# Machine Account Attributes

## Machine Account Provisioning Attributes

Machine account creation uses the same attribute keys as standard account creation. For attribute descriptions, refer to [Account Attributes](<https://documentation.sailpoint.com/connectors/imprivata_vpam/saas/help/schema.html#default-account-attributes>).

The following table lists the attributes in the machine account creation template, including the type, requirement status, and generator for each attribute.

| Attribute | Type | Required | Generator | Description |
| --- | --- | --- | --- | --- |
| userType | string | Yes | Static | The type of the user. The default static value is user. |
| userId | string | Yes | Static | The user ID for login. Enter a unique user ID for the machine account. |
| name | string | Yes | Static | The full name of the machine account. |
| email | string | Yes | Static | The email of the machine account. |
| vendorId | int | No | Disable | The ID of the vendor associated with the account. |
| departmentId | int | No | Disable | The ID of the department that the account belongs to. |
| phone | string | No | Disable | The phone number of the account. |
| altPhone | string | No | Disable | The alternative phone number of the account. |
| disabled | boolean | No | Disable | If true, the account is disabled. |
| localAddress | string | No | Disable | Network restrictions for the client. |
| remoteAddress | string | No | Disable | Network restrictions for the client. |
| sendRegistrationEmail | boolean | No | Disable | If true, sends a registration email to the newly created account. Defaults to false. |
| authProvider | string | No | Disable | The authentication provider to use for the account. |
| department | string | No | Disable | The name of the department associated with the account. |
| notes | string | No | Disable | Notes for the account. |
| approvalAccessChange.accessOption | string | No | Disable | If present, determines how access is set. Possible values are ENABLE, ENABLE\_FOR, and ENABLE\_UNTIL. ENABLE requires the ENABLE\_INDEFINITE\_ACCESS permission. |
| approvalAccessChange.accessPeriod | string | No | Disable | Used when accessOption is ENABLE\_FOR. Possible values are HOURS, DAYS, and WEEKS. |
| approvalAccessChange.accessTimeFloat | int | No | Disable | Used when accessOption is ENABLE\_FOR. Determines how many weeks, days, or hours access is allowed. |
| approvalAccessChange.dateAccessExpires | string | No | Disable | Used when accessOption is ENABLE\_UNTIL. Determines the date the access expires. |

### Classification

This connector uses the `userType` attribute to identify the account. The default static value is user.