Disabling Data Protection for Efficient Deletion Scans in Panel Service

Introduction

Panel Service includes a data protection feature designed to prevent scans from registering deletions exceeding 10% of a silo at once. This can lead to a situation where deleted items are not promptly registered in Identity Panel, particularly after data cleanup activities.

To address this, users can disable the protection mode by following the steps outlined below. It's essential to note that once this change is implemented, all deletions will be processed for all data silos. A section further down provides guidance on minimizing associated risks.

Important Consideration

The configuration is loaded only during the startup of Panel Service or Panel Tool. Therefore, both applications must be restarted for the changes to take effect.

Update the Configuration File

1. Log on to the Server where Panel Service is installed.
2. Edit PanelTools\config.json.
3. Go to the application section and add or edit a boolean key – "DisableDeleteProtection": true,
   
4. Save the file and restart SoftwareIDM Panel Service.
5. Perform scans for the affected silos.
6. Remove the key or set it to false to re-enable delete protection.

Using this Feature Safely

It is advisable to identify the server processing hash files for the silo in question. Running the scan on this server can enhance performance and reduce the scan completion time.  Please see Understanding Provider Change Processing (Hash Files) for how to identify which server has the most recent hash files.

No additional settings need adjustment in the configuration file to enable deletions.

Option 1

This is the easiest option to implement, although it disables all schedules, allowing only the schedules and steps you choose to run.

1. Log in to Identity Panel.
2. Go to Settings, and select Environment Settings.
3. Untick the Enabled option for the Scheduler.
4. Confirm all schedules have finished.
5. Log on to the Server where Panel Service is installed.
6. Update the config file ("DisableDeleteProtection": true).
7. Run Panel Tool.
8. Run the scans for the silos you wish to perform the deletions in Panel Tool.
9. Update the config file to previous state ("DisableDeleteProtection": false).
10. Restart Panel Service on all servers it is installed (This is a safety step incase they have restarted and picked up the Deleted Protection being turned off).
11. Tick the Enabled option for the Scheduler.

Option 2

This option is slightly more complicated but allows schedules to continue running while performing deletions.

1. Log on to the Server where Panel Service is installed.
2. If deployed, disable Panel Check (By default it runs every 15 minutes).
3. Stop the Panel Service.
4. Update the config file ("DisableDeleteProtection": true).
5. Run Panel Tool.
6. Update the config file to previous state ("DisableDeleteProtection": false).
7. Start Panel Service.
8. If deployed, enabled Panel Check.
9. Run the scans for the silos you wish to perform the deletions in Panel Tool.

These steps provide a structured approach to disabling delete protection and conducting deletion scans efficiently. If you have any questions or concerns, please feel free to contact our support team.

Detecting when DisableDeleteProtection is triggered

There is a Panel Service Feed entry (LogMessage object) created whenever the limit is triggered. This can be used to trigger a notification workflow as follows:

• Trigger Object: Log Message
• Trigger Rule: Contains(Message, "Disable Delete Protection")
• Throttle: 1 hour.