Configuring Directory Query

Configure satellite settings

You can modify the default satellite settings between all configured domains and Directory Query.

  1. On the Directory Query Overview page, click Settings to view the Satellite Settings.
  2. To set the number of seconds to wait before timing out when connecting to a Direct Connect satellite, enter a value for Connection Timeout. The default value is 180 seconds.
  3. To set the number of seconds to wait before timing out when performing validation actions on a Direct Connect satellite, enter a value for Validation Timeout. The default value is 60 seconds.
  4. To set the number of seconds to wait to receive results when querying a Direct Connect satellite, enter a value for Search Timeout. The default value is 120 seconds.
  5. Click Submit.

Set up Directory Query users

You can use the following set of predefined user roles to set up Directory Query users.

To review specific permissions for each role, see User role requirements.

On installation, Directory Query creates a Directory Query user to automatically manage the Directory Query service account. Do not edit or delete the Directory Query user.

For more information about assigning user roles, see Tanium Core Platform User Guide: Manage role assignments for a user.

Directory Query Administrator

Assign the Directory Query Administrator role to users who manage the configuration and deployment of Directory Query functionality.
This role can perform the following tasks:

  • View the Directory Query workbench.
  • Manage Directory Query domains.
  • Configure Directory Query service settings.
  • Generate and view the support bundle.

Directory Query Operator

Assign the Directory Query Operator role to users who manage the configuration and deployment of Directory Query functionality.
This role can perform the following tasks:

  • View the Directory Query workbench.
  • Manage Directory Query domains.
  • Configure Directory Query service settings.

Directory Query User

Assign the Directory Query User role to users who need visibility into Directory Query data.
This role can perform the following tasks:

  • View the Directory Query workbench.
  • View Directory Query domains.
  • View Directory Query service settings.

Do not assign the Directory Query Service Account role to users. This role is for internal purposes only.