Applying feature flags

Edit online

Guardium Data Protection (GDP) supports feature flags, allowing organizations to control when new capabilities are activated in their environments.

Before you begin

12.2.x and later This functionality is available in Guardium 12.2.x and later

Prerequisites to unlock and enable features controlled by flags:

  • Guardium version 12.2.1.0 or later.
  • Access to the Guardium Central Manager with administrative privileges.
  • Access to Fix Central and Passport Advantage websites.
  • Feature patches for your Guardium version downloaded from Fix Central.
  • The version-specific unlock file from Passport Advantage (if GDP 12.2.x was downloaded from Fix Central).
For detailed information about activation requirements and compatibility notes, see Feature patch reference.

About this task

This procedure walks you through the steps to activate features that are behind manual flags.

This feature flag enhancement provides flexibility to organizations that want to apply fixes without automatically enabling new functionality. You can view the list of features behind feature flags by using this command: list_feature_flags.

If GDP was downloaded through Passport Advantage, all features behind feature flags are automatically unlocked. However, if GDP was downloaded from Fix Central, features that are behind feature flags must be explicitly unlocked and enabled by using GuardAPI commands on the central manager or standalone machine. For more information, see unlock_feature_flags and enable_disable_feature_flag.

Admins can also assign roles to features by using the GuardAPI command grant_role_to_object_by_Name.

Features remain unlocked after Guardium is upgraded to the next version. New features that are introduced in the next release may require a new unlock file.

Procedure

  1. Install the feature patch on your GDP system.
    Follow the standard patch installation procedure for your GDP deployment.
  2. View the list of features behind feature flags by using this command: list_feature_flags.
  3. Proceed with the next step based on the download source for your GDP 12.2.x patch.
    • If you downloaded GDP from Fix Central, go to step 4.
    • If you downloaded GDP from Passport Advantage, go to step 5.
  4. Unlock feature flags by using either the Guardium UI or a GuardAPI command on a central manager or standalone machine. This applies changes across all managed units.
    • To unlock by using the Guardium UI, go to Setup > Tools and Views > License. Then, upload the feature flag unlock file.
    • To unlock by using the GuardAPI command, see unlock_feature_flags.
    The output is a list of unlocked features that are behind feature flags.
  5. Enable features that are behind feature flags by using the GuardAPI command enable_disable_feature_flag. For more information, see enable_disable_feature_flag.
  6. If you want non-administrators to access the feature, you must assign roles by using the grdapi command grant_role_to_object_by_Name. For more information, see grant_role_to_object_by_Name.
    For example, to assign user role access to the long-term retention feature, use this command: grdapi grant_role_to_object_by_Name objectType=FeatureFlag objectName="COLD_STORAGE" role="user"