Schema Attributes

The application schema is used to configure objects returned from a connector. When a connector is called, the schema is supplied to the methods on the connector interface. This connector currently supports the following types of objects:

  • Account – Account objects are used when building identity Link objects.

  • Group – The group schema is used when building AccountGroup objects that are used to hold entitlements shared across identities.

  • Role – The role schema is used when building Account-Role objects that are used to hold entitlements shared across identities.

  • IAM Resource Permission – The IAM Resource Permission schema is used to represent the custom combination of GCP resources and roles.

  • Folder – The Folder schema is used to represent GCP Project Folder.

  • Project – The Project schema is used to represent GCP Project.

  • IAM Role – The IAM Role schema is used to represent GCP Roles which contains a set of permissions that allows you to perform specific actions on Google Cloud resources.

Adding a New Schema Attribute

To add a new Account attribute, complete the following:

  1. In the Account Management section, select Account Schema.

  2. Select Add New Attribute.

    The Add Attribute window is displayed.

  3. Enter the attribute Name.

  4. Enter the attribute Description.

  5. Select the attribute Type.

  6. Select the attribute properties. For example, Entitlement or Multi-Valued.

  7. Select Save.