V2 data.
-
Select the Graph Security Trimming query pipeline stage.
-
Update the stage to use the following values:
Field Value ACL solr collection
contentCollection
Join method
topLevelDV
Join Field
_lw_acl_ss
-
Save the configuration.