Discovery policies (read-only)
Overview
DCT 20.0.0 introduces a read-only experience for discovery policies (formerly known as profiling sets on the engine). This feature allows users to view their discovery policies from a central location across all connected engines.
A new top-level page of the same name, Discovery Policies, has been created to for this centralized view. Users can access detailed information about each displayed discovery policy, including metadata and relationships with other objects, such as referenced classifiers or expressions.
Additionally, the Classifiers UI has been enhanced so users can now view a list of discovery policies that reference a specific classifier on the classifier’s details page.
No editing abilities are supported, with the exception of adding or removing tags on a discovery policy.
Limitations for discovery expressions
Users can view the list of referenced discovery policies for classifiers but not for expressions, due largely to the fact that discovery expressions are considered legacy objects and are discouraged in favor of classifiers. As a result, only a minimal number of features are provided for expressions.
GUI access
Navigate to the Compliance section in the top navigation menu.
Select Discovery Policies from the side navigation menu, which provides an overview of all discovery policies across all engines.
Each discovery policy on the top-level view includes a View button that redirects users to the policy's details page. The Overview tab displays a list of metadata.
If a discovery policy uses classifiers as its discovery method, a Classifiers tab will be present, listing the referenced classifiers.
The classifier details page now includes a new tab titled Discovery Policies, which shows a list of policies referencing the classifier object.
If a discovery policy uses expressions as its discovery method, an Expressions tab will be present, listing the referenced discovery expressions.
An Access tab on the discovery policy details page displays users, access groups, and permissions related to the policy.
API endpoints
The following APIs have been introduced:
GET /discovery-policies
List all discovery policies.POST /discovery-policies/search
Search for discovery policies.GET /discovery-policies/{discoveryPolicyId}
Retrieve a discovery policy by ID or name.GET /discovery-policies/{discoveryPolicyId}/tags
Get tags associated with a discovery policy.POST /discovery-policies/{discoveryPolicyId}/tags
Create tags for a discovery policy.POST /discovery-policies/{discoveryPolicyId}/tags/delete
Delete tags from a discovery policy.GET /discovery-policies/{discoveryPolicyId}/classifiers
List classifiers associated with a discovery policy.POST /discovery-policies/{discoveryPolicyId}/classifiers/search
Search for classifiers related to a discovery policy.GET /discovery-policies/{discoveryPolicyId}/expressions
List discovery expressions associated with a discovery policy.POST /discovery-policies/{discoveryPolicyId}/expressions/search
Search for discovery expressions related to a discovery policy.GET /classifiers/{classifierId}/discovery-policies
List discovery policies associated with a classifier.POST /classifiers/{classifierId}/discovery-policies/search
Search for discovery policies related to a classifier.