Skip to main content

MachineAccountV2

A machine account. Machine identities are returned as the machineIdentities list, which includes the machine identity the account is directly linked to and machine identities linked to the account through its source resource.

Properties​

NameTypeDescriptionNotes
idstrSystem-generated unique ID of the Object[optional] [readonly]
namestrName of the Object[required]
createddatetimeCreation date of the Object[optional] [readonly]
modifieddatetimeLast modification date of the Object[optional] [readonly]
machine_identities[]MachineAccountV2AllOfMachineIdentitiesThe machine identities linked to this machine account. The list is empty when there are none.[optional]
descriptionstrThe description of the machine account.[optional]
native_identitystrThe unique ID of the machine account generated by the source system.[optional]
uuidstrThe unique ID of the account as determined by the account schema.[optional]
owner_identityBaseReferenceDtoThe identity that owns this machine account.[optional]
ownersMachineAccountV2AllOfOwners[optional]
subtypeMachineAccountV2AllOfSubtype[optional]
access_typestrThe connection type of the source this account is from.[optional]
environmentstrThe environment of the machine account.[optional]
attributesmap[string]objectCustom attributes specific to the machine account.[optional]
connector_attributesmap[string]objectThe connector attributes for the account.[optional]
classification_methodEnum [ 'CRITERIA', 'SOURCE', 'DISCOVERY', 'MANUAL', 'MANUALLY_UNCLASSIFIED' ]How the account was classified as a machine account.[optional]
manually_editedboolIndicates whether the machine account has been manually edited.[optional] [default to False]
manually_correlatedboolIndicates whether the account has been manually correlated to an identity.[optional] [default to False]
enabledboolIndicates whether the account is enabled.[optional] [default to False]
lockedboolIndicates whether the account is currently locked.[optional] [default to False]
has_entitlementsboolIndicates whether the account has entitlements.[optional] [default to False]
sourceBaseReferenceDtoThe source this machine account belongs to.[optional]
resourceMachineAccountV2AllOfResource[optional]
dataset_idstrID of the dataset the machine account was aggregated from. Null for accounts that were not aggregated from a dataset.[optional]
typeEnum [ 'MACHINE', 'MACHINE_DATASET', 'CANDIDATE', 'CANDIDATE_BY_SOURCE', 'DISCOVERED', 'AGENT' ]The classification of the machine account.[optional]
account_typeEnum [ 'MACHINE', 'MACHINE_DATASET', 'CANDIDATE', 'CANDIDATE_BY_SOURCE', 'DISCOVERED', 'AGENT' ]Deprecated. Use type, which always has the same value.[optional]
riskMachineAccountV2AllOfRisk[optional]
permission_levelEnum [ 'PRIVILEGED', 'ELEVATED', 'BASIC', 'UNKNOWN' ]The permission level set by enrichment. Null when not enriched. Read-only.[optional] [readonly]
compliance[]MachineAccountV2AllOfComplianceCompliance control IDs the machine account violates, set by enrichment. Null when not enriched; empty when no violations were recorded. Read-only.[optional] [readonly]
last_used_atdatetimeWhen the machine account was last used, set by enrichment. Null when not enriched. Read-only.[optional] [readonly]
}

Example​

from sailpoint.machine_accounts.models.machine_account_v2 import MachineAccountV2

machine_account_v2 = MachineAccountV2(
id='id12345',
name='aName',
created='2015-05-28T14:07:17Z',
modified='2015-05-28T14:07:17Z',
machine_identities=[{"type":"MACHINE_IDENTITY","id":"1540e5a4-6c2e-4bf1-b88e-c08cae0696e9","name":"SVC_ADService","subtype":"APPLICATION"}],
description='Service account for Active Directory',
native_identity='552775',
uuid='{b0dce506-d6d4-44d2-8a32-d9a5b21fb175}',
owner_identity=sailpoint.machine_accounts.models.base_reference_dto.Base Reference Dto(
type = 'IDENTITY',
id = '2c91808568c529c60168cca6f90c1313',
name = 'William Wilson', ),
owners=sailpoint.machine_accounts.models.machine_account_v2_all_of_owners.MachineAccountV2_allOf_owners(
primary = {"id":"2c918084660f45d6016617daa9210584","type":"IDENTITY","name":"Adam Kennedy"},
secondary = [{"id":"2c9180858082150f0180893dbaf44202","type":"IDENTITY","name":"Jane Doe"}], ),
subtype=sailpoint.machine_accounts.models.machine_account_v2_all_of_subtype.MachineAccountV2_allOf_subtype(
id = '43bdd144-4b17-4fce-a744-17c7fd3e717b',
technical_name = 'serviceAccount',
display_name = 'Service Account', ),
access_type='direct',
environment='TEST',
attributes={"firstName":"SailPoint","lastName":"Support"},
connector_attributes={"mail":"machine-178@sailpoint.com","givenName":"Support"},
classification_method='SOURCE',
manually_edited=False,
manually_correlated=False,
enabled=True,
locked=False,
has_entitlements=True,
source=sailpoint.machine_accounts.models.base_reference_dto.Base Reference Dto(
type = 'IDENTITY',
id = '2c91808568c529c60168cca6f90c1313',
name = 'William Wilson', ),
resource=sailpoint.machine_accounts.models.machine_account_v2_all_of_resource.MachineAccountV2_allOf_resource(
id = '8886e5e3-63d0-462f-a195-d98da885b8dc',
type = 'aws:iam-role',
name = 'nightly-batch-role',
features = ["PROVISIONING","AUTHENTICATION"], ),
dataset_id='aws-iam-roles',
type='MACHINE',
account_type='MACHINE',
risk=sailpoint.machine_accounts.models.machine_account_v2_all_of_risk.MachineAccountV2_allOf_risk(
score = 72.5,
severity = 'HIGH', ),
permission_level='PRIVILEGED',
compliance=[
sailpoint.machine_accounts.models.machine_account_v2_all_of_compliance.MachineAccountV2_allOf_compliance(
id = 'SOC2-CC6.1', )
],
last_used_at='2026-03-10T21:38:25Z'
)

[Back to top]