SAM - SaaS Detection Report Enhancements - Product Knowledge

SAM - SaaS Detection Report Enhancements 1. Overview

The SAM SaaS Integration has been redesigned to eliminate redundant data duplication between ACC-V and SAM. The previous implementation, inherited from the DEX platform, copied ACC-V data into multiple SAM-owned tables and performed SAM-side aggregation. This led to data inconsistencies, performance concerns, and maintenance overhead.

With version 16.7.0, a single new table (saas_url_usage) replaces all legacy DEX tables. Usage metrics are read directly from ACC-V's native tables through calculated fields, ensuring a single source of truth. No manual action is required after upgrading. The new scheduled job runs automatically and populates saas_url_usage on its first run.

Key Changes at a Glance

Aspect

Change

Tables

5 legacy DEX tables deprecated, 1 new table (saas_url_usage)

Scheduled Jobs

1 legacy job replaced by 1 streamlined job

Data Copy

Eliminated: metrics read directly from ACC-V via calculated fields

Aggregation

Eliminated: ACC-V handles aggregation natively

Source of Truth

Single source: ACC-V native tables, no derived copies

2. Deprecated Components

The following legacy components have been deprecated as part of this enhancement. Tables are relabelled with a "(Deprecated)" suffix in the system.

2.1 Tables

Table

Purpose

samp_dex_application

Stored a copy of ACC-V application data including product, publisher, and aggregated usage metrics

samp_dex_app_usage

Stored daily per-user, per-device usage records copied from ACC-V

samp_dex_aggregated_usage

Stored rolled-up per-user aggregated usage derived from samp_dex_app_usage

samp_dex_aggregated_user_count

Stored total distinct user count per application

samp_staging_dex_app

Staging table used during the DEX data synchronization process

2.2 Scheduled Jobs

Component

Purpose

DEX - Application Usage Data Pull

Scheduled job that called DEXApplicationUsageDataProcess to copy application and daily usage data from ACC-V into DEX tables. This job has been renamed to SAM - SaaS Application Data Sync

2.3 System Properties and Supporting Records

Component

Purpose

acc_last_successful_data_pull_date_time

System property tracking the delta pull window start date

acc_alphabet_count_filter

System property for alphabetical filtering during data pull

Data management policies

Retention policies for samp_dex_app_usage and samp_dex_aggregated_usage

Auto flush records

Automatic data cleanup records for DEX tables

Business rule: Delete Usage Record on Deletion of App

Cascade delete from staging table to usage records

3. New Components

3.1 New Table: saas_url_usage

A single table that replaces all five deprecated DEX tables. It stores application-level SaaS detection data with SAM-specific computed fields and references ACC-V directly for usage metrics.

Field

Type

Description

ACC-V Application

Reference

Link to the ACC-V content application record (sn_acc_vis_content_application)

Application ID

Reference

Associated service record (cmdb_ci_service)

Product

Reference

SAM software product mapped to this application (samp_sw_product)

URL(s)

String

Comma-separated domain URLs for the application

Is Monitored

Boolean

Is application tracked via ACC-V

Publisher

Reference

Publisher of the product, derived from the product record

Managed Status

Choice

Managed (software model exists) or Unmanaged

Active

Boolean

Lifecycle flag; true for current applications

Total Accessed Time

Duration

Total cumulative usage time across all users, calculated field from sn_acc_vis_content_application

Last Accessed Time

Date/Time

Most recent access time across all users calculated field from sn_acc_vis_content_application

Total Users

Integer

Total unique users who accessed the application calculated field from sn_acc_vis_content_application

Calculated fields read values directly from the ACC-V application table on every page load. No data is copied or stored; metrics are always current.

3.2 Scheduled Job

Component

Description

SAM - SaaS Application Data Sync

Single daily job replacing legacy DEX job. Synchronizes application data from ACC-V into saas_url_usage.

3.3 ACC-V Application-Level Metrics

Starting with ACC-V version 1.9.0, aggregated usage metrics are computed directly on the ACC-V application table (sn_acc_vis_content_application) via a daily aggregation job. SAM reads these pre-aggregated values through calculated fields.

