Advanced Configuration
This document outlines advanced configuration techniques and troubleshooting steps for Activate Security Group Compliance Manager (SGCM). It is intended for administrators and engineers managing complex or high-scale environments.
Advanced Configuration
SGCM offers flexible configuration options to extend monitoring scope, integrate with other Activate products, and fine-tune event processing.
Extending the Schema
The default SGCM connector schema can be extended to include additional Active Directory attributes. This allows organisations to monitor and respond to changes beyond the standard set.
To extend the schema:
- Open Activate Studio.
- Navigate to Resources > Active Directory.
- Locate and edit the Schema parameter.
- Add a new column definition using the following format:
After editing the schema, run the Regenerate Schema task to apply changes, then reimport data using the Import Workflow.
Adjusting Polling and Event Sensitivity
SGCM’s polling frequency and event thresholds can be adjusted to balance performance and responsiveness.
Parameter | Description | Default |
|---|---|---|
Connector_PollTime | Sets how often the Orchestrator checks for changes (in seconds). | 600 |
maxChanges | Limits the number of rows processed per cycle. | 0 (unlimited) |
retry/timeout | Defines how long failed changes should be retried. | +2 days |
For high-change environments, consider increasing Connector_PollTime or setting maxChanges to a practical limit.
Event Handler Customisation
Event handlers can be customised to include additional logic, such as department-specific alerts or dynamic role lookups.
Example: Department-Based Notification
Performance Tuning
To optimise SGCM performance:
- Run the FullWorkflowWithGroups workflow at intervals suitable for your environment.
- Avoid unnecessary attribute monitoring by disabling the @monitor flag on low-priority columns.
- Regularly clean up historical compliance data using scheduled maintenance tasks.
- Ensure the Activate Orchestrator service has sufficient memory and processing capacity.
Common Issues and Solutions
Issue | Possible Cause | Resolution |
|---|---|---|
Polling not running | Orchestrator service stopped or misconfigured | Confirm Activate Orchestrator is running and parameters are correctly set. |
No AD changes detected | Incorrect domain controller or missing permission | Verify the Connector_ADServer parameter and ensure the account has Replicate Directory Changes permission. |
Import fails or incomplete | Schema mismatch | Regenerate schema and reimport. Ensure new attributes exist in both AD and the connector schema. |
Slow processing | High change volume or low system resources | Increase Connector_PollTime or optimise database performance. |
Duplicate notifications | Multiple workflows configured for same event | Review event definitions to avoid overlapping Connector_Events configurations. |
Diagnostic Tools
Use the following methods to diagnose SGCM issues:
- Activate Logs – Review Orchestrator logs for event and workflow errors.
- Connector Data View – Inspect pending or failed change rows under Resources > Active Directory.
- Audit History – Check the audit log for recorded remediation actions or notifications.
- SQL Queries – Analyse connector tables to verify import status or object counts.
Maintenance Recommendations
To maintain long-term stability and accuracy:
- Perform a full reimport after significant AD structural changes.
- Archive or purge historical connector data regularly.
- Verify background polling workflows weekly.
- Schedule periodic restarts of the Activate Orchestrator during maintenance windows.
Escalation and Support
If internal troubleshooting does not resolve the issue:
- Collect relevant log files from the Activate Orchestrator.
- Export event configurations from the affected domain resource.
- Contact your Activate Support representative with the error details, workflow configuration, and Orchestrator logs.
Summary
Advanced configuration allows SGCM to adapt to diverse organisational structures and compliance requirements. With proper schema management, performance tuning, and event customisation, SGCM ensures continuous, accurate, and efficient monitoring of Active Directory environments.