accountId

login

Required. The user’s login name. 

comment

- c comment

The user’s full name. 

dir

- d dir

The user’s home directory. Any value specified in this account attribute takes precedence over a value specified in the Home Base Directory resource attribute.

expire

- e expiration date

Last date the account can be accessed.  

group

- g group

The user’s primary group. 

inactive

- f days

Number of days the account can be inactive before it is locked.  

secondary_group

- G group

A comma-separated list of the user’s secondary group or groups