Built-in resource attributes
There are several built-in attributes:
ENTITLEMENT_EXPIRY_DATE | The expiry date of an entitlement. This attribute is not included in an attribute group by default. It is used to hold the expiry date for a requested exception to a SoD rule. |
ENTITLEMENT_EXPIRY_DAYS_DEFAULT | The default number of days before expiry. This attribute is included in the SOD_EXCEPTION_EXPIRY resource attribute group, and is used to determine the expiry date for a requested exception to a SoD rule. |
GROUP_ID | Group ID This attribute is included in the GROUP_INFO_CREATE attribute group and is used in create group operations. |
GROUP_NAME | Group name This attribute is included in the GROUP_INFO_CREATE and GROUP_INFO_UPDATE attribute groups and is used in create group and update group operations. |
GROUP_OU | Group OU This attribute is included in the GROUP_INFO_CREATE attribute group and is used in create group operations. |
GROUP_TARGET | Group target system This attribute is included in the GROUP_INFO_CREATE attribute group and is used in create group operations. |
IGNORE_VALIDITY_WINDOW | When enabled the role membership validity window will be ignored. This attribute allows for a manual override when a validity window is set by automation, based off some SoR attributes. |
START_TIME | Optional start time for a role assignment. This attribute is included in the ROLE_VALIDITY attribute group and is used when assigning roles. |
END_TIME | Optional end time for a role assignment. This attribute is included in the ROLE_VALIDITY attribute group and is used when assigning roles. |