# Machine Account Attributes

Machine account attributes are used in provisioning configurations for machine accounts.

After you have [created the required machine account subtypes](<https://documentation.sailpoint.com/saas/help/machine/account_configuration.html#creating-machine-account-subtypes>), you can use the machine account attributes to provision machine accounts in your SailPoint tenant.

Refer to [Machine Identity Security Overview](<https://documentation.sailpoint.com/saas/help/machine/index.html>) for more information.

> [!NOTE]
>
> Attributes marked with an asterisk (\*) are mandatory.

## Machine Account Provisioning Attributes

Machine account creation uses the same source attributes as standard service principal provisioning. For the complete list of supported attributes and their descriptions, refer to [Account Profile for Service Principal](<https://documentation.sailpoint.com/connectors/microsoft/entra_id/saas/help/azure_policies.html#account-profile-for-service-principal>).

| Create Machine Account Attribute | Description |
| --- | --- |
| spn\_appDisplayName\* | Display name for the Microsoft Entra ID application. Used to create the associated service principal (machine account). |
| spn\_appId | Existing application (client) ID to associate with service principal creation/update flows. |
| spn\_appTemplateId | Microsoft Entra ID application template ID used for template-based app creation. |
| spn\_appTemplateName | Human-readable name of the application template. |
| spn\_homepage | Homepage URL for the application object. |
| spn\_loginUrl | Login URL configured on the application/service principal. |
| spn\_logoutUrl | Logout URL configured on the application/service principal. |
| description | Description text for the application/service principal object. |
| spn\_tags | Tags to set on the service principal. Multi-valued attribute. |
| spn\_owners | Object IDs / references of owners assigned to the service principal/application. Multi-valued attribute. |
| spn\_app\_keyCredentials | Key credential definitions (certificate-based credentials) for the application object. Multi-valued attribute. |
| spn\_passwordCredentials | Password credential definitions (client secrets) for the service principal. Multi-valued attribute. |
| spn\_app\_passwordCredentials | Password credential definitions (client secrets) for the application object. Multi-valued attribute. |
| spn\_appRoles | The roles exposed by the application that this service principal represents. |
| appRoleAssignments | Lists the associated application roles for the account. Multi-valued attribute. |