Standard Security Configuration

The following table lists the connectors that support mapped security and provides the recommended security configurations for ingested documents.

  • The ACLs column indicates the type of ACLs that are added to each document by the connector:

    • BROWSE - An ACL is added to the document field AUTONOMYMETADATA_BROWSE so that you can determine browse permission (the ability to see that an item exists, but not read it).
    • READ - An ACL is added to the document field AUTONOMYMETADATA so that you can determine read permission.
    • WRITE - An ACL is added to the document field AUTONOMYMETADATA_WRITE so that you can determine write permission.
  • The Security Type column provides the value used in the SECURITYTYPE document field. Your Content component text index might contain documents that originated from different connectors. Each connector adds a SECURITYTYPE field to each document, so that you can configure your Content component to recognize documents that originated from that type of connector, and process each document using the appropriate security type. See Identify the Security Type.
  • The Content Component Configuration column provides the recommended security configuration for your Content component. See Configure Security Types.
Connector ACLs Security Type Content Component Configuration Notes
BROWSE READ WRITE
Box   ✔   box 
Type=STANDARD
 Mapped security is supported only for Box Enterprise.
CMIS   ✔   (Not set by default) 
Type=STANDARD
  
Confluence REST   ✔   Confluence 
Type=STANDARD
  
Documentum   ✔   (Not set by default) Type=AUTONOMY_SECURITY_V4_DOCUMENTUM_TCS_MAPPED  
Dropbox   ✔   NT 
Type=STANDARD
 Mapped security is supported only for Dropbox for Business.
Dynamics   ✔   DYNAMICS 
Type=STANDARD
ACLEveryoneEnabled=FALSE
  
Exchange OData ✔ ✔ ✔ EXCHANGEODATA 
Type=AUTONOMY_SECURITY_V4_EXCHANGE_MAPPED
  
Exchange Web Service   ✔   (Not set by default) 
Type=AUTONOMY_SECURITY_V4_EXCHANGE_MAPPED
  
FileNet   ✔   (Not set by default) Type=AUTONOMY_SECURITY_FILENET_MAPPED  
File System ✔ ✔ ✔ NT Type=AUTONOMY_SECURITY_V4_NT_MAPPED NTFS
File System   ✔   POSIX Type=AUTONOMY_SECURITY_V4_UNIX_MAPPED UNIX
File System   ✔   NETWARE Type=AUTONOMY_SECURITY_V4_NETWARE_MAPPED NETWARE
GitHub   ✔   GITHUB 
Type=STANDARD
CaseSensitive=True
  
Google Calendar   ✔   GOOGLECALENDAR 
Type=STANDARD
ACLCaseSensitive=False
  
Google Chat   ✔   GOOGLECHAT 
Type=STANDARD
ACLCaseSensitive=False
  
Google Cloud Storage   ✔   GOOGLECLOUDSTORAGE 
Type=STANDARD
ACLCaseSensitive=False
  
Google Drive   ✔   GOOGLEDRIVE 
Type=STANDARD
ACLCaseSensitive=False
 Mapped security is supported only when you retrieve information from users in a G Suite domain.
Google Mail   ✔   GOOGLEMAIL 
Type=STANDARD
ACLCaseSensitive=False
  
GuideWire   ✔   Guidewire 
Type=STANDARD
  
Hadoop   ✔   HADOOP 
Type=STANDARD
  
Jira REST   ✔   Jira 
Type=STANDARD
  
Microsoft Planner   ✔   PLANNER 
Type=STANDARD
  
Microsoft Teams   ✔   OFFICETEAMS 
Type=STANDARD
ACLCaseSensitive=False
  
OneDrive   ✔   ONEDRIVE 
Type=STANDARD
ACLCaseSensitive=False
  
OpenText   ✔   OPENTEXT 
Type=AUTONOMY_SECURITY_V4_GENERIC_MAPPED
SecurityACLFormat=<E=B!>:U:<U=SLE+>:G:<G=SLE+>
SecurityACLCheck=E=1?P:-,U=[U]?P:-,G=[G]?P:F
  
OpenText Core Content ✔ ✔ ✔ CoreContent 
Type=STANDARD
  
OpenText Media Management   ✔   OTMM 
Type=STANDARD
  
OpenText eDOCs   ✔   eDOCS 
Type=STANDARD
  
Salesforce   ✔   SALESFORCE Type=AUTONOMY_SECURITY_V4_GENERIC_MAPPED
SecurityACLFormat=U:<U=SLEC+>:G:<G=SLEC+>
SecurityACLCheck=U=[U]?P:-,G=[G]?P:F 		 
Salesforce Native   ✔   SALESFORCE Type=AUTONOMY_SECURITY_V4_GENERIC_MAPPED
SecurityACLFormat=U:<U=SLEC+>:G:<G=SLEC+>
SecurityACLCheck=U=[U]?P:-,G=[G]?P:F 		 
ServiceNow   ✔   SERVICENOW 
Type=STANDARD

Role based security is supported, but script, condition and any record level access controls are not supported by the connector.

Security Attribute based security is partially supported. Security Attributes are defined by conditions, based on attributes about the current user/session. Expressions that can be statically evaluated (for example user is authenticated, user is member of a group, and so on) are supported.
SharePoint OData   ✔   SHAREPOINT 
Type=STANDARD
  
SharePoint Remote   ✔   (Not set by default) 
Type=STANDARD
  
Zendesk   ✔   ZENDESK 
Type=STANDARD
  
Zoom Chat   ✔   ZOOMCHAT 
Type=STANDARD