Skip to main content
BlueXP classification

Define additional group IDs as open to organization

Contributors netapp-tonacki
PDFs

When group IDs (GIDs) are attached to files or folders in NFS file shares they define the permissions for the file or folder; such as whether they are "open to the organization". If some group IDs (GIDs) are not initially set up with the "Open to Organization" permission level, you can add that permission to the GID so that any files and folders that have that GID attached will be deemed "open to the organization".

After you make this change and BlueXP classification rescans your files and folders, any files and folders that have these group IDs attached will show this permission in the Investigation Details page, and they'll also appear in reports where you are displaying file permissions.

To activate this functionality, you need to log into the BlueXP classification system so you can edit a configuration file and run a script. See how to log in to the BlueXP classification system depending on whether you manually installed the software on a Linux machine or if you deployed the instance in the cloud.

Add the "open to organization" permission to group IDs

You need to have the group ID numbers (GIDs) before starting this task.

Steps

  1. On the BlueXP classification system, go to "/opt/netapp/config/custom_configuration" and open the file data_provider.yaml.

  2. In the line "organization_group_ids: []" add the group IDs. For example:

    organization_group_ids: [1014, 1015, 21, 2021, 1013, 2020, 1018, 1019]

    Do not change anything else in this file.

  3. Save the changes to the file.

  4. Go to "/opt/netapp/Datasense/tools/customer_configuration/data_providers" and run the following script:

    update_data_providers_from_config_file.sh

    This command commits the revised group ID permissions to the classification engine.

Result

All subsequent scans of your data will identify files or folders that have these group IDs attached as "open to organization".

You can edit the list of group IDs and delete any group IDs you added in the past using these same steps. The revised list of group IDs will be updated after you run the script to commit your changes.

View the current list of group IDs

It's possible for the contents of the data_provider.yaml configuration file to be different than what has actually been committed after running the update_data_providers_from_config_file.sh script. To view the current list of group IDs that you've added to BlueXP classification, run the following command from "/opt/netapp/Datasense/tools/customer_configuration/data_providers":

get_data_providers_configuration.sh