MachineAccountV2
A machine account. Machine identities are returned as the machineIdentities list, which includes the machine identity the account is directly linked to and machine identities linked to the account through its source resource.
Properties
| Name | Type | Description | Notes |
|---|---|---|---|
| id | str | System-generated unique ID of the Object | [optional] [readonly] |
| name | str | Name of the Object | [required] |
| created | datetime | Creation date of the Object | [optional] [readonly] |
| modified | datetime | Last modification date of the Object | [optional] [readonly] |
| machine_identities | []MachineAccountV2AllOfMachineIdentities | The machine identities linked to this machine account. The list is empty when there are none. | [optional] |
| description | str | The description of the machine account. | [optional] |
| native_identity | str | The unique ID of the machine account generated by the source system. | [optional] |
| uuid | str | The unique ID of the account as determined by the account schema. | [optional] |
| owner_identity | BaseReferenceDto | The identity that owns this machine account. | [optional] |
| owners | MachineAccountV2AllOfOwners | [optional] | |
| subtype | MachineAccountV2AllOfSubtype | [optional] | |
| access_type | str | The connection type of the source this account is from. | [optional] |
| environment | str | The environment of the machine account. | [optional] |
| attributes | map[string]object | Custom attributes specific to the machine account. | [optional] |
| connector_attributes | map[string]object | The connector attributes for the account. | [optional] |
| classification_method | Enum [ 'CRITERIA', 'SOURCE', 'DISCOVERY', 'MANUAL', 'MANUALLY_UNCLASSIFIED' ] | How the account was classified as a machine account. | [optional] |
| manually_edited | bool | Indicates whether the machine account has been manually edited. | [optional] [default to False] |
| manually_correlated | bool | Indicates whether the account has been manually correlated to an identity. | [optional] [default to False] |
| enabled | bool | Indicates whether the account is enabled. | [optional] [default to False] |
| locked | bool | Indicates whether the account is currently locked. | [optional] [default to False] |
| has_entitlements | bool | Indicates whether the account has entitlements. | [optional] [default to False] |
| source | BaseReferenceDto | The source this machine account belongs to. | [optional] |
| resource | MachineAccountV2AllOfResource | [optional] | |
| dataset_id | str | ID of the dataset the machine account was aggregated from. Null for accounts that were not aggregated from a dataset. | [optional] |
| type | Enum [ 'MACHINE', 'MACHINE_DATASET', 'CANDIDATE', 'CANDIDATE_BY_SOURCE', 'DISCOVERED', 'AGENT' ] | The classification of the machine account. | [optional] |
| account_type | Enum [ 'MACHINE', 'MACHINE_DATASET', 'CANDIDATE', 'CANDIDATE_BY_SOURCE', 'DISCOVERED', 'AGENT' ] | Deprecated. Use type, which always has the same value. | [optional] |
| risk | MachineAccountV2AllOfRisk | [optional] | |
| permission_level | Enum [ 'PRIVILEGED', 'ELEVATED', 'BASIC', 'UNKNOWN' ] | The permission level set by enrichment. Null when not enriched. Read-only. | [optional] [readonly] |
| compliance | []MachineAccountV2AllOfCompliance | Compliance control IDs the machine account violates, set by enrichment. Null when not enriched; empty when no violations were recorded. Read-only. | [optional] [readonly] |
| last_used_at | datetime | When the machine account was last used, set by enrichment. Null when not enriched. Read-only. | [optional] [readonly] |
| } |
Example
from sailpoint.machine_accounts.models.machine_account_v2 import MachineAccountV2
machine_account_v2 = MachineAccountV2(
id='id12345',
name='aName',
created='2015-05-28T14:07:17Z',
modified='2015-05-28T14:07:17Z',
machine_identities=[{"type":"MACHINE_IDENTITY","id":"1540e5a4-6c2e-4bf1-b88e-c08cae0696e9","name":"SVC_ADService","subtype":"APPLICATION"}],
description='Service account for Active Directory',
native_identity='552775',
uuid='{b0dce506-d6d4-44d2-8a32-d9a5b21fb175}',
owner_identity=sailpoint.machine_accounts.models.base_reference_dto.Base Reference Dto(
type = 'IDENTITY',
id = '2c91808568c529c60168cca6f90c1313',
name = 'William Wilson', ),
owners=sailpoint.machine_accounts.models.machine_account_v2_all_of_owners.MachineAccountV2_allOf_owners(
primary = {"id":"2c918084660f45d6016617daa9210584","type":"IDENTITY","name":"Adam Kennedy"},
secondary = [{"id":"2c9180858082150f0180893dbaf44202","type":"IDENTITY","name":"Jane Doe"}], ),
subtype=sailpoint.machine_accounts.models.machine_account_v2_all_of_subtype.MachineAccountV2_allOf_subtype(
id = '43bdd144-4b17-4fce-a744-17c7fd3e717b',
technical_name = 'serviceAccount',
display_name = 'Service Account', ),
access_type='direct',
environment='TEST',
attributes={"firstName":"SailPoint","lastName":"Support"},
connector_attributes={"mail":"machine-178@sailpoint.com","givenName":"Support"},
classification_method='SOURCE',
manually_edited=False,
manually_correlated=False,
enabled=True,
locked=False,
has_entitlements=True,
source=sailpoint.machine_accounts.models.base_reference_dto.Base Reference Dto(
type = 'IDENTITY',
id = '2c91808568c529c60168cca6f90c1313',
name = 'William Wilson', ),
resource=sailpoint.machine_accounts.models.machine_account_v2_all_of_resource.MachineAccountV2_allOf_resource(
id = '8886e5e3-63d0-462f-a195-d98da885b8dc',
type = 'aws:iam-role',
name = 'nightly-batch-role',
features = ["PROVISIONING","AUTHENTICATION"], ),
dataset_id='aws-iam-roles',
type='MACHINE',
account_type='MACHINE',
risk=sailpoint.machine_accounts.models.machine_account_v2_all_of_risk.MachineAccountV2_allOf_risk(
score = 72.5,
severity = 'HIGH', ),
permission_level='PRIVILEGED',
compliance=[
sailpoint.machine_accounts.models.machine_account_v2_all_of_compliance.MachineAccountV2_allOf_compliance(
id = 'SOC2-CC6.1', )
],
last_used_at='2026-03-10T21:38:25Z'
)