Document Agent Identity object details and new built-in tags for NTM 3.3 - #1333
Document Agent Identity object details and new built-in tags for NTM 3.3#1333kdejoyce wants to merge 16 commits into
Conversation
Adds new built-in tags (Agent Blueprint, Agent Identity, Agent User, Disabled) and backfills two pre-existing tags (Certificate Authority, Azure Files Storage Account) that were missing from the docs. Adds Agent Identity Blueprint fields/tabs to the Application Details page, Agent User fields to the User Details page, and a new Service Principal Details page covering Agent Identity and Agent Identity Blueprint Principal objects. Generated with AI Co-Authored-By: Claude Code <ai@netwrix.com>
Auto-Fix Summary38 issues fixed, 8 skipped across 5 files
| Ask |
…ity docs Fixes 14 of 16 editorial review findings on PR #1333 (wording, casing, broken cross-references). Adds screenshots for the Sponsors and Agent Identities tabs on the Application Details page, and for the profile card, Sponsors, and Agent Users tabs on the new Service Principal Details page. Screenshot review also surfaced a pre-existing gap: the Owners tab was undocumented on both the Application and Service Principal Details pages, so it's now documented on both. Generated with AI Co-Authored-By: Claude Code <ai@netwrix.com>
Auto-Fix Summary13 issues fixed, 8 skipped across 5 files
| Ask |
Fixes 18 editorial review findings (circular/self-referential definitions, comma splices, missing possessives, ambiguous pronoun references, missing service principal mentions in shared object-type enumerations). Also corrects a factual error found while validating these docs against Microsoft's own Entra Agent ID documentation: Agent Identity and Agent User objects are created by Microsoft Entra ID, not by Threat Manager, which only observes and tags them. Generated with AI Co-Authored-By: Claude Code <ai@netwrix.com>
Auto-Fix Summary12 issues fixed, 9 skipped across 5 files
| Ask |
…on symptoms
Grounds the remaining editorial feedback in docs/CLAUDE.md and
netwrix_style_guide.md rather than continuing to patch individual
wording nits, which was regenerating new review findings each round.
- Add examples and define "AI agent" on first use across the three
new tags, per the "always provide examples" and "define terms on
first use" rules
- Bridge the "Agent Blueprint" tag name to the "Agent Identity
Blueprint" concept name consistently
- Fix three boilerplate cross-references ("...topic for additional
information") that the Vale BoilerplateCrossRef rule doesn't catch
(its regex only matches "for more information")
- Restructure the entraidapplication.md and entraidserviceprincipal.md
admonitions to remove duplicated tab-visibility statements and
split overloaded sentences
- Document how to distinguish an Agent Identity from an Agent Identity
Blueprint Principal in the UI (verified via tag sync code)
- Add the four new tabs to the shared entraidobjects.md tab reference
and unify its object-type enumeration
- Fix a pre-existing copy-paste bug on the Application page's Roles
Tab ("the user" instead of "the application")
Generated with AI
Co-Authored-By: Claude Code <ai@netwrix.com>
Auto-Fix Summary12 issues fixed, 9 skipped across 5 files
| Ask |
Fixes two accuracy issues flagged during review:
- The AI agent gloss in tagmanagement.md was placed as a lead-in to
the entire built-in tags list ("Several built-in tags identify AI
agents... The built-in tags include:"), which incorrectly implied
the whole list is agent-related. Only 3 of 19 built-in tags are.
Moved the gloss back to a local parenthetical on the Agent Blueprint
entry only.
- Removed "Devices" from the Search box and Type filter additions.
The TaggableType enum includes a Device value and sync code exists,
but Devices aren't an actual supported/documented object type in
the product - including them overstated scope.
Generated with AI
Co-Authored-By: Claude Code <ai@netwrix.com>
Auto-Fix Summary6 issues fixed, 8 skipped across 5 files
| Ask |
Reviewed and agreed each of the 16 latest bot suggestions individually rather than batch-applying: - Spell out SMB on first use - Fix circular Type filter descriptions (name the directory source) - Move the Agent Identity Blueprint admonition above the tab list that references it, per the "define terms before use" style guide rule - Fix a Roles tab self-contradiction (application and user pages) - Correct an actor error: Microsoft Entra ID activates eligible role assignments for an application, not the application itself - State the Owners tab appears for all applications - Drop "devices" from entraidobjects.md - no Device Details Page exists in this doc set - Fix Owners tab being incorrectly grouped under an "AI agent only" lead-in when it applies to all applications/service principals - Narrow an overclaimed AI agent scope on the Service Principal page - Restructure the entraiduser.md admonition: move profile card fields into the actual profile card list, fold in the sponsors pointer, and trim the admonition to just the tag definition and note Skipped per author's call: adding per-tag links back to object detail pages in tagmanagement.md, and promoting the Service Principal admonition to body prose. Added and then reverted Group Membership/ Roles tabs on the Service Principal page pending further discussion. Generated with AI Co-Authored-By: Claude Code <ai@netwrix.com>
Auto-Fix Summary5 issues fixed, 7 skipped across 5 files
| Ask |
Removed redundant information about disabled objects in Active Directory.
Auto-Fix Summary3 issues fixed, 10 skipped across 5 files
| Ask |
Documentation PR ReviewEditorial Reviewdocs/threatmanager/3.3/administration/configuration/integrations/tagmanagement.md
docs/threatmanager/3.3/administration/threats/entraidobjects/entraidapplication.md
docs/threatmanager/3.3/administration/threats/entraidobjects/entraidobjects.md
docs/threatmanager/3.3/administration/threats/entraidobjects/entraidserviceprincipal.md
docs/threatmanager/3.3/administration/threats/entraidobjects/entraiduser.md
Summary15 editorial suggestions across 5 files. Vale and Dale issues are auto-fixed separately. What to do next: Comment
You can ask Claude anything about the review or about Netwrix writing standards.
|
…tity Blueprints Per Dave's PR review comment: Threat Manager intentionally hides these tabs for Agent Identity Blueprints and Agent Identities because the Azure/Entra ID admin UI filters these objects out of group and role assignment search results and omits the same sections from their own details pages, indicating Microsoft doesn't intend for them to be assignable this way. Generated with AI Co-Authored-By: Claude Code <ai@netwrix.com>
…port (#1340) Splits the flat integration guidance into two sections grouped by output mechanism: Active Directory and Microsoft Entra ID (native Netwrix Threat Manager output via App Token) and file system activity (Threat Manager Syslog template). Documents that Azure Files storage accounts are monitored the same way as other file system sources, with a link to Activity Monitor's existing Azure Files monitored-host setup guide. Also fixes a stale external link: helpcenter.netwrix.com/category/ activitymonitor redirected to the Activity Monitor v8.0 docs instead of the current v10.0. Generated with AI Co-authored-by: Claude Code <ai@netwrix.com>
4 participants
Adds new built-in tags (Agent Blueprint, Agent Identity, Agent User, Disabled) and backfills two pre-existing tags (Certificate Authority, Azure Files Storage Account) that were missing from the docs. Adds Agent Identity Blueprint fields/tabs to the Application Details page, Agent User fields to the User Details page, and a new Service Principal Details page covering Agent Identity and Agent Identity Blueprint Principal objects.
Generated with AI