3.4 Access and Permissions

Access to saas_url_usage is controlled by ACLs requiring the sam_user role for read and report access. Write, create, and delete operations are restricted to nobody (system-only, the scheduled job runs as admin which overrides). The SaaS Detection Report is accessible from SAM Workspace under License Usage > Reports.

4. Data Flow

4.1 Previous Architecture

1. ACC-V collects raw per-user, per-device, per-domain daily usage into the daily metrics table.

2. SAM data sync job copies application data and daily usage into SAM-owned DEX tables using a date-based delta pull window.

3. SAM aggregation job reads the copied daily records, computes per-user aggregates and application-level totals, and writes results to aggregation tables and back to the application table.

4.2 New Architecture

1. ACC-V collects raw daily usage into the daily metrics table (unchanged).

2. ACC-V daily aggregation job computes application-level totals and stores them on the ACC-V application table.

3. SAM data sync job writes product, publisher, managed status, URLs, and monitoring flag to saas_url_usage. No usage data is copied.

4. Usage metrics on saas_url_usage are calculated fields that read directly from the ACC-V application table, always current, no synchronization required.

5. User-Visible Changes

The following changes are visible to SAM Workspace users after upgrading:

Area

SaaS Detection Report

Reads from samp_dex_application

Reads from saas_url_usage

SaaS Overview widget

Pie chart from samp_dex_application

Pie chart from saas_url_usage showing Managed vs Unmanaged

Record detail form

DEX application fields

Product, Publisher, URL(s), Managed Status, Is Monitored

Daily Usage related list

From samp_dex_app_usage (SAM copy)

From ACC-V daily metrics table (sn_acc_vis_content_url_daily_metric)

Aggregated Usage related list

From samp_dex_aggregated_usage (SAM copy)

From ACC-V aggregated metrics table (sn_acc_vis_content_url_aggregated_metric )

Managed indicator

Boolean field (true / false)

Choice field (Managed / Unmanaged)

6. Upgrade Queries

Question

Answer

Is historical DEX data migrated to saas_url_usage?

No. saas_url_usage is populated fresh by the scheduled job from ACC-V data. DEX tables are not migrated.

Is any manual action required post-upgrade?

No. The new scheduled job runs automatically on its existing daily schedule. On its first execution after upgrade, it populates saas_url_usage with current application data from ACC-V. No manual trigger, data seeding, or configuration is needed.

When will the SaaS Detection Report start showing data?

After the first successful run of "SAM - SaaS Application Data Sync". We can verify the job status on samp_job_log table.

Does the upgrade affect other SAM features or integrations?

No. This enhancement is scoped to the SaaS Detection Report and Browser Discovery pipeline only.

Do we need to upgrade ACC-V to version 1.9.0

ACC-V version 1.9.0 or higher is required for usage metrics (total accessed time, last accessed time, total users) to display correctly. If ACC-V is below 1.9.0, saas_url_usage records will be created but the three metric fields will show empty values.

7. Troubleshooting

Issue

Likely Cause

Resolution

SaaS Detection Report is empty after upgrade

Scheduled job has not run yet

Trigger "SAM - SaaS Application Data Sync" manually from System Definition > Scheduled Jobs, or wait for the next scheduled run

Usage metrics show zero

ACC-V aggregation job has not run, or ACC-V version is below 1.9.0

Verify ACC-V plugin version is 1.9.0+. Check if the ACC-V aggregation job has completed successfully.

Scheduled job shows "failed" in samp_job_log

ACC-V API error or plugin not installed

Check samp_job_log error_message field. Verify ACC-V plugin is installed and active.

Managed status shows "Unmanaged" for a known managed product

No cmdb_software_product_model record exists for the product

Create a software product model for the product. The next scheduled job run will update managed_status.

8. Prerequisites

Plugin

Plugin ID

Min. Version

Software Asset Management — SaaS License Management

sn_sam_saas_int

16.7.0

Agent Client Collector for Visibility Content

sn_acc_vis_content

1.9.0

Both plugins must be installed for the enhancement to function correctly. ACC-V 1.9.0 introduces the application-level metric aggregation that the calculated fields on saas_url_usage depend on.