Secure Data Share Identity Data Dictionary

This page presents the Secure Data Share (SDS) identity data model in a tabular format. It contains the same information as the Identity ER Diagram, organized as tables for easier navigation, searching, and reference.

Each section below documents a single table in the identity data model, listing its columns, data types, keys, and descriptions. The Table relationships section at the end summarizes how the tables relate to one another.

Tables

tip

Use the table of contents on the right-hand side of the page to jump directly to any table.

IDENTITY_ACCOUNTS

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	unique ID of the identity this account is correlated to
DISPLAY_NAME	text		Human-readable display name of the object
CREATED_DATE	datetime		date when the Identity was created
UPDATED_DATE	datetime		date when the identity was modified
ACCOUNT_ID	text	PK	unique ID of the account
NATIVE_IDENTITY	text		unique ID of the account generated by the source system
ACCOUNT_DISPLAY_NAME	text		Human-readable display name of the Account
ACCOUNT_STATUS	text		State of the Account. can be one of disabled, enabled and locked
SOURCE_ID	text		unique ID of the source this account belongs to
SOURCE_DISPLAY_NAME	text		display name of the source this account belongs to
SOURCE_TYPE	text		Type of the Source Ex: Azure Active Directory, Okta etc.
SYNC_DATE	datetime		When the row is last synced
IDENTITY_SYNC_DATE	datetime		When the identity record was last synced
ACCOUNT_SYNC_DATE	datetime		When the account record was last synced
SOURCE_SYNC_DATE	datetime		When the source record was last synced

IDENTITY_ENTITLEMENTS

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the identity
CREATED_DATE	datetime		date when the Identity was created
UPDATED_DATE	datetime		date when the identity was modified
ENTITLEMENT_ID	text	PK	unique ID of the entitlement
SOURCE_ID	text		source the entitlement belongs to
ENTITLEMENT_ATTRIBUTE	text		entitlement attribute name
ENTITLEMENT_VALUE	text		value of the entitlement attribute
SYNC_DATE	datetime		When the row is last synced

IDENTITY

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the identity
NAME	text		Name of the Object
CREATED_DATE	datetime		date when the identity was created
UPDATED_DATE	datetime		date when the identity was modified
DELETED_DATE	datetime		date when the identity was deleted
DISPLAY_NAME	text		Human-readable display name of the object
JOB_TITLE	text		Job Title assigned to the Identity
LOCATION	text		Location of the Identity
LOCATION_CODE	text		Location code of the Identity
DEPARTMENT	text		Department of the identity
EMAIL	text		The email address of the identity
MANAGER	text		manager of the identity
LIFECYCLE_STATE	text		name of the lifecycle state Ex: Active, leaver, dormant etc.
IDENTITY_STATE	text		State of the Identity. Can be one of ACTIVE, INACTIVE_SHORT_TERM and INACTIVE_LONG_TERM
SYNC_DATE	datetime		When the row is last synced

IDENTITY_ROLES

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the identity
DISPLAY_NAME	text		Human-readable display name of the object
CREATED_DATE	datetime		date when the Identity was created
UPDATED_DATE	datetime		date when the identity was modified
ROLE_ID	text	PK	Unique Id for the Role
ROLE_NAME	text		Name of the Role Object
ROLE_DISPLAY_NAME	text		Human-readable display name of the role
SYNC_DATE	datetime		When the row is last synced

IDENTITY_ACCESS_PROFILES

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the identity
DISPLAY_NAME	text		Human-readable display name of the object
CREATED_DATE	datetime		date when the Identity was created
UPDATED_DATE	datetime		date when the identity was modified
ACCESS_PROFILE_ID	text	PK	Unique Id for the Access Profile
ACCESS_PROFILE_NAME	text		Name of the Access Profile Object
ACCESS_PROFILE_DISPLAY_NAME	text		Human-readable display name of the Access Profile
SYNC_DATE	datetime		When the row is last synced

IDENTITY_APPS

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the identity
DISPLAY_NAME	text		Human-readable display name of the object
CREATED_DATE	datetime		date when the Identity was created
UPDATED_DATE	datetime		date when the identity was modified
APP_ID	text	PK	Unique Id for the APP
APP_DISPLAY_NAME	text		Human-readable display name of the APP
SYNC_DATE	datetime		When the row is last synced

