Managing content sets

A content set is a group of sensors, saved questions, dashboards, categories, and packages to which a permission applies. You create a content set when the nature of the content requires fine-grained assignment of permissions.

User role requirements

You must have the Administrator role or Content Set Administrator role to see and use the Content Set configuration page.

Special content sets

  • You cannot move content to or from the Reserved content set. This content set includes fundamental sensors used by the system.
  • Tanium solution modules might lock down module-defined content sets in a manner similar to reserved content sets. In other words, they have been designed to limit end users from moving content into or out of the module-designed content set.

Create content sets

  1. Go to Permissions > Content Sets.
  2. Click New Content Set.
  3. Specify a configuration name and description. Click Save.
  4. Click Preview to Save to display a diff of the changes.
  5. Review the changes and then click Confirm & Save.

Move content to a content set

  1. Go to Permissions > Content Sets.
  2. Browse the content set configuration and select the objects you want to move.

    Use the filtering text box to filter the items by group name or click Filter Results to filter by sensor or question threshold.

  3. Click Move to and select the target content set.
  4. Click Preview to Save to display a diff of the changes.
  5. Review the changes and then click Confirm & Save.

Move content to a content set from the Content pages

On the Content pages, you can move content between content sets. On the Content > Sensors page, for example, when you select one or more rows in the configuration table, the Move to Content Set button appears in the buttons above the table. You can use this feature to move selected configurations to a target content set. It is equally as effective as the preceding procedure.

You can move saved questions, sensors, or packages between content sets for which you have Write permission. Users with the Administrator or Content Set Administrator reserved role can move content between any content sets.

The Content pages have descriptions of the sensors, packages, and saved questions, so you might find it helpful to do this procedure from the Content pages when you are unfamiliar with the content and want to become familiar with it before moving it.

Specify a content set when you create content

When you create content (sensors, packages, saved questions, dashboards, and categories), you specify the content set to which the content belongs. The Content Set drop-down list includes the content sets for which you have Write permission. For example, if you have Write Sensor permission on three content sets, the drop-down list includes those three.

Figure  1:  Content Set drop-down list

When modifying a configuration, users can move saved questions, sensors, or packages between content sets for which they have write permissions. Users with the Administrator or Content Set Administrator reserved role can move content between any content sets.

Review content set permissions

  1. Go to Permissions > Content Sets.
  2. Browse the content set configuration to find the object (such as a sensor) for which you want to review content set permissions.
  3. Click the appropriate icon to open a dialog box that displays the roles or users or user groups that have permissions for the object.
  4. Click OK to close the dialog box.

Import/export the content sets and roles configuration

We recommend that you test content sets and roles in your lab before importing the configuration into your production environment.

User role requirements

Users with the Administrator and Content Set Administrator reserved roles can export and import the content sets and roles configuration.

Export

  1. From any Content or Permissions page, click Export to XML in the top right of the Tanium Console.
  2. Select Content Sets and Roles and click Export.

    The exported configuration is an XML file that specifies the configuration names and settings. The content set section of the file includes the content set configuration names but not the content set assignments. The content object configurations contain those assignments. To export the assignment settings, you must also select the content object types: Sensors, Packages, Saved Actions, Categories, and Dashboards.

  3. Enter a File Name or use the default name, and then click OK. The Tanium Server exports the XML file to the Downloads folder on the system you use to access the Tanium Console.

Import

  1. Use KeyUtility.exe to sign the XML configuration file before you import it. As a one-time action, you must also copy the associated public key to the correct folder. For the procedures, see Signing content XML files.
  2. From any Content or Permissions page, click Import from XML at the top right of the Tanium Console.
  3. Click Choose File, find and select the configuration file, and click Open.
  4. Click Import. If object names in the file are the same as for existing objects, the Tanium Console itemizes the conflicts and provides resolution options for each one.
  5. Select resolutions for any conflicts. For guidance, see Conflicts and Best practices or consult your TAM.
  6. Click Import again, and click Close when the import finishes.

Delete a content set

You must empty a content set configuration before you can delete it.

  1. Go to Permissions > Content Sets and move all the objects from the content set that you want to delete: see Move content to a content set.
  2. Click Delete at the top right of the content set.

Align content for modules

In some cases, Tanium solution modules require module-created sensors, packages, and saved questions to remain in special module-created content sets. If content is moved, the solution module workflow might not work as expected.

Modules report misaligned content to the Tanium Console Content Alignment page.

User role requirements

You must have the Administrator role or Content Set Administrator role to see and use the Content Alignment page.

Align module content to module requirements

  1. Go to Content > Content Alignment.
  2. Review the list.
  3. Click Align All Content.

Last updated: 6/4/2019 4:33 PM | Feedback