Action Sets
- Andrea Harvey
On This Page
Overview
Action sets allow you to create a group of actions to add to a content scan or apply to individual files. DryvIQ works through the actions in the action set, automating activities to minimize the need for manual intervention. For content scans set to run on recurring schedules, action sets ensure continuous action against your unstructured content so you can remain confident it follows your business and security guidelines.
You can select to take definitive action against a file as soon as the scan identifies it, or you can combine multiple actions to force the file through a remediation approval workflow. For example, you can create an action set that executes when DryvIQ finds files that contain social security numbers. The action set could include the following actions:
Remove permissions from the file.
Flag the file for manual approval (review).
Set a delay that waits 48 hours for the review to take place.
Delete the file.
Understanding Actions
The example above illustrates a sampling of the actions you can use to build an action set. All available action sets are listed below. Note that some actions require configuration, and some actions are platform-dependent.
Approval
This action flags the file for manual approval. You choose this option when you want to review the file before deciding what to do with it. The file is flagged, and you are responsible for adequately remediating it.
When the approval action is added to an item, it will be highlighted in blue in the Content list. When you view the toolbox for the item, you will see the approval workflow at the top of the File info tab. You will select whether to approve or reject the action and provide a reason for the approval or rejection. If additional actions follow the approval action in an action set, those actions depend on the approval action workflow to trigger. Approving an item allows the action set to continue. Denying the item will halt all additional actions in the action set.
Delay
This option delays any additional actions on the file for the specified time. When selected, you will set the delay value and interval (seconds, minutes, hours, or days). You will use this action with other actions, such as the delete action. For example, you could set the action to delay deleting files for five days to allow for review before the action occurs.
Delete
DryvIQ deletes the file. When executed as part of a content scan, the deletion depends on the filters added to the Action Flows set. If you do not add filters, DryvIQ will delete all items in the content scan. If you add filters, DryvIQ will delete only items that meet the filter criteria. When manually applied to items, DryvIQ executes the deletion based on its order in the action set.
Modify Permissions
DryvIQ modifies the permissions for specified groups and/or accounts. This action requires you to complete additional configuration for the content scan to designate whom you want to grant permission and the permission level you want to assign (Read, Read and Write, or Full Control). Refer to Configuring Actions for more information about how to configure permissions. The Allow configuration to be skipped on individual locations option allows you to skip adding permission configuration for locations that don’t support permissions.
When configuring the content scan to modify permissions, you can set a single permission level for multiple groups and/or accounts. However, you must add the Modify Permissions action to the action set multiple times to set different permission levels. For example, if you need to assign all three permission levels (Read, Read and Write, and Full Control), you must add the action to the action set three times. You will then configure one action for each permission level.
If you need to modify permission for content in a Microsoft Teams Site, you must use the Microsoft Teams connector to properly access your Teams Site's groups.
Permission actions for Microsoft Office/Teams Sites only apply to permissions at the Direct Access level. Permissions at the Site permission (sub-group level) are not affected by permission actions. If you select to remove or modify permissions at the Site permission (sub-group level), you will see a log entry indicating, “No matching permissions were found.” This entry is because DryvIQ cannot detect the permissions at this level.
Remove Permissions
DryvIQ removes the specified permissions from a group or account. This action requires you to complete additional configuration for the content scan to designate from whom and which permissions should be removed. Refer to Configuring Actions for more information about how to configure permissions. The Allow configuration to be skipped on individual locations option allows you to skip adding permission configuration to locations that don’t support permissions.
If you need to remove permissions from content in a Microsoft Teams Site, you must use the Microsoft Teams connector to properly access your Teams Site's groups.
Permission actions for Microsoft Office/Teams Sites only apply to permissions at the Direct Access level. Permissions at the Site permission (sub-group level) are not affected by permission actions. If you select to remove or modify permissions at the Site permission (sub-group level), you will see a log entry indicating, “No matching permissions were found.” This entry is because DryvIQ cannot detect the permissions at this level.
Creating an Action Set
An action set can contain one or multiple actions. DryvIQ executes the actions in the order they appear in the action set, so ensure you order them correctly.
Click Manage in the left menu.
Click Action Sets.
Click Add action set on the top of the page.
Enter a name for the action set you are creating and click Done.
Click the action you want to add to the action set and add additional information if required for the selected action.
Click Done to add the action.
Add additional actions as needed.
To rearrange the actions, click the arrows on the left side of the action card to move the action up or down in the list.
To edit an action, click the ellipses (…) and click Edit. Adjust the action settings as needed and click Done to save the edits to the action.
To remove an action, click the ellipses (…) and click Remove.
Click Save when finished configuring the actions to save the action set.
The action set is added to the Action Sets list. The Status will identify the number of actions included in the action set for reference.
Editing an Action Set
You can edit an action set that has not been used. Once a content scan uses an action set, it will be locked and unavailable for editing.
Click Edit next to the action set.
Edit the action set as needed.
Click Save to save the action set edits.
Deleting an Action Set
You can delete an action set if you are not using it to keep your action set list clean. However, you cannot delete action sets assigned to scans. You will need to delete the scan using the action set before you can delete the action set.
Click Remove next to the action set.
Click Remove when prompted to verify you want to remove the selected action set.
The action set is removed from the list.
Applying Action Sets
You can use action sets as part of a scan or manually.
Adding Action Sets to Content Scans
When you create a content scan, you add actions in the Action Flows step. Here, you select the action set and apply filters to specify the content for which DryvIQ should use the action set.
Manually Applying Action Sets
While reviewing content, you can apply an action set to items by selecting the items and then clicking the Perform actions button at the bottom of the page. Next, select the action set from the list and click Save.