IDENTITY_ATTRIBUTES

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the identity
ATTRIBUTE_NORMAL_NAME	text		Name that can be used in a generic way
ATTRIBUTE_NAME	text		Actual name of the attribute
ATTRIBUTE_DISPLAY_NAME	text		Human-readable display name of the object
ATTRIBUTE_VALUE	text		Value for the corresponding attribute
ATTRIBUTE_TYPE	text		Data Type of the attribute
UPDATED_DATE	datetime		date when the object was modified
SYNC_DATE	datetime		When the row is last synced

ACCESS_PROFILE

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text		Unique Id for the Access Profile
NAME	text		Name of the object in ISC
DISPLAY_NAME	text		Human-readable display name of the object
DESCRIPTION	text		Description of the object
CREATED_DATE	datetime		date when the object was created
UPDATED_DATE	datetime		date when the object was modified
DELETED_DATE	datetime		date when the object was deleted
SOURCE_ID	text		Unique Id of the source or application
IS_ASSIGNABLE	boolean		To check if the object can be assigned to an Identity
ENTITLEMENTS	array		List of entitlements associated with the Access Profile
OWNER_IDENTITY_ID	text		Identity that owns the object
ACCESS_MODEL_METADATA	variant		Access model metadata assignments
ACCESS_REQUEST_CONFIG	variant		Access request configuration
SYNC_DATE	datetime		When the row is last synced

ACCESS_REQUEST

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text		Unique Id for the Access Profile
NAME	text		Name of the object in ISC
CREATED_DATE	datetime		date when the object was created
UPDATED_DATE	datetime		date when the object was modified
DELETED_DATE	datetime		date when the object was deleted
TARGET_ID	text		Identity ID whose access is getting updated
REQUESTER_ID	text		Identity ID who raised this access request
END_DATE	datetime		date when the access request was completed
EXECUTION_STATUS	text		Execution status at ISC Ex: Completed, Terminated etc.
COMPLETION_STATUS	text		Completion status Ex: Success, Failure etc.
PRIORITY	text		one of low, Normal and high
TYPE	text		type of access item or Identity items requested
SYNC_DATE	datetime		When the row is last synced

CERTIFICATION

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text		Unique Id for the Certification
NAME	text		Name of the object in ISC
CREATED_DATE	datetime		date when the object was created
UPDATED_DATE	datetime		date when the object was modified
DELETED_DATE	datetime		date when the object was deleted
SOURCE_ID	text		Unique Id of the source or application
SIGNER_ID	text		Signer assigned to the certification
MANAGER_ID	text		Manager - reviewing the certification
CAMPAIGN_ID	text		Campaign the certification is Spawned from
ORIGINAL_CERTIFICATION_ID	text		original certification before reassignment
COMPLETE	boolean		Status of the certification
PHASE	text		Current Phase like Active, Staged, end etc.
IS_BULK_REASSIGNMENT	boolean		Whether the certification is part of a bulk reassignment
DUE_DATE	datetime		when the certification needs to be reviewed
SIGNED_DATE	datetime		when the certification was actually signed
FINISHED_DATE	datetime		when the certification was actually finished
EXPIRATION_DATE	datetime		When the certification will expire
SYNC_DATE	datetime		When the row is last synced

ENTITLEMENT

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text		Unique Id for the Entitlement
DISPLAY_NAME	text		Human-readable display name of the object
DESCRIPTION	text		Description of the object
CREATED_DATE	datetime		date when the entitlement was created
UPDATED_DATE	datetime		date when the entitlement was modified
DELETED_DATE	datetime		date when the entitlement was deleted from the source
SOURCE_ID	text		Unique Id of the source or application
ATTRIBUTE	text		Attribute name that defines the entitlement
VALUE	text		Value of the attribute
TYPE	text		Group, customRole, PermissionSet etc.
IS_REQUESTABLE	text		To check if the object can be requested by other access items
OWNER_IDENTITY_ID	text		Identity that owns the object
PRIVILEGED	boolean		Whether the entitlement is privileged
CLOUD_GOVERNED	boolean		Whether the entitlement is cloud governed
HAS_PERMISSIONS	boolean		Whether the entitlement has permissions
ACCESS_MODEL_METADATA	variant		Access model metadata assignments
ACCESS_REQUEST_CONFIG	variant		Access request configuration
SYNC_DATE	datetime		When the row is last synced

