LightBeam Documentation
Installer GuidesData SourcesPlaybooksInsightsPrivacyOpsGovernance
  • 💡What is LightBeam?
  • 🚀Getting Started
    • ⚙️Installer Guides
      • Pre-Requisites / Security Configurations
        • Firewall Requirements
        • Securing LightBeam on EKS with AWS Certificate Manager on Elastic Load Balancer
        • Configure HTTPS for LightBeam Endpoint FQDN Standalone deployment
        • Using Custom Certificates with LightBeam
        • Securing LightBeam on GKE with Google Certificate Manager and GCE Ingress
      • Core
        • LightBeam Deployment Instructions
        • LightBeam Installer
        • Web App Deployment
        • LightBeam Diagnostics
        • LightBeam Cluster Backup & Restore using Velero
      • Platform Specific
        • AWS
        • Microsoft Azure
        • Google Cloud (GKE)
        • Standalone Virtual Machine
        • Deployment on an Existing Managed Kubernetes Cluster
        • Azure Marketplace Deployment
      • Integration and Setup
        • Setting Up AWS PrivateLink for RDS-EKS Interaction
        • Twingate and LightBeam Integration Guide
        • Data Subject Request Web Application Server
        • Generate CSR for LightBeam
  • 🧠Core Features
    • 🔦Spectra AI
      • 🔗Data Sources
        • Cloud Platforms
          • AWS Auto Discovery
          • GCP Auto Discovery
        • Databases and Datalakes
          • PostgreSQL
          • Aurora (PostgreSQL)
          • Snowflake
          • MS SQL
          • MySQL
          • Aurora (MySQL)
          • BigQuery
          • AWS Redshift
          • Oracle
          • DynamoDB
          • MongoDB
          • CosmosDB (PostgreSQL)
          • CosmosDB (MongoDB)
          • CosmosDB (NoSQL)
          • Looker
          • AWS Glue
          • Databricks
          • SAP HANA
          • CSV Files as a Datasource
        • Messaging
          • Gmail
          • Slack
          • MS Teams
          • MS Outlook
        • Developer Tools
          • Zendesk
          • ServiceNow
          • Jira
          • GitHub
          • Confluence
        • File Repositories
          • NetDocuments
          • AWS S3
          • Azure Blob
          • Google Drive
          • OneDrive
          • SharePoint
          • Viva Engage
          • Dropbox
          • Box
          • SMB
        • CRM
          • Hubspot
          • Salesforce
          • Automated Data Processing (ADP)
          • Marketo
          • Iterable
          • MS Dynamics 365 Sales
          • Salesforce Marketing Cloud
      • 🔔PlayBooks
        • What is LightBeam Playbooks?
        • Policy and Alerts
          • Types of Policies
          • How to create a rule set
            • File Extension Filter
          • Configuring Retention Policies
          • Viewing Alerts
          • Sub Alerts
            • Reassigning Sub-Alerts
            • Sub-alert States
          • Levels of Actions on Alerts
          • User Roles and Permissions
            • Admin View
            • Alert Owner View
            • Onboarding New Users
              • User Management
              • Okta Integration
              • Alert Assignment Settings
              • Email Notifications
            • Planned Enhancements
          • Audit Logs
          • No Scan List
          • Permit List
          • Policy in read-only mode
      • 📊Insights
        • Entity Workflow
        • Document Classification
        • Attribute Management Overview
          • Attributes Page View
          • Attribute Sets
          • Creating Custom Attribute
          • Attributes List
        • Template Builder
        • Label Management
          • MIP Integration
          • Google Labels Integration
      • 🗃️Reporting
        • Delta Reporting
        • Executive Report
        • LightBeam Lens
