If you schedule changes to be applied by the Varonis Commit Engine, you should schedule them to take place outside of the time window that the FileWalk runs for that server. If you rare making changes while the FileWalk is running you can end up with inconsistent permissions being displayed in the work area the next day, even though there is nothing wrong with the permissions.
If you want documentation on the Commit Engine you can go to your Varonis support login to get the documentation.
In Varonis DatAdvantage, I make a lot of use of flags. I use them to mark folders that are “allowed” to contain sensitive data, mark folders that should be excluded from data classification rules to reduce false positive, and I use them to organize unique sets of data. For example, I was working on a project to review the permissions on about 50 related to a SOX audit. So I was marking all of the folders that were in scope for the audit. In addition, most of these directories needed security groups that were folder-specific added to the Access Control Lists. I decided to use flags to track and report on my work. In many cases I had to add two or more flags to each folder. If you had to add them one at a time, you would have to click your way through 3 or 4 menus multiple times.
Instead, if you click on the Move Button, you can select more than one flag at once. Over the course of 50 folders, you save yourself time and over 100 clicks.
Secure On!
