Skip to main content

MachineAccountV2

Properties​

NameTypeDescriptionNotes
IdStringSystem-generated unique ID of the Object[optional] [readonly]
NameStringName of the Object[required]
CreatedSystem.DateTimeCreation date of the Object[optional] [readonly]
ModifiedSystem.DateTimeLast modification date of the Object[optional] [readonly]
MachineIdentities[]MachineAccountV2AllOfMachineIdentitiesThe machine identities linked to this machine account. The list is empty when there are none.[optional]
DescriptionStringThe description of the machine account.[optional]
NativeIdentityStringThe unique ID of the machine account generated by the source system.[optional]
UuidStringThe unique ID of the account as determined by the account schema.[optional]
OwnerIdentityBaseReferenceDtoThe identity that owns this machine account.[optional]
OwnersMachineAccountV2AllOfOwners[optional]
SubtypeMachineAccountV2AllOfSubtype[optional]
AccessTypeStringThe connection type of the source this account is from.[optional]
EnvironmentStringThe environment of the machine account.[optional]
Attributesmap[string]AnyTypeCustom attributes specific to the machine account.[optional]
ConnectorAttributesmap[string]AnyTypeThe connector attributes for the account.[optional]
ClassificationMethodEnum [ "CRITERIA", "SOURCE", "DISCOVERY", "MANUAL", "MANUALLY_UNCLASSIFIED" ]How the account was classified as a machine account.[optional]
ManuallyEditedBooleanIndicates whether the machine account has been manually edited.[optional] [default to $false]
ManuallyCorrelatedBooleanIndicates whether the account has been manually correlated to an identity.[optional] [default to $false]
EnabledBooleanIndicates whether the account is enabled.[optional] [default to $false]
LockedBooleanIndicates whether the account is currently locked.[optional] [default to $false]
HasEntitlementsBooleanIndicates whether the account has entitlements.[optional] [default to $false]
SourceBaseReferenceDtoThe source this machine account belongs to.[optional]
ResourceMachineAccountV2AllOfResource[optional]
DatasetIdStringID of the dataset the machine account was aggregated from. Null for accounts that were not aggregated from a dataset.[optional]
TypeEnum [ "MACHINE", "MACHINE_DATASET", "CANDIDATE", "CANDIDATE_BY_SOURCE", "DISCOVERED", "AGENT" ]The classification of the machine account.[optional]
AccountTypeEnum [ "MACHINE", "MACHINE_DATASET", "CANDIDATE", "CANDIDATE_BY_SOURCE", "DISCOVERED", "AGENT" ]Deprecated. Use type, which always has the same value.[optional]
RiskMachineAccountV2AllOfRisk[optional]
PermissionLevelEnum [ "PRIVILEGED", "ELEVATED", "BASIC", "UNKNOWN" ]The permission level set by enrichment. Null when not enriched. Read-only.[optional] [readonly]
Compliance[]MachineAccountV2AllOfComplianceCompliance control IDs the machine account violates, set by enrichment. Null when not enriched; empty when no violations were recorded. Read-only.[optional] [readonly]
LastUsedAtSystem.DateTimeWhen the machine account was last used, set by enrichment. Null when not enriched. Read-only.[optional] [readonly]

Examples​

  • Prepare the resource
$MachineAccountV2 = Initialize-MachineAccountV2 -Id id12345 `
-Name aName `
-Created 2015-05-28T14:07:17Z `
-Modified 2015-05-28T14:07:17Z `
-MachineIdentities [{"type":"MACHINE_IDENTITY","id":"1540e5a4-6c2e-4bf1-b88e-c08cae0696e9","name":"SVC_ADService","subtype":"APPLICATION"}] `
-Description Service account for Active Directory `
-NativeIdentity 552775 `
-Uuid {b0dce506-d6d4-44d2-8a32-d9a5b21fb175} `
-OwnerIdentity null `
-Owners null `
-Subtype null `
-AccessType direct `
-Environment TEST `
-Attributes {"firstName":"SailPoint","lastName":"Support"} `
-ConnectorAttributes {"mail":"machine-178@sailpoint.com","givenName":"Support"} `
-ClassificationMethod SOURCE `
-ManuallyEdited false `
-ManuallyCorrelated false `
-Enabled true `
-Locked false `
-HasEntitlements true `
-Source null `
-Resource null `
-DatasetId aws-iam-roles `
-Type MACHINE `
-AccountType MACHINE `
-Risk null `
-PermissionLevel PRIVILEGED `
-Compliance null `
-LastUsedAt 2026-03-10T21:38:25Z
  • Convert the resource to JSON
$MachineAccountV2 | ConvertTo-JSON

[Back to top]