PolicyObj
A workload evaluated against a classification policy at a point in time, along with its classification and access-risk results.
Fields
| Field | Type | Description |
|---|---|---|
| accessRiskReasons | [RiskReason!]! | User access risk reasons. |
| accessTypeSummary | AccessTypeSummary | Specifies the access type summary for a principal. |
| allAnalyzerMappings | [AnalyzerMapping!]! | Analyzer mappings for a path in this policy object. |
| analysisStatus | AnalysisStatus! | Analysis status of the policy object. |
| analyzerHits | AnalyzerHits | Analyzer Hits count for various risk levels. |
| assetMetadata | AssetMetadata | Specifies the metadata of the asset. |
| attributesSummary | [AttributesSummary!]! | Specifies the sensitive files count summary for attributes. |
| dataTypeResults | [DataTypeResult!]! | Specifies the data type level results. |
| deltaUserCounts | PrincipalCounts | Change in the user count for various risk levels. |
| documentTypesSummary | [DocumentTypeSummary!]! | Specifies the sensitive files count summary for document types. |
| exposureSummary | [ExposureSummary!]! | Signifies the file exposure summary of the asset. |
| fileResultConnection | FileResultConnection! | File classification results within this policy object's snapshot. |
| folderChildConnection | FileResultConnection! | Browse the contents of a directory within this policy object's snapshot. |
| hasInsights | Boolean! | Specifies whether the object has insights or not. |
| id | String! | Cache-differentiating identifier for this policy object at a point in time. |
| isUserAccessEnabledObject | Boolean! | Specifies whether the object has user access enabled or not. |
| isUserActivityEnabled | Boolean! | Specifies whether the user activity for the object is enabled. |
| mipLabelsSummary | [MipLabelSummary!]! | Specifies the sensitive files count summary for MIP Labels. |
| objectStatus | ObjectStatus! | Assignment and analysis status of this object. |
| objectType | DataGovObjectType! | Specifies the object type of the asset. |
| osType | DataGovOsType! | Operating system of the workload. |
| policySummaries | [ClassificationPolicySummary!]! | Summaries of the policies that classified this object. |
| riskHits | SensitiveHits | Sensitive hits for various risk levels. |
| riskLevel | RiskLevelType! | Risk level of the policy object. |
| rootFileResult | FileResult! | Root file result. |
| scanErrorInfo | ScanErrorInfo | Scan error information for the policy object. |
| scanStatus | ScanStatus! | Specifies the scan status of the asset. |
| sensitiveFiles | SensitiveFiles | Sensitive File count for various risk levels. |
| shareType | DataGovShareType! | Network file-sharing protocol of the workload, when applicable. |
| snappable | HierarchyObject | The hierarchy object this policy object describes. |
| snapshotFid | String! | Identifier of the snapshot the results were computed from. |
| snapshotTimestamp | Long! | Timestamp in ms. |
| timeContext | String! | The same snapshot may be returned for different policy object queries at different time points since snapshot results are pulled forward if no new snapshots have come up from CDM. The daily change values will be different for these different time points. This time_context field is used by the graphql layer to make sure that Apollo cache on the UI can differentiate between the policy object at different time points. |
| totalSensitiveHits | SummaryHits | Sensitive hits accumulated across different workloads for the user. |
| unusedSensitiveFiles | SensitiveFiles | Unused sensitive file count for various risk levels. |
| userCounts | PrincipalCounts | User count for various risk levels. |
| violationSeverity | ViolationSeverity! | Signifies the violation severity of the asset. |
| whitelistedAnalyzerList | [WhitelistedAnalyzer!]! | Whitelisted analyzers for a path in this policy object. |
Field Arguments
| Field | Argument | Type | Description |
|---|---|---|---|
| allAnalyzerMappings | stdPath (required) | String! | The standard path of the directory to browse. |
| allAnalyzerMappings | fileMode | DataGovFileMode | FileMode represents the type of object at the path (File/Directory/Symlink). |
| fileResultConnection | first | Int | Returns the first n elements from the list. |
| fileResultConnection | after | String | Returns the elements in the list that occur after the specified cursor. |
| fileResultConnection | last | Int | Returns the last n elements from the list. |
| fileResultConnection | before | String | Returns the elements in the list that occur before the specified cursor. |
| fileResultConnection | filter | ListFileResultFiltersInput | |
| fileResultConnection | sort | FileResultSortInput | Sorts to apply when listing file results. |
| fileResultConnection | timezone (required) | String! | The timezone in which to display timestamps. |
| folderChildConnection | first | Int | Returns the first n elements from the list. |
| folderChildConnection | after | String | Returns the elements in the list that occur after the specified cursor. |
| folderChildConnection | last | Int | Returns the last n elements from the list. |
| folderChildConnection | before | String | Returns the elements in the list that occur before the specified cursor. |
| folderChildConnection | filter | BrowseDirectoryFiltersInput | Filters for browsing directory contents. |
| folderChildConnection | sort | FileResultSortInput | Sorts to apply when listing file results. |
| folderChildConnection | stdPath (required) | String! | The standard path of the directory to browse. |
| folderChildConnection | timezone (required) | String! | The timezone in which to display timestamps. |
| whitelistedAnalyzerList | stdPath (required) | String! | The standard path of the directory to browse. |
Used By
Queries
- query: policyObj
- query: policyObjOpt
- query: policyObjs (via connection)
Referenced by