account

It is applicable only for account entitlement. The purpose of this extension is to instruct the querying agent how to interpret the results of a <member-assignment-query> of an <entitlement> with type name <account>. The extensions are stored in a new <account> child node of the <entitlement> node in the entitlements section. The <account> node groups the <account> extension instructions.

Example

<account>
  <account-id source="read-attr" source-name="sAMAccountName"/>
  <account-id source="read-attr" source-name="userPrincipalName"/>
  <account-id source="src-dn"/>
  <account-id source="association"/>
  <account-status source="read-attr" source-name="dirxml-uACAccountDisable" active="false" inactive="true"/>
</account>

Allowed Content

Element

Description

account-id

The account ID in the connected system.

account-status

The active/inactive status of the account in the connected system.

Attributes

None

Content Rule

( account-id + , account-status ? )

Parent Elements

Element

Description

entitlement

Entitlement definition.