# Schema Reference

The application schema is used to configure the objects returned from a connector.

> [!NOTE]
>
> - The **Account Schema** tab is used to define the attributes for each object type in the application being configured. The schema attributes can be defined as **Entitlement** or **Multi-Valued**. Refer to [Managing Source Account Schemas](<https://documentation.sailpoint.com/saas/help/accounts/schema.html>) for more information.
> - The schema attributes that are not present by [default](<#default-account-schema>) must be defined as strings if not specified.

The Ivanti Cherwell connector uses the following default correlation and object configurations.

## Default Correlation Configuration

Before you aggregate accounts from this source, you can map account attributes with their corresponding identity attributes based on your requirements.

You can customize the correlation configuration. Refer to [Assigning Source Accounts to Identities](<https://documentation.sailpoint.com/saas/help/accounts/correlation.html>) for more information.

When you first create the Ivanti Cherwell source, the default correlation mapping is:

| Account Attribute | Operation | Identity Attribute |
| --- | --- | --- |
| Email | Equals | Work Email (email) |
| FullName | Equals | Name (name) |

## Default Account Schema

Each source supports a variety of details, or attributes, about each user who has an account, such as their name, email address, manager name, and location.

The set of account attributes each source stores and how they're organized is known as the account's *schema*. To best represent your data, you can configure sources to use an account schema matching the one you use in the external connector. Refer to [Managing Source Account Schemas](<https://documentation.sailpoint.com/saas/help/accounts/schema.html>) for more information.

### Default Account Attributes

The Ivanti Cherwell connector supports the following default account schema attributes and customer configurable attributes. The attributes must be defined as strings if not specified.

| Attribute Name | Description |
| --- | --- |
| RecID | The user's unique record ID |
| busObId | Ivanti Cherwell Business Object ID |
| busObRecId | Ivanti Cherwell Business Object Record ID |
| busObPublicId | Ivanti Cherwell Business Object Public ID |
| publicId | The user's Public ID |
| displayName | The user's display name |
| shortDisplayName | A shortened version of the user's display name |
| accountLocked | Indicates if the user account is locked |
| createDateTime | The date and time a user account was created |
| lastPasswordResetDate | The date the user's password was last reset |
| lastResetDateTime | The date the user was last reset |
| passwordNeverExpires | Indicates if the user's password expires |
| userCannotChangePassword | Indicates if the user cannot change their password |
| userMustResetPasswordAtNextLogin | Indicates if the user must change their password at the next login |
| ldapRequired | Indicates if the user account requires LDAP |
| CreatedBy | The name of the user who created the record |
| CreatedByID | The record ID of the user who created the record |
| LastModifiedDateTime | The date and time of the user account was last modified |
| LastModBy | The name of the user who modified the record |
| LastModifiedByID | The record ID of the user who modified the record |
| LastModByID | The record ID of the customer who last modified the record |
| LastModDateTime | The date and time a customer account was last modified |
| FullName | The user's full name. This is a display attribute. |
| NamePrefix | The user's prefix. For example, Mr. or Mrs. |
| NameSuffix | The user's suffix. For exampe, Jr. or Sr. |
| FirstName | The user's first name |
| MiddleName | The user's middle name |
| MiddleInitial | The user's middle initial |
| LastName | The user's last name |
| Status | The customer's status |
| Lastlogon | The date and time of the customer's last logon session |
| SiteID | The customer's site ID |
| SiteName | The customer's site name |
| StatusID | The customer's status ID |
| Department | The user's department |
| Phone | The user's phone number |
| PhoneType | The user's phone type |
| Email | The user's email address |
| AlternateEmailAddress | The customer's alternate email address |
| SecondaryEmail | The customer's secondary email address |
| CellPhone | The user's phone number |
| Mobile | The customer's mobile number |
| Manager | The user's manager's name |
| DefaultTeamName | The user's default team's name |
| DefaultTeamID | The user's default team's ID |
| LastModTimeStamp | The date and time of the last time the record was modified |
| Office | The user's office address |
| Title | The customer's title ID |
| EmployeeID | The user's employee ID |
| EmployeeStatus | The customer's employee status |
| SAMAccountName | The user's SAM account name |
| ManagerEmail | The user's manager's email address |
| StartDate | The user's vacation start date |
| EndDate | The user's vacation end date |
| PostalCodeZip | The user's postal code |
| HomePhone | The user's home phone number |
| PhoneDN | The customer's phone DN |
| MobileDN | The customer's mobile DN |
| Address | The user's street address |
| City | The user's city |
| Country | The user's country |
| CountryCode | The user's country code |
| ProvinceStateName | The user's Province/State |
| WebSite | The Website of the user |
| OwnedBy | The name of the customer's owner |
| OwnedByTeam | The team name of the customer's owner |
| LocationID | The customer's location ID |
| LanguageLocale | The user's language locale |
| LanguageName | The user's language name |
| TimeZoneOffset | The user's time zone offset |
| ManagerID | The user's manager ID |
| securityGroupId | The name of the security group that the user belongs |
| accountType | The user's account type |

## Default Entitlement Attributes

Entitlement attributes define the entitlements, such as groups or roles, that can be assigned to the managed system's user accounts. Refer to [Managing Entitlements](<https://documentation.sailpoint.com/saas/help/access/entitlements.html>) for more information.

> [!CAUTION]
>
> Changing the attribute marked as the Entitlement ID after aggregating accounts or entitlements can result in duplicate entitlements being created, or access profiles and roles breaking. To avoid this, edit the entitlement schema before performing any aggregations.

### Default Security Group Attributes

The Ivanti Cherwell connector also supports groups. The following attributes must be configured on the managed system and in the SailPoint source schema to manage groups.

| Attribute Name | Description |
| --- | --- |
| groupId | Unique Group ID of the Security Group |
| description | The description of a Security Group |
| groupName | The display name for a security group. This is a display attribute. |