ROLE

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text		Unique Id for the Role
NAME	text		Name of the object in ISC
CREATED_DATE	datetime		date when the object was created
UPDATED_DATE	datetime		date when the object was modified
DELETED_DATE	datetime		date when the object was deleted
DISPLAY_NAME	text		Human-readable display name of the object
DESCRIPTION	text		Description of the object
IS_ASSIGNABLE	boolean		To check if the object can be assigned to an Identity
INHERITING_ROLES	array		List of Inheriting roles
ACCESS_PROFILES	array		List of Access Profiles associated with the Role
ENTITLEMENTS	array		List of entitlements associated with the Role
OWNER_IDENTITY_ID	text		Identity that owns the object
DIMENSIONAL	boolean		Whether the role has dimensions
ACCESS_MODEL_METADATA	variant		Access model metadata assignments
ACCESS_REQUEST_CONFIG	variant		Access request configuration
MEMBERSHIP	variant		Role membership criteria
STATUS	text		Role Status - Enabled or Disabled
SYNC_DATE	datetime		When the row is last synced

DIMENSION

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the Dimension
NAME	text		Name of the Dimension
DESCRIPTION	text		Description of the Dimension
OWNER_IDENTITY_ID	text		Identity that owns the Dimension
ROLE_ID	text		Role ID that this dimension belongs to
MEMBERSHIP	variant		Dimension membership criteria
ENTITLEMENTS	variant		List of entitlements associated with the Dimension
ACCESS_PROFILES	variant		List of Access Profiles associated with the Dimension
CREATED_DATE	datetime		date when the dimension was created
UPDATED_DATE	datetime		date when the dimension was modified
SYNC_DATE	datetime		When the row is last synced

CERTIFICATION_ITEM

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the certification item
CREATED_DATE	datetime		date when the object was created
UPDATED_DATE	datetime		date when the object was modified
DELETED_DATE	datetime		date when the object was deleted
IDENTITY_ID	text		Identity to which the access is reviewed for
REVIEWER_ID	text		Identity who is reviewing the access
ENTITLEMENT_ID	text		Entitlement that is being reviewed
ROLE_ID	text		Role that is being reviewed
CERTIFICATION_ID	text		certification from where the item spawned
ACCOUNT_ID	text		Account corresponding to the Identity
SOURCE_ID	text		source or application related to account/entitlement
REVIEWED_ID	text		Who actually reviewed the access item
REVIEWED_TYPE	text		What type of access item was reviewed Ex: Account, Role, Entitlement etc.
TYPE	text		Type of certification item Ex: Bundle, Exception, Account Etc.
SUB_TYPE	text		Associated Sub_type for each of the type
COMPLETED_DATE	datetime		time the access item certification was completed
DECISION_DATE	datetime		time the decision was submitted on ISC
APPROVED	number		Whether the item was approved(1) or rejected(0)
STATUS	text		Status of the certification item
DECISION	text		Decision taken by reviewer on the access item Ex: Approved, Mitigated, remediated etc.
BULK	boolean		decision made was part of bulk selection
REMEDIATED	boolean		True when the decision was remediated
PRIVILEGED	boolean		if any of the access items are privileged
REMEDIATION_ACTION	text		Associated action on remediation
MITIGATION_EXPIRATION	datetime		Time when the decision to mitigate was set to expire
NATIVE_IDENTITY	text		Identity from the source
INSTANCE	text		instance
ACCOUNT_ONLY	boolean		if only account is reviewed without any access items
NEW_ACCESS	boolean		if the access item is new
POLICY_NAME	text		Policy if any
CONSTRAINT_NAME	text		Constraint if any
SYNC_DATE	datetime		When the row is last synced

