Populate groups

Learn how to populate groups for compliance monitoring.

Before you begin

Install a compliance monitoring template by following the procedure described in Set up compliance monitoring.

About this task

A default server IP group is automatically created and populated when monitoring is configured using the compliance monitoring set-up tool. However, it is important to define the users and applications that are allowed to access your databases by populating several additional groups. The following procedure describes how to quickly populate groups.
Important:
  • Empty groups are not treated as wild cards and will not capture any traffic.
  • Hierarchical or nested groups are not supported.

Procedure

  1. Use one of the following methods to identify unpopulated groups and open the Edit group dialog to begin.
    • In the Monitoring enabled section of a compliance monitoring tile, look for not enabled icons and click the associated Populate group link.
    • Click the View details link on a compliance monitoring tile to open the details panel, select the Summary tab, and click the edit group icon next to a group.
      Tip: In the details panel, unpopulated groups are highlighted with a small unpopulated icon.
    At this point, the details view and Edit group dialog will open on top of the compliance monitoring dashboard.
  2. From the Edit group dialog, optionally provide a Category and Classification for the group. The Application type, Group type, and Description (used as the Group name) fields are populated based on the group selected in the previous step and are not editable.
  3. From the Edit group dialog, use one of the following methods to begin populating the selected group.
    • Click the new icon to add an item to the Member table and manually specify a group member.
    • Click Import > From CSV to import group members from a CSV file.
    • Click Import > From group to import group members from another Guardium group of the same group type. For example, you can populate an authorized users group from another group containing a list of users but not from a group containing a list of IP addresses.
    • Click Import > From external datasource to import group members from an external datasource. The Datasource menu will include all datasources marked shared or of type custom domain. For more information, see Importing from external datasources.
  4. When you are finished adding members to the group, click OK to return to the compliance monitoring dashboard.