#General Settings

You can configure the following settings in general settings. Click the tile to access the corresponding settings page.

• Database Settings – Choose to use the default Cosmos database or your own Cosmos database to store the Insights data.

• Visibility Settings – Choose whether to hide IP addresses from exported activity reports.

• Notification Settings – Notify specific recipients about the current risk status periodically.

• Google Cloud Settings – Choose whether to synchronize Identity and Access Management (IAM) data from your tenants to Insights.

#Database Settings

The Database settings page displays the Azure Cosmos database selection for your tenant. You can edit the database that is used to store scan results on this page. Select Default Cosmos database to use the Cosmos database provided by AvePoint, or select My own Cosmos database to use your own Cosmos database.

If you use your own Cosmos database, all your Insights data stored in the default Cosmos database will be migrated into your own Cosmos database, and you can select the Customize the email recipients for the completion of data migration checkbox and define the email recipients to notify the configured users when the data migration completes. The data stored in the default Cosmos database will be automatically removed 30 days after the data migration.

Complete the following database settings when My own Cosmos database is selected:

• Connection string – Enter the primary or secondary connection string of your Azure Cosmos database. To find the connection string, refer to the following steps:

  1. Log in to Azure portal.

  2. Select the Azure Cosmos database that you want to use to store scan results.

  3. Navigate to Settings > Keys > Read-write Keys, and you can find the primary and secondary connection strings.

• Database name – The database name is automatically filled in. You can also change it to use an existing Cosmos database.

• Container name – The container name is automatically filled in.

  If you have already created a container with the same name in your database, make sure the partition key configured is /scopeid.

• Throughput – The throughput – Request Units per second (RU/s) – required for the workload. Refer to Throughput Recommendation to estimate your required RU/s.

  To change the throughput setting for your container, refer to the following steps:

  1. Log in to Azure portal.

  2. Navigate to your Azure Cosmos DB account and open the Data Explorer tab.

  3. Under SQL API, click the Cosmos database that you configured in the database settings to load all containers.

  4. Click the container that you configured in the database settings and click Scale & Settings.

  5. In the Settings tab, you can configure the throughput settings for the container under Scale.

#Throughput Recommendation

The cost of all database operations is normalized by the Azure Cosmos database and is expressed by Request Units (or RUs, for short). A Request Unit is a performance currency abstracting the system resources such as CPU, IOPS, and memory that are required to perform the database operations supported by the Azure Cosmos database.

The throughput of a newly created container is 4,000 RU/s. This is also recommended if you use an existing container.

To estimate your required RU/s, refer to the following table.

User seat (n)	RU recommendation	Cost
0-2,000	4,000 RU/s	$35.04-$350.40 Monthly
2,000-10,000	2n RU/s(The maximum RU/s is 20,000)2n indicates that the number of user seats is multiplied by 2.	For details, refer to Capacity Calculator.
>10,000	30,000 RU/s	$262.80-$2628.00 Monthly

#Visibility Settings

Visibility settings controls the visibility of sensitive data in Insights and IP addresses in exported activity reports.

Sensitive content visibility

You can choose whether to show the content that matches the sensitivity conditions in Insights. With this function enabled, the sensitive content that matches a data type can be viewed under this data type's section in the Sensitive details window.

Hide IP address from exported activity reports

To conform to your organization's regulations, you can enable this setting to hide IP addresses from the exported activity reports.

#Notification Settings

Click Risk status notification to view the default notifications. You can edit them as required, and configure new notifications based on your requirements.

The following actions are available on the Risk status notification page.

• Create – Click Create to create a new notification of the currently notification type.

  1. In the Basics step, enter a name and optional description for future reference.

  2. In the Notification content step, the Subject is automatically filled in. You can change the subject as required and set the email body in the main text box. Select the information that you want to show on the data table.

  3. In the Scope and schedule step, configure the following settings:

     • Start date and time – Select the start date and time of the email notifications.

     • Interval – Configure the interval of the email notifications. By default, email notifications will be sent when a scan is completed. You can select the Only send notifications when there are changes to risk checkbox to only send notifications when there are risk changes in the scanned data.

     • Email recipient – Enter the names of the users and/or groups who will receive the notifications, then select them from the suggestion list. Recipients can view only the high-risk report data for which they have been granted permissions in Insights.

       NOTE

       Only users and groups that are members of security groups in User Management can be configured as email recipients.

  4. In the Review step, check the settings you configured. Click Save to save the notification.

• Edit – Select a notification and click Edit to edit the notification settings.

• Refresh – Click Refresh to view the latest notification list.

• Enable/Disable – Click the gray toggle or blue toggle button in the Status column of a notification to enable or disable the notification.

• Delete – Select a disabled notification and click Delete above the table or select Delete from the ellipsis drop-down list.

#Google Cloud Settings

Choose whether to synchronize Identity and Access Management (IAM) data from your tenants to Insights, which allows you to view and manage permissions for Google Cloud resources.

With Identity and Access Management (IAM) data synchronization enabled, the Google Cloud (Preview) section is available on the left navigation. You can then set the synchronization interval.