Page History

Data markings allow you to mark classify resources, categories, users, and user groups with custom-defined access levels. These levels work hierarchically; i.e., the data marking with the highest level access includes all lower access levels, mid-level data marking includes the lowest levels, and so on. You can employ data markings when listing or accessing resources on the server as an additional security layer together with the Role-Based Access Control (RBAC) mechanismYou can define hierarchical, non-hierarchical (flat) classifiers, or a combination of both. This also means you can assign multiple data markings to a  resource, category, user, or group.

In order to use data markings, you need sufficient permissions, either the Mark Data permission assigned to the Data Markings Manager role or the Configure Data Markings permission assigned to the Security Manager role.

...

To use data markings, you must enable them in the Settings app, where you can also create, reorder, edit, and remove data markings. 

To enable data markings

...

1. In the Settings application, go to the Data markings page. 
2. Choose the Enable data markings option.

Once you enable data markings, you see the data markings configuration page:

Image Added

Image Removed

Data markings configuration page.

Creating data markings

Once you enable data markings in the Data markings configuration page, no data markings are shown yet. To use . You have to create them first. Before creating any data markings, you first have to create thema data marking group.

To create a data marking group

...

1. In the Settings application, go to the Data markings configuration page.
2. Click Image Added at the bottom right corner.
3. In the dialog that opens, enter the name of the data marking group.
4. Choose the data marking group type.
   • Hierarchical: This type of data marking group works hierarchically; i.e., the top-most data marking in the group reflects the most restrictive access level, while the bottom one is the least restrictive access level. The parent data marking allows access to data marked with child markings but not vice-versa.
     Image Added
     
   • Flat: These are non-hierarchical data markings. For example, in a data markings group Suppliers (Supplier A, Supplier B), a user may be marked with data marking Supplier A or data marking Supplier B. Data marking Supplier A does not grant broader access rights than data marking Supplier B and vice versa. This also means that both data marking Supplier A and data marking Supplier B can be assigned to the same user. In other words, entries in a flat data marking group act like tags.
     Image Added
     
5. Click Create.

To create a single data marking

...

1. In the Settings application, go to the Data markings configuration page
, enter
2. .
3. Click Image Added at the bottom right corner.
4. ChooseImage Added to create a single data marking.
5. In the dialog that opens, choose the Data marking group for the new data marking.
6. Enter the name for the data marking in the Data marking field.
7. Enter the abbreviated portion marking in the Portion marking field.
To
8. Optionally, choose the color of the portion marking
, click
9. by clicking the palette icon.
10. Click Create.
The created data marking is now visible in the table below the page.

Reordering hierarchical data markings

Because As the name implies, hierarchical data markings work hierarchically, so their order in the table is important. Thus, the data marking at the very top of the table will have the broadest access rights and will include all of the levels below it. To change the priority restriction level of the data markings, reorder them in the table.

To reorder data markings

...

1. In the Data markings page select the hierarchical data marking group to reorder.
2. Click the menu on the left side of the table:
   
Image Removed
3. Image Added
4. Once the moving pointer appears, drag the data marking up or down to the preferred position.

Editing data markings

To edit data markings

...

1. In the Data markings page select a data marking group.
2. In the data markings table select 
Image Removed
3. Image Added.
4. Choose Edit .
5. Make your changes in the dialog and select Save.

Removing data markings

Deleting data markings

To delete To remove data markings

...

1. In the Data markings page select a data marking group.
2. In the data markings table select .
3. Choose RemoveDelete.
4. Confirm by selecting Remove Delete.