Configure Custom Attributes Using CSV

Comma-Separated Values (CSV)

The CSV is one of the data sources used to configure custom attributes. The Cloud Connector extracts and collects directory service data from the CSV to facilitate threat investigation and analyze user activities across your organization. In the Cloud Connector, a user with different identities can be mapped to any primary key, such as their Email ID, Employee ID, etc. Skyhigh recommends using a Global Unique Identifier (GUID) to map a user’s attributes and identifiers to the primary key. The Skyhigh CASB will ingest CSV data using the specified primary key. This allows Skyhigh to track the user even with distinct identities.

Configure Custom Attributes Using CSV

To configure Custom Attributes using CSV, perform the following steps:

1. Go to Settings > Integrations > Directory Service.
   
   
    
2. Turn on the Directory Service toggle button.  
3. Click Add Source to add a data source.
   
   
   
   The screen below only appears if you have configured a Cloud Connector. To proceed to add another Cloud Connector, click Add Source. 
   
   
    
4. On the Data Source page, select CSV.
5. From the menu, select a Cloud Connector Connector. The menu displays Cloud Connectors only with versions 6.9.2 and above.
   
   
    
6. If the selected connector is inactive, an Inactive Connector dialog appears. Activate your Cloud Connector, and then click OK.
   
   
    
7. Fill in the details related to CSV, and then click Next:
   
   
    

Field	Description
Name	Enter the custom attribute configuration name.
Directory	Enter the directory where the CSV file is located.
File Name Pattern	Enter the CSV file name pattern data source.
Delimiter	Enter the CSV data source delimiter. For example, a comma.
Quote	Enter the CSV data source quotation mark used. For example, " or '.
Header	Enter the CSV data source header.

8. On the Evaluate Attributes page, review the default attributes list to make sure all the required attributes are available. Click Next.
   
   
    
9. On the Custom Attributes page, fill in the required fields, and then click Check:
   If you have configured a Cloud Connector and added another Cloud Connector, the identifiers and custom attributes are auto-populated from the previous configuration.
   
   

Field	Description
Select Primary Key	Select any primary key, such as user Email ID, Employee ID, etc. Skyhigh recommends using a Global Unique Identifier (GUID) to map a user’s attributes and identifiers to the primary key.
Define Identifiers	Select the identifiers for Shadow or Sanctioned services from the menu. Click Add more to configure additional identifiers. You can configure a maximum of four identifiers.
User Default Display Name	Sets the display name that appears on the Users page.
Configure User Details	Select additional attributes, and enter Custom Display Names. Click Add more to configure additional attributes. Click Select Product to select Shadow or Sanctioned services. NOTE: For Shadow services, you can add a maximum of 5 attributes, and for Sanctioned services, you can add a maximum of 25 attributes.
Upload Frequency	Select the upload frequency in hours from the menu. The default value is set to 24 hours.

11. Review the configurations, and then click Sync.

You will be redirected to the Directory Service page. This page consists of the two tabs below and the Actions menu:

• Directory Service Status. Lists the configured sources and the details associated with each source, such as the Last Sync time stamp and the number of Ingested Users.
• Source Details. The selected source lists the User Attributes and Sync Logs.

To know details about the Directory Service Status and Source Details tabs, see User Ingestion Details on Directory Service.

• Actions.
  • Sync. Upload CSV users to Skyhigh CASB.
  • Edit. Edit the selected directory service configuration.
  • Delete. Delete the selected directory service configuration.

After completing the configurations, the Cloud Connector starts ingesting the user attribute data.