IDENTITY_REQUEST_ITEM

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
IDENTITY_REQUEST_ITEM_ID	text		Unique Id for the identity request item
IDENTITY_REQUEST_ITEM_DISPLAY_NAME	text		Human-readable display name of the object
IDENTITY_REQUEST_ITEM_NAME	text		Name of the access item or account
IDENTITY_REQUEST_ITEM_VALUE	text		Value of corresponding access item or account
OPERATION	text		What type of operation was performed on the Identity or account
APPROVED	number		Whether the item was approved(1) or rejected(0)
REJECTED	number		Whether the item was approved(1) or rejected(0)
PROVISIONING_STATE	text		Provisioning state Ex: Committed, Pending etc.
EXPANSION_CAUSE	text		Role or ProvisioningPolicy that gets added
RETRIES	number		Number of retries
IDENTITY_REQUEST_ITEM_START_DATE	datetime		date request has started
IDENTITY_REQUEST_ITEM_END_DATE	datetime		date request has ended
IDENTITY_REQUEST_ITEM_CREATED_DATE	datetime		Initial date when the item is created
APPROVER_ID	text		Identity ID who approved the item
INSTANCE	text		specific instance where the account exists
NATIVE_IDENTITY	text		Identity from the source
ACCESS_REQUEST_ID	text		unique identifier of the access request
SOURCE_ID	text		Unique Id of the source or application
ENTITLEMENT_ID	text		Unique Id for the Entitlement
ROLE_ID	text		Unique Id for the Role
PROVISIONING_ENGINE	text		Source or connector used to provision
SYNC_DATE	datetime		When the row is last synced

SOURCE

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the Source or application
NAME	text		Name of the Source or application
CREATED_DATE	datetime		date when the source was created
UPDATED_DATE	datetime		date when the source was modified
DELETED_DATE	datetime		date when the object was deleted
DISPLAY_NAME	text		Human-readable display name of the object
DESCRIPTION	text		Description of the source or application
TYPE	text		Type of the Source or Application
CONNECTOR	text		Connector from where the source is created
OWNER_IDENTITY_ID	text		Identity that owns the source
SYNC_DATE	datetime		When the row is last synced

ACCOUNT

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the Account
NAME	text		Name of the Account
CREATED_DATE	datetime		date when the account was created
UPDATED_DATE	datetime		date when the account was modified
DELETED_DATE	datetime		date when the account was deleted
OWNER_IDENTITY_ID	text		Identity that owns the account
SOURCE_ID	text		Unique Id of the source this account belongs to
NATIVE_IDENTITY	text		unique ID of the account generated by the source system
DISPLAY_NAME	text		Human-readable display name of the account
DESCRIPTION	text		Description of the account
ACCOUNT_STATUS	text		State of the Account. can be one of disabled, enabled and locked
ACCOUNT_OBJECT_GUID	text		Object GUID of the account
SYNC_DATE	datetime		When the row is last synced

ACCOUNT_ENTITLEMENTS

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Account ID - the account associated with the entitlement
ENTITLEMENT_ID	text	PK	Entitlement ID - the entitlement associated with the account
UPDATED_DATE	datetime		date when the relationship was modified
DELETED_DATE	datetime		date when the relationship was deleted
SYNC_DATE	datetime		When the row is last synced

CERTIFICATION_CAMPAIGN

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the Certification Campaign
NAME	text		Name of the campaign
CREATED_DATE	datetime		date when the campaign was created
UPDATED_DATE	datetime		date when the campaign was modified
DELETED_DATE	datetime		date when the campaign was deleted
STATUS	text		Status of the campaign Ex: Active, Completed etc.
DEADLINE	datetime		Deadline for the campaign
TYPE	text		Type of certification campaign
COMPLETED_CERTIFICATIONS	number		Number of completed certifications in the campaign
TOTAL_CERTIFICATIONS	number		Total number of certifications in the campaign
SYNC_DATE	datetime		When the row is last synced

GOVERNANCE_GROUP

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the Governance Group
NAME	text		Name of the Governance Group
CREATED_DATE	datetime		date when the governance group was created
UPDATED_DATE	datetime		date when the governance group was modified
DESCRIPTION	text		Description of the Governance Group
OWNER_ID	text		Identity that owns the Governance Group
MEMBERS	array		List of identity IDs that are members of the Governance Group
SYNC_DATE	datetime		When the row is last synced

