Machine Account Attributes
Machine Account Provisioning Attributes
Machine account creation uses the same attribute keys as standard account creation. For attribute descriptions, refer to Account Attributes.
The following table lists the attributes in the machine account creation template, including the type, requirement status, and generator for each attribute.
| Attribute | Type | Required | Generator | Description |
|---|---|---|---|---|
| userType | string | Yes | Static | The type of the user. The default static value is user. |
| userId | string | Yes | Static | The user ID for login. Enter a unique user ID for the machine account. |
| name | string | Yes | Static | The full name of the machine account. |
| string | Yes | Static | The email of the machine account. | |
| vendorId | int | No | Disable | The ID of the vendor associated with the account. |
| departmentId | int | No | Disable | The ID of the department that the account belongs to. |
| phone | string | No | Disable | The phone number of the account. |
| altPhone | string | No | Disable | The alternative phone number of the account. |
| disabled | boolean | No | Disable | If true, the account is disabled. |
| localAddress | string | No | Disable | Network restrictions for the client. |
| remoteAddress | string | No | Disable | Network restrictions for the client. |
| sendRegistrationEmail | boolean | No | Disable | If true, sends a registration email to the newly created account. Defaults to false. |
| authProvider | string | No | Disable | The authentication provider to use for the account. |
| department | string | No | Disable | The name of the department associated with the account. |
| notes | string | No | Disable | Notes for the account. |
| approvalAccessChange.accessOption | string | No | Disable | If present, determines how access is set. Possible values are ENABLE, ENABLE_FOR, and ENABLE_UNTIL. ENABLE requires the ENABLE_INDEFINITE_ACCESS permission. |
| approvalAccessChange.accessPeriod | string | No | Disable | Used when accessOption is ENABLE_FOR. Possible values are HOURS, DAYS, and WEEKS. |
| approvalAccessChange.accessTimeFloat | int | No | Disable | Used when accessOption is ENABLE_FOR. Determines how many weeks, days, or hours access is allowed. |
| approvalAccessChange.dateAccessExpires | string | No | Disable | Used when accessOption is ENABLE_UNTIL. Determines the date the access expires. |
Classification
This connector uses the userType attribute to identify the account. The default static value is user.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.