# Machine Account Attributes

Machine account attributes are used in provisioning configurations for machine accounts.

After you have [created the required machine account subtypes](<https://documentation.sailpoint.com/saas/help/machine/account_configuration.html#creating-machine-account-subtypes>), you can use the machine account attributes to provision machine accounts in your SailPoint tenant.

Refer to [Machine Identity Security Overview](<https://documentation.sailpoint.com/saas/help/machine/index.html>) for more information.

> [!NOTE]
>
> Attributes marked with an asterisk (\*) are mandatory.

## Machine Account Provisioning Attributes

Machine account creation uses different generators than standard account creation. The following table lists the machine account creation attributes.

| Attribute | Display Name | Type | Required | Generator | Description |
| --- | --- | --- | --- | --- | --- |
| username | username | string | No | Static | The user's unique name. Enter a unique username for the machine account. |
| firstName | firstName | string | No | Static | The user's first name. |
| lastName | lastName | string | No | Static | The user's last name. |
| active | active | boolean | No | Static | The user's active status. |
| employeeNumber | employeeNumber | string | No | Static | The employee number assigned to the user. |
| vacationStatus\* | vacationStatus | string | Yes | Static | The user's vacation status. For example: atwork, onvacation, inactive. |
| workPhoneCountryCode | workPhoneCountryCode | string | No | Disable | The user's work phone country code. |
| workPhoneNumber | workPhoneNumber | string | No | Disable | The user's work phone number. |

### Classification

The Classification attribute is used to identify and categorize the account as a machine account.

- **Attribute name** - UserType
- **Value** - Communication, Reference, Service, System