ACCESS_MODEL_METADATA_ATTRIBUTE

Column	Data Type	Key	Description
TENANT_ID	text		Unique Id for an Organization tenant
ID	text	PK	Unique Id for the Access Model Metadata Attribute
KEY	text		Key identifier for the attribute
NAME	text		Name of the attribute
MULTISELECT	boolean		Whether multiple values can be selected
STATUS	text		Status of the attribute
TYPE	text		Type of the attribute
OBJECT_TYPES	array		List of object types this attribute applies to
DESCRIPTION	text		Description of the attribute
ATTRIBUTE_VALUES	variant		List of allowed values for this attribute
CREATED_DATE	datetime		date when the attribute was created
UPDATED_DATE	datetime		date when the attribute was modified
SYNC_DATE	datetime		When the row is last synced

Table relationships

The following table describes the relationships between the tables in the identity data model.

From	To	Cardinality	Description
IDENTITY	IDENTITY_ACCOUNTS	One to One-or-More	has and owns
IDENTITY	IDENTITY_ENTITLEMENTS	One to Zero-or-More	associated to and owns
IDENTITY	IDENTITY_ROLES	One to Zero-or-More	associated to and owns
IDENTITY	IDENTITY_ACCESS_PROFILES	One to Zero-or-More	associated to and owns
IDENTITY	IDENTITY_APPS	One to Zero-or-More	associated with
IDENTITY	IDENTITY_ATTRIBUTES	One to One-or-More	is explained by
ACCESS_PROFILE	IDENTITY_ACCESS_PROFILES	One to Zero-or-More	associated to
ACCESS_PROFILE	IDENTITY	Many to One	Owned by
ENTITLEMENT	ACCESS_PROFILE	One to Zero-or-More	associated with
ENTITLEMENT	IDENTITY_ENTITLEMENTS	One to Zero-or-More	associated to
ENTITLEMENT	IDENTITY	Many to One	Owned by
ENTITLEMENT	ROLE	One to Zero-or-More	associated with
ROLE	IDENTITY_ROLES	One to Zero-or-More	associated to
ROLE	IDENTITY	Many to One	Owned by
ACCESS_REQUEST	IDENTITY	One to One	contains - requested by and for
CERTIFICATION	IDENTITY	One to One-or-More	contains
CERTIFICATION_ITEM	IDENTITY	One to One	contains
CERTIFICATION_ITEM	ROLE	One to Zero-or-One	contains
CERTIFICATION_ITEM	ENTITLEMENT	One to Zero-or-One	contains
CERTIFICATION	CERTIFICATION_ITEM	One to One-or-More	contains
IDENTITY_REQUEST_ITEM	IDENTITY	One to One	contains - requested for, reviewed or approved by
IDENTITY_REQUEST_ITEM	ROLE	One to Zero-or-One	contains - add or remove
IDENTITY_REQUEST_ITEM	ENTITLEMENT	One to Zero-or-One	contains - add or remove
ACCESS_REQUEST	IDENTITY_REQUEST_ITEM	One to One-or-More	contains
SOURCE	IDENTITY_ACCOUNTS	One to One-or-More	contains
SOURCE	ENTITLEMENT	One to One-or-More	contains
SOURCE	ACCOUNT	One to One-or-More	contains
ACCOUNT	IDENTITY	Many to One	Owned by
ACCOUNT	ACCOUNT_ENTITLEMENTS	One to Zero-or-More	has
ENTITLEMENT	ACCOUNT_ENTITLEMENTS	One to Zero-or-More	associated to
CERTIFICATION_CAMPAIGN	CERTIFICATION	One to One-or-More	spawns
GOVERNANCE_GROUP	IDENTITY	Many to One	Owned by or members of
ACCESS_MODEL_METADATA_ATTRIBUTE	ENTITLEMENT	Many to One	Assignment of Attributes to
ACCESS_MODEL_METADATA_ATTRIBUTE	ACCESS_PROFILE	Many to One	Assignment of Attributes to
ACCESS_MODEL_METADATA_ATTRIBUTE	ROLE	Many to One	Assignment of Attributes to
ROLE	DIMENSION	One to Zero-or-More	has dimensions
DIMENSION	IDENTITY	Many to One	Owned by