Configure a control (in preview)

Control queries allow you to automate checks within your Collibra environment. You define a set of rules and conditions for assets of a specified type, and notify stakeholders if assets fail to meet the rules and conditions. You build control queries in the Control configuration section on the Managed Control asset pages. You define the requirements, set the schedule for when it will run, and customize the notification messaging and recipients.

Requirements and permissions

  • You have a global role with the Product Rights > Control Tower global permission.
  • You have a resource role with the following resource permissions:
    • Asset > Update
    • Asset > Control > Activate and Run.

Important The Asset > Control > Activate and Run resource permission is only required to enable a control. Without it, you can still configure the control.

1 Specify the target asset type

In the Find drop-down list, start typing and select the type of assets that you want to target for monitoring.

2 Refine the scope of target assets

Add one or more filters to narrow down the scope of assets you want to monitor.

  1. Click .
    The Add filter dialog box appears.

  2. Optionally, select the Required to pass control option.
    Tip For examples on how to use the Required to pass control option, go to Example | Control Tower: Build a control query.
  3. If you added more than one filter, you can edit the filter formula.
    For example, if you have 3 filters, you could consider the following constructions:
    • "A AND B AND C": This is the default. To be a target asset, an asset must match all 3 filters.
    • "A OR B OR C": To be a target asset, an asset only needs to match 1 of the filters.
    • "(A AND C) or B": To be a target asset, an asset must either match filters A and C, or match filter B.
  4. Click Apply filter.
    The filters are applied.
    The following example image shows that the control is targeting Report assets, that there are 2 filters applied, and that only reports that match both filters are targeted.

3 Add the relationship path to the monitoring criteria

Define the relationship path between your target asset type and the asset type that represents the monitoring criteria. To define the path, you need to be familiar with your operating model and the relation types that link the relevant asset types.

  1. In the Select relation drop-down list, start typing and select the relevant relation type.
  2. Click .

    Another relation type path is added.

  3. In the Select relation drop-down list, start typing and select the next relevant relation type.
  4. Continue this progression to reach the asset type that represents the monitoring criteria.
    You can add up to 10 relation types.

    The path progression should look something like what is depicted in the following example image:

  5. Optionally, click +Add path to add another path progression to another monitoring asset type.
    You might want to do this when not every target asset has the same relationship path to the monitoring criteria. By defining multiple paths with OR logic, the control casts a wider net, evaluating each asset against both paths, rather than missing assets where only one path is present. This ensures more complete coverage and reduces false negatives in your compliance monitoring.
  6. Run a query test to identify which assets would fail the control query as it is currently configured.
    1. Click Query test.
      The side panel opens.
    2. Click Run test.
      Up to 100 failing assets are shown in the side panel.

  7. Click Next.

4 Specify the failing criteria

You use the Require to pass control option to specify the criteria that determines when an asset fails the control. The Require to pass control checkbox is available for every filter configuration. By default it is cleared. If you select it for a particular filter, the filter contributes to the failing criteria.

Tip For examples on how to use the Required to pass control option, go to Example | Control Tower: Build a control query.

  1. Next to the relevant criteria (in the following example image, "Column is governed by Data Quality Rule") click More icon, and then select Add filter.

    The Add filter dialog box appears.
  2. Select a property, attribute type, or relation type, and then enter the relevant information, according to your selection and your needs.
    The filter in following example image expresses the desire to identify assets for which the passing fraction in the related data quality rule is 90 or lower.

  3. Select Required to pass control.
  4. Click Apply filter.
    The filter is applied.
    The graphic highlighted in the following image identifies that the Required to pass control checkbox is selected.

  5. Click Next.

5 Set the control run schedule

Set how frequently the control will be run and when each run should start.

  1. In the Repeat drop-down list, set the frequency. Select Hourly, Daily, or Weekly.
    If you select Weekly, then select the day or days of the week on which you want the control to run.
  2. In the Run start time drop-down list, select the hour that you want the query run.
    If you selected Hourly frequency, the Run start time field does not apply. The control is run at the top of every hour, for example 11:00.
    In the following example image, the control is set to run every Saturday, at 12 AM (midnight) GMT.
    Note All times are GMT, regardless of your geographic location.

  3. Click Next.

6 Configure alert notifications

When an asset fails a control, users receive actionable alerts via email, based on their notification preferences. The default alert message contains all of the key details. You can add a custom message to accompany the default message. For example, you can describe any remediation steps that should be taken to address the failed assets.

  1. In the Custom message field, enter the information you want included in the notification.
  2. In the Who to notify field, edit the list of resource roles that will receive notifications.
  3. Click Next.

7 Enable the control

Switch on the Enable switch. The blue state indicates that it's enabled.

What's next

Important When a control query identifies a failed asset, the name of the associated Managed Control asset is shown on the asset page. This is enabled by the Failed controls widget, which must be manually added to the asset page of the target asset type. For guidance, go to Edit and publish asset layout.

When the query is run, for every failed Report asset:

  • The Report assets are listed on the Failed assets tab of the Managed Control asset.
  • The Managed Control asset is shown on the respective asset page of each failed Report asset.

If you want to edit the control, click Edit icon next to the Enable switch.