Entity settings

Admins, or users with the Configure settings permission, can adjust system-wide settings for entities under Settings > Entities. There are general settings that apply to all entity types, and settings specific to teams and domains.

General entity settings

• Enable changing entity type

  • Allow whether or not existing entities can change their type. For example, changing the type of an entity from service to domain. Note that this could result in broken YAMLs with dependencies and hierarchies.

• Auto import from AWS, Azure, and Google Cloud

  • Enable automatic import of discovered entities of known types from AWS, Azure Resources, and Google. This will import all Lambda functions and ECS services as distinct entity types.

• Always append suffixed to resource discovery

  • Appends the type to the auto-generated tag for imported entities

• Auto-archiving entities by type

  • Configure automatic archival for entities that are no longer detected in your integrations or whose YAML files have been deleted. Learn more in Auto archiving entities.

• Data verification

  • Set data verification policies in Cortex to make sure that entities in your Cortex workspace are accurate. Learn more in Data verification.

Team entity settings

• Enabled identity providers

  • In this section, you can select which identity providers will be used to sync team and team memberships into Cortex.

  • When importing teams, you will see the option to import from the enabled IdPs listed on this page.

• Auto import teams

  • When enabled, any discovered teams and team relationships from Workday are automatically imported.

  • In order for teams to be imported, Workday needs to be enabled under the Enabled identity providers section on this settings page. The Workday report must include the managerEmail field in order for team relationships to be auto imported.

• Team ownership entity editing

  • When enabled, entities can only be edited by the team that own them. You can also configure entity edit access for specific individuals on a team. Read more about this feature in Team ownership entity editing.

• Give edit access to all team members

  • When enabled, all team members will be granted edit access to the entities owned by their team. You will not be able to turn off edit access for individual members in your teams configuration when this is enabled.

Team member roles tab

• Sync team roles from identity providers

  • When enabled, Cortex will automatically assign roles to team members based on your enabled identity providers. Leave this option disabled to assign team roles manually.

• Roles

  • You can define the set of roles that can be assigned to team members. Learn more in Adding team member roles.

Domain entity settings

• Enable auto import of domains

  • Automatically import any discovered domains and domain relationships from ServiceNow.

  • You must have the ServiceNow integration configured.