11.30 idmrpt_ms_acct_v

Stores managed system accounts.

identity_id

VARCHAR(32)

acct_id_type

VARCHAR(128)

an account might have login id's or unique account identifiers per application. this field indicates the type of login id or account identifier that is used in the account identifier field. e.g, in active directory accounts can be identified by and users can login using the samaccountname attribute, the userprincipalname attribute or its object * distinguished name* (dn).

ms_acct_global_identifier

VARCHAR(4000)

unique identifier of account in ms ( provides ability to link all accounts)

acct_id_value

VARCHAR(4000)

the identifier that uniquely identifies this account in an application. an account might have multiple unique identifiers per application. e.g. in active directory an account is identified by its samaccountname, userprincipalname and ldap dn. and in the idm world the account is known by its association.

acct_status

CHAR(1)

status of the account (if applicable: active, inactive, disabled)active (a), inactive (i), or undefined (u)

acct_type

VARCHAR(32)

account type string (not used) : regular, admin, elevated, ...

idv_managed

bool

boolean flag, if set to true - means account is managed by IDM and idv association is not disabled

idv_ms_app_name

VARCHAR(4000)

IDV name for managed systenm application

idv_association

VARCHAR(256)

the IDV accoutnt Association

idv_acct_id

VARCHAR(32)

the IDV accoutnt id, nullable fk to idv acct table

idv_sync

bool

boolean flag, if set to true - means account is synchronied in IDV and MS

ms_idv_acct_status

CHAR(1)

status of the account ms account according to idv record

ms_id

VARCHAR(32)

ms_ent_type_id

VARCHAR(32)

ms_acct_id

VARCHAR(32)

idmrpt_valid_from

TIMESTAMP WITHOUT TIME ZONE

idmrpt_deleted

bool

idmrpt_syn_state

int2