Domains, Entities, and Attributes

A domain provides a view of the data that Guardium® stores.

Each domain contains a set of data related to a specific purpose or function (data access, exceptions, policy violations, and so forth). For a description of all domains, see Domains.

Each domain contains one or more entities. An entity is a set of related attributes, and an attribute is basically a field value. For a description of all entities and attributes, see Entities and Attributes.

A Guardium query returns data from one domain only. When the query is defined, one entity within that domain is designated as the main entity of the query. Each row of data returned by a query will contain a count of occurrences of the main entity matching the values returned for the selected attributes, for the requested time period. This allows for the creation of two-dimensional reports from entities that do not have a one-to-one relationship.

There is a separate query builder for each domain, and access to each query builder is controlled by security roles. Thus each Guardium role typically has access to a subset of domains, depending on the function of that role within the company. Guardium admin role users typically have access to all reporting domains.

Some domains are available only when optional components (CAS, or Classification, for example) are installed. Other domains report information pertaining to the Guardium appliance (archiving activity, for example), and are available by default to Guardium admin role users only.

Some of the attributes described in this appendix are available to users with the admin role only. These are labeled: Reserved for admin role use only.

For users who do not have the admin role, these attributes will not be available from the query builder.

Similarly, not all attributes are available for all database protocols. When using a query builder, if you notice that an entity or attribute described in the documentation is not listed in the Entities pane, that entity or attribute is not available for the selected database type.