Machine Identity Schema Attributes
Machine Identity attributes define the multiple types of machine identities that can be assigned to the managed system's user accounts.
For more information, refer to Machine Identity Security Overview.
To manage Machine Identity Objects, ensure that the attributes are present in the respective agents schema:
Azure AI Foundry Agents Attributes
Important
Microsoft has deprecated Classic Azure AI Foundry agents. Because of this, the Microsoft Entra SaaS connector now supports discovery (aggregation) of New Azure AI Foundry agents only. It no longer aggregates Classic Azure AI Foundry agents.
Following lists the supported schema attributes for the classic Azure AI Foundry Agents.
Note
The attribute list cannot be extended.
| Parent Attribute Name | Child Attribute Name | Description |
| identity | - | Unique identifier for the agent. |
| name | - | Display name assigned to the agent. |
| datasetId | - | Internal SailPoint dataset identifier for the agent. |
| description | - | Text describing the agent's purpose and behavior. |
| attributes | model | Identifier of the AI model the agent uses (for example, a GPT variant). |
| resources | Tools or resources assigned to and accessible by the agent. | |
| connectedAgents | Other agents connected to this agent as sub-agents or collaborators. | |
| top_p | Controls the diversity of the agent's responses by limiting token selection to the top cumulative probability mass. Lower values produce more focused outputs; higher values allow more variety. | |
| temperature | Controls the randomness of the agent's responses. Lower values produce more focused and consistent answers; higher values produce more diverse and creative outputs. | |
| tool_resources | External resources required by specific tools assigned to the agent (for example, a list of file IDs for the Code Interpreter tool). | |
| metadata | Custom key-value metadata attached to the agent. Supports up to 16 key-value pairs. | |
| response_format | Specifies the preferred format for the agent's responses (for example, text or json_object). | |
| created_at | Date and time when the agent was created. | |
| creator | Identity that originally created the parent Foundry account resource through Azure Resource Manager (ARM) provisioning. Stored in systemData.createdBy. This is not the same as the RBAC Owner. | |
| last_modified_by | Identity that last modified the parent Foundry account resource through ARM provisioning. Stored in systemData.lastModifiedBy. This is not the same as the RBAC Owner. |
Following lists the supported schema attributes for the new Azure AI Foundry Agents.
| Attribute | Description |
|---|---|
| agent_guid | The globally unique identifier for the agent. |
| blueprintClientId | The client ID (appId) of the Blueprint Service Principal. Used as the join key to link an AgentIdentity to its shared Blueprint in SailPoint. |
| blueprintId | The object ID of the Blueprint Service Principal in Entra ID. |
| blueprintPrincipalId | The principal ID of the Blueprint SP. Used for Entra identity linkage and governance. |
| blueprintType | The type classification of the Blueprint (for example, AgentIdentityBlueprint). |
| deploymentNames | List of deployment names associated with the agent. |
| instanceIdentityClientId | The client ID (appId) of the AgentIdentity Service Principal - the runtime identity for this specific agent instance. |
| instanceIdentityPrincipalId | The principal ID of the AgentIdentity SP. Used for Entra identity linkage and governance. |
| operationalState | The current operational state of the agent. Possible values:Running, Stopped. |
| primaryDeploymentName | The name of the primary deployment. Used for stop and start operations on the agent. |
| projectName | The name of the Azure AI Foundry project that hosts this agent. |
| published | Indicates whether the agent has been published. |
| version | The version of the agent. Each version is aggregated as a separate Machine Identity in SailPoint. |
| versionId | The unique identifier for this specific agent version. |
| versionStatus | The status of this agent version (for example, Active, Inactive). |
Copilot Studio Agents Attributes
Following lists the supported schema attributes for the Copilot Studio Agents.
| Parent Attribute Name | Attribute Details |
|---|---|
| identity | The unique identifier of the Copilot agent. |
| name | The name of the Copilot agent. |
| description | The description of the Copilot agent. |
| status | The status of the agent whether it's active or inactive. |
| owner | The owner of the agent. |
| created_at | ISO timestamp representing when the agent was created. |
| updated_at | ISO timestamp when the agent was last updated. |
| resources | List of resource IDs (tools and knowledge bases) associated with the agent. It is an array of objects. Note Viewing an Agent's Control Panel |
Note
This attribute list cannot be extended.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.