      • Scanning and Redaction of Files
        • On-demand scanning
      • How-to Guides
        • Leveraging LightBeam insights for structured data sources
      • LightBeam Dashboard Outlay
      • Risk Score
    • 🏛️PrivacyOps
      • Data Subject Request (DSR)
        • What is DSR?
        • Accessing the DSR Module
        • DSR Form Builder (DPO View)
          • Creating a New DSR Form
            • Using a Predefined Template
            • Creating a Custom Form
          • Form Configuration
          • Form Preview and Publishing
          • Multi-Form Management
          • Messaging Templates
        • Form Submission & Email Verification (Data Subject View)
        • DSR Management Dashboard (DPO View)
        • Processing DSR Requests
          • Data Protection Officer (DPO) Workflow
          • Self Service Workflow (Direct Validation)
          • Data Source Owner (DSO) Workflow
        • DSR Report
      • 🚧Consent Management
        • Overview
        • Consent Logs
        • Preference Centre
        • Settings
      • 🍪Cookie Consent
        • Dashboard
        • Banners
        • Domains
        • Settings
        • CMP Deployment Guide for Google Tag Manager
        • FAQs
      • 🔏Privacy Impact Assessment (PIA)
        • PIA Templates
        • PIA Assessment Workflow
        • Collaborator View
        • Process Owner Login View (With Collaborator)
        • Filling questionnaire without collaborator
        • Submitting the assessment for DPO review
        • DPO review process
        • Marking the assessment as reviewed
        • Editing and resubmitting assessments after DPO review
        • Revoke review request
        • Edit Reviewer
        • PIA Reports
      • ⏺️Records of Processing Activity (RoPA)
        • Creating a RoPA Template
          • How to clone a template
          • How to use a template
        • How to create a process
          • Adding Process Details
          • Adding Data Elements
          • Adding Data Subjects
          • Adding Data Retention
          • Adding Safeguards
          • Adding Transfers
          • Adding a Custom Section
          • Setting a Review Schedule
          • Data Flow Diagram
        • How to add a collaborator
        • Overview Section
        • Generating a RoPA Report Using LightBeam
        • Collaborator working on a ticket
    • 🛡️Governance
      • Access
        • Dashboard
        • Users
        • Groups
        • Objects
        • Active Directory Settings
        • Access Governance at a Data Source Level
        • Policies and Alerting
        • Access Governance Statistics
        • Governance Module Dashboard
      • Privacy At Partners
  • 📊Tools & Resources
    • 🔀API Documentation
      • API to Create Reports for Structured Datasource
    • ❓Onboarding Assessments
      • Structured Datasource Onboarding Questionnaire
        • MongoDB/CosmosDB Questionnaire
        • Oracle Datasource Questionnaire
      • SMB Questionnaire
    • 🛠️Administration
      • Audit Logs
      • SMTP
        • Basic and oAuth Configuration
      • User Management
        • SAML Identity Providers
          • Okta
            • LightBeam Okta SAML Configuration Guide
          • Azure
            • Azure AD SAML Configuration for LightBeam
          • Google
            • Google IDP
        • Local User Management
          • Adding a User to the LightBeam Dashboard
          • Reset Default Admin Password
  • 📚Support & Reference
    • 📅Release Notes
      • LightBeam v2.2.0
      • Reporting Release Notes
      • Q1 2024 Key Enhancements
      • Q2 2024 Key Enhancements
      • Q3 2024 Key Enhancements
      • Q4 2024 Key Enhancements
    • 📖Glossary
Powered by GitBook
On this page
  1. Core Features
  2. Governance
  3. Access

