Provisioning Policy

When Identity Security Cloud provisions new accounts to an Oracle NetSuite direct connect source, it uses the attributes on the Create Profile page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.

Important
This page describes the configuration of the default Create Profile. However, SailPoint recommends that you work with Services to define a Create Profile specific to your company's needs.

The following generators create required information for a new Oracle NetSuite account. You might need to edit the contents.

Account Attribute

Generator

Description

EmpID

Identity Attribute

The SailPoint User Name

password

Generator

Create password

Email

Identity Attribute

Email of the employee

Select the email type from the drop-down list as per your requirement. The email types are Work Email and Alternate Email.

OfficePhoneNumber

Disable

Office phone number of the employee

Fax

Disable

Fax number of the employee

For the Oracle NetSuite source, email and password are required as provisioning attributes when a role is assigned to an existing NetSuite account without any pre-existing roles.

The Oracle NetSuite source supports the EmpID attribute as an identity attribute in the provisioning policy. Previously it was generated as $(firstname)$(uniqueCounter).

Additional Provisioning Policy Attributes

Account Attribute

Description

FirstName

The employee's first name

LastName

The employee's last name

Department

The Department of the user

DefaultExpenseReportCurrency

Default Currency for Expense Reports

Class

Class of the employee

Requirepwdchange

Indicates if a password change is required

giveAccess (supported only for update operation)

To disable giveAccess, make sure Password is not set in an update request

Location

The Location of the user

Subsidiary

The subsidiary associated with the employee

The following fields can be configured for provisioning:

Type

Attribute

String

accountNumber

initials

middleName

phone

salutation

Boolean

usePerquest

isSalesRep

isSupportRep

sendEmail

eligibleForCommission

Date

lastPaidDate

birthDate

hireDate

releaseDate

lastReviewDate

nextReviewDate

Double

expenseLimit

purchaseOrderLimit

purchaseOrderApprovalLimit

approvalLimit

laborCost