Provisioning Policy
When Identity Security Cloud provisions new accounts to an Oracle NetSuite direct connect source, it uses the attributes on the Create Profile page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
Important
This page describes the configuration of the default Create Profile. However, SailPoint recommends that you work with Services to define a Create Profile specific to your company's needs.
The following generators create required information for a new Oracle NetSuite account. You might need to edit the contents.
Account Attribute |
Generator |
Description |
---|---|---|
EmpID |
Identity Attribute |
The SailPoint User Name |
password |
Generator |
Create password |
|
Identity Attribute |
Email of the employee Select the email type from the drop-down list as per your requirement. The email types are Work Email and Alternate Email. |
OfficePhoneNumber |
Disable |
Office phone number of the employee |
Fax |
Disable |
Fax number of the employee |
For the Oracle NetSuite source, email
and password
are required as provisioning attributes when a role is assigned to an existing NetSuite account without any pre-existing roles.
The Oracle NetSuite source supports the EmpID attribute as an identity attribute in the provisioning policy. Previously it was generated as $(firstname)$(uniqueCounter).
Additional Provisioning Policy Attributes
Account Attribute |
Description |
---|---|
FirstName |
The employee's first name |
LastName |
The employee's last name |
Department |
The Department of the user |
DefaultExpenseReportCurrency |
Default Currency for Expense Reports |
Class |
Class of the employee |
Requirepwdchange |
Indicates if a password change is required |
giveAccess (supported only for update operation) |
To disable giveAccess, make sure Password is not set in an update request |
Location |
The Location of the user |
Subsidiary |
The subsidiary associated with the employee |
The following fields can be configured for provisioning:
Type |
Attribute |
---|---|
String |
accountNumber initials middleName phone salutation |
Boolean |
usePerquest isSalesRep isSupportRep sendEmail eligibleForCommission |
Date |
lastPaidDate birthDate hireDate releaseDate lastReviewDate nextReviewDate |
Double |
expenseLimit purchaseOrderLimit purchaseOrderApprovalLimit approvalLimit laborCost |