Groups

PreviousUsersNextObjects

Last updated 9 days ago

Navigating to the Groups Section

To access the Groups section within the Access Governance module:

  • Navigate to the top navigation bar on the home screen.

  • Click on the Governance tab.

  • From the dropdown menu, select Access Governance.

  • Within the Access Governance dashboard, choose the Group tab from the left-hand panel.

The Groups section in Access Governance provides a comprehensive overview of all existing access groups within the system. These groups represent collections of users who share similar access permissions, roles, or responsibilities across systems and applications.

Key Elements:

  • Group Name: Shown prominently (e.g., test_inbox, hello2, PMUX, etc.).

  • Member Count: The number of users currently assigned to that group.

This visual representation allows users to quickly understand the composition and size of each group at a glance.

Filters and Customization

At the top of the page, multiple filtering options are available to help refine the view:

  • Employment Type: Filter groups based on the employment type of their members.

  • Attributes: Apply specific user or group attribute filters.

  • Attribute Sensitivity: Helps identify groups that contain users or data with varying sensitivity levels.

  • Has Member: This filter can be used to show only groups that contain members (as seen in the screenshot with one active filter).

  • All Filters: Displays a consolidated view of all applied filters, with an option to clear them using Clear all.

Note- On the top-right corner, users can toggle between grid and list views using the layout switch icon.

(insert a list view group image here)

Group Details

In Access Governance, users can access detailed insights about a specific group by clicking on the group name from either the card view or the list view on the Groups tab. This action redirects you to the Group Details page, which presents a segmented view of all relevant data related to that group.

Overview Tab

The Overview tab is the default landing section when accessing a group's details. It provides a summarized snapshot of key metrics and attributes associated with the group.

Key Components of the Overview Tab:

  • Datasources: Displays the number of data sources integrated with this group. These are systems or repositories from which access data is pulled.

  • Entities: Represents the number of entities linked with the group.

  • Attributes: Indicates the count of metadata tags or labels assigned to the group, which help in categorization and filtering.

  • Members: Shows the number of users who are part of the group.

Datasources Tab

The Datasources tab within a specific group's detail view in Access Governance provides insight into the data systems or repositories to which the group has access.

Columns Displayed

Each row in the datasources table represents a distinct data source linked to the group. The columns include:

  • Data Source Name: The specific identifier or name of the integration.

  • Data Source: The platform or system being used.

  • Objects: Represents the number of accessible objects (e.g., files, folders, applications) tied to the data source.

  • Risk Density: Indicates the level of risk associated with the data the group can access. This metric helps prioritize groups based on potential security exposure.

Entities Tab

The Entities tab within a group’s detail view provides a breakdown of all data entities the group can access. It is divided into two sections:

  • Direct Access: Lists entities that the group has explicit access to on its own, without inheritance from any other group.

  • Access via Group: Lists entities that the group can access through a parent group or higher-level group association.

Attributes Tab

The Attributes tab under the Access Governance module provides a comprehensive view of the sensitive data attributes that a selected group has direct access to.

Direct access

  • Sensitivity Summary Cards: Shows count of attributes grouped by sensitivity:

    • High Sensitive: 1 attribute type

    • Medium Sensitive: 3 attributes type

    • Low Sensitive: 1 attribute type

Note- These are further colour coded with Red, Yellow and Green respectively.

  • Attribute Tiles: Lists all attributes the group can directly access. Each tile shows:

    • Attribute name

    • Sensitivity level (High, Medium, Low)

    • Associated data sources This gives a clear, detailed view of the attribute and its context, helping users understand exactly what data is accessible and from where.

Access via Groups

This section displays the attributes that a group inherits access to via a parent group.

Sensitivity Summary Cards: Shows inherited attribute types grouped by sensitivity:

  • High Sensitive: 0 attribute types

  • Medium Sensitive: 0 attribute types

  • Low Sensitive: 0 attribute types

In this example, the group does not currently inherit access to any attributes from its parent groups.

Members Tab

The Members tab displays all users who are part of the selected group.

Member Summary Cards: Provides a quick count of users by employment category:

  • Employees: 2 users

  • Contractors: None in this example

Member List Table: Shows detailed information for each member, including:

  • Name

  • Member Type (e.g., Direct or Inherited)

  • Employment Type (e.g., Employee, Contractor)

🧠
🛡️
Groups section in access governance
Groups section in access governance
A specific group's overview in access governance
Datasource tab of a specific group in access governance
Entities that a specific group has access to
directly accesible attributes
attributes accesible via a group
Memebrs of a group