Mapped Security

The Exchange OData Connector supports mapped security. The connector always generates Access Control Lists (ACLs) and sets the SECURITYTYPE field in each document.

Supported security fields

The connector adds the following fields to each document. Each of these fields contains an Access Control List (ACL).

  • AUTONOMYMETADATA - evaluate this ACL to determine read permission.
  • AUTONOMYMETADATA_BROWSE - evaluate this ACL to determine browse permission (the ability to see that an item exists, but not read it).
  • AUTONOMYMETADATA_WRITE - evaluate this ACL to determine write permission.
Security Type
Type=AUTONOMY_SECURITY_V4_EXCHANGE_MAPPED

Use this security type when you configure your IDOL Content component to process ACLs that originated from Exchange OData Connector.

ACL Format

:U:USERS:G:GROUPS

USERS is a comma-separated list of encrypted users and GROUPS is a comma-separated list of encrypted groups.

SECURITYTYPE Field Value
EXCHANGEODATA

An IDOL index might contain documents that originated from different connectors. Exchange OData Connector adds the SECURITYTYPE field to each document, so that you can configure your IDOL Content component to recognize documents that originated from this connector, and process each document using the appropriate security type.

Group server configuration Create a new security repository and configure OmniGroupServer to populate the repository with user and group information by retrieving users and groups from your Azure Active Directory.