# Machine Account Attributes

Machine account attributes are used in provisioning configurations for machine accounts.

After you have [created the required machine account subtypes](<https://documentation.sailpoint.com/saas/help/machine/account_configuration.html#creating-machine-account-subtypes>), you can use the machine account attributes to provision machine accounts in your SailPoint tenant.

Refer to [Machine Identity Security Overview](<https://documentation.sailpoint.com/saas/help/machine/index.html>) for more information.

> [!NOTE]
>
> Attributes marked with an asterisk (\*) are mandatory.

## Machine Account Provisioning Attributes

| Create Account Attribute | Description |
| --- | --- |
| dn\* | Distinguished name of the entry to be created. Example: uid=svc-jobrunner,ou=Services,dc=example,dc=com. The connector treats dn as the immutable native identity. |
| password\* | Password of the entry to be created. |
| CN\* | Full name (common name) of the entry to be created. Must match the cn= component used in the dn when cn is the naming attribute. |
| givenName | First name of the entry to be created. Optional for machine accounts. |
| SN\* | Last name (surname) of the entry. Required by inetOrgPerson-based schemas; populate with a placeholder (e.g., the service name) for machine accounts. |