Skip to content

Schema Reference

The application schema is used to configure the objects returned from a connector.

Note

  • The Account Schema tab is used to define the attributes for each object type in the application being configured. The schema attributes can be defined as Entitlement or Multi-Valued. Refer to Managing Source Account Schemas for more information.

  • The schema attributes that are not present by default must be defined as strings if not specified.

The Rootly connector uses the following default correlation and object configurations.

Default Account Schema

Each source supports a variety of details, or attributes, about each user who has an account, such as their name, email address, manager name, and location.

The set of account attributes each source stores and how they're organized is known as the account's schema. To best represent your data, you can configure sources to use an account schema matching the one you use in the external connector. Refer to Managing Source Account Schemas for more information.

Default Account ID

SailPoint requires that certain attributes remain in your configuration. These attributes are referred to as account IDs.

Caution

Changing the attribute marked as the account ID after aggregating accounts can result in duplicate accounts being created. To avoid this, either reset the accounts on this source before editing the account ID attribute or edit the account ID attribute before aggregating accounts.

To resolve issues caused by changing account IDs, reconfigure them to their default values.

The following table lists the default account IDs for this connector:

Account ID Schema Object Type
id Account

Default Account Attributes

The Rootly connector supports the following default account schema attributes and customer configurable attributes. The attributes must be defined as strings if not specified.

Attribute Name Description
name User's combined name (first and last).
email User's primary email address.
phone User's primary contact number (nullable).
phone_2 User's secondary contact number (nullable).
first_name User's given name.
last_name User's family name.
full_name User's full name.
full_name_with_team User's full name with their associated team.
slack_id Slack user ID, if integrated (nullable).
time_zone User's assigned time zone.
updated_at Timestamp of when the user record was last updated.
created_at Timestamp of when the user record was created.
email_addresses Related email address references.
phone_numbers Related phone number references (if any).
devices Related devices (if any).
role Assigned role reference.
on_call_roll Assigned on-call role reference.

Default Entitlement Attributes

Entitlement attributes define the entitlements, such as groups or roles, that can be assigned to the managed system's user accounts. Refer to Managing Entitlements for more information.

Caution

Changing the attribute marked as the Entitlement ID after aggregating accounts or entitlements can result in duplicate entitlements being created, or access profiles and roles breaking. To avoid this, edit the entitlement schema before performing any aggregations.

Default Group Attributes

The Rootly connector supports roles. The following attributes must be configured on the managed system and in the SailPoint source schema to manage roles.

Attribute Name Description
id Unique identifier for the role.
team_id Identifier for the team associated with this role.
name Name of the role (for example, Owner).
slug URL-friendly role identifier.
is_deletable Indicates whether the role can be deleted.
is_editable Indicates whether the role can be modified.
_permissions List of permissions (create/read/update/delete) for each managed identity.
incident_permission_set_id ID of the associated incident permission set (nullable).
updated_at Last update timestamp.
created_at Creation timestamp.

Default On-Call Group Attributes

Attribute Name Description
id Unique identifier for the on-call role.
team_id Identifier for the associated team.
name Name of the on-call role.
slug URL-friendly role identifier.
system_role Access level classification (for example, no_access).
_permissions List of permissions for various services and entities (mostly empty).
updated_at Timestamp when the record was last updated.
created_at Timestamp for when the record was created.