Enable Tagsync for PrivaceraCloud in data plane mode

This section provides steps to enable the syncing of tags between Discovery agent running on the customer VPC and Apache Ranger running on PrivaceraCloud.

Enable and disable the application in PrivaceraCloud

Login to Privacera SAAS portal. Go to Settings > Applications.
Select S3 application, type dummy values in the Name and Description fields. Click SAVE.
Under Access Management, enable the toggle .
Under BASIC, provide dummy values for the mandatory fields and click SAVE.
Select S3 application. Under Access Management, disable the toggle .

Enable Privacera Tag Policy in PrivaceraCloud

Perform followings steps to enable the privacera_tag policy:

Note

This section is applicable only if the Tag Policy for the privacera_tag is disabled. Ignore the following steps, if the Tag Policy for the privacera_tag is already enabled.

Go to Access Management > Tag Policies. Under TAG, click more icon and select Add Service.
Under Service name field, type privacera_tag. Ensure the Active Status toggle is enabled. Click SAVE.

Enable S3 service repository in PrivaceraCloud

Perform following steps to enable the S3 service repository in PrivaceraCloud:

Go to Access Management > resource policies. Under S3, click the edit icon to edit the privacera_s3 policy.
Under Active Status, enable the toggle .
Under Select Tag Service, select privacera_tag. Click SAVE.

Generate Apache Ranger Admin API key from PrivaceraCloud

This section provides steps to generate the Apache Ranger Admin API key from PCloud:

Note

Save the Ranger Admin URL copied in the preceding step. The Ranger Admin URL is needed to perform further steps.

Note

Make a note of values provided in the preceding step. These values are required for the further steps.

Go to Settings > API keys. Click API Key info icon . Under Ranger Admin URL, click COPY URL.
Go to Access Management > Users / Groups / Roles. Click ADD.
Type values in the User Name, First Name, New Password, Confirm Password fields. Under Role field, select Admin. Click SAVE.

Create and update the vars.discovery.agent.yml file

This section provides steps to create and update the vars.discovery.agent.yml file to your local VPC:

Run the following command to change directory to privacera manager:
```
cd ~/privacera/privacera-manager/
```
Run the following command and go to config/custom-vars folder:
```
cd ~/privacera/config/custom-vars/
```
Run the following command to create vars.discovery.agent.yml file:
```
vi vars.discovery.agent.yml
```
Add following details into vars.discovery.agent.yml file:
```
RANGER_EXTERNAL_URL: "<RANGER_EXTERNAL_URL>"
RANGER_URL: "{{RANGER_EXTERNAL_URL}}"
RANGER_TAGSYNC_USERNAME: "<Username_Value>"
RANGER_TAGSYNC_PASSWORD: "<Password_Value>"
DISCOVERY_RANGER_REST_ENABLED: "true"
```
Note
In the preceding command, replace the values for the followings:
- <RANGER_EXTERNAL_URL>: The Ranger Admin URL copied in Previous section.
- <Username_Value>: The User Name value provided in Previous section.
- <Password_Value>: The Password value provided in the Previous section.
Run the following command to update the privacera manager:
```
./privacera-manager update
```

Disable the access management in the Discovery admin UI

Perform following steps to disable the access in Discovery admin UI:

Login to Privacera Platform Discovery admin UI.
Go to Settings > System Configurations.
Search for Enable UI Feature Ranger Feature/Module.
Under Value column, uncheck the value for Enable UI Feature Ranger Feature/Module. Click SAVE.

Privacera Documentation

Table of ContentsTable of Contents

Enable Tagsync for PrivaceraCloud in data plane mode

Note

Note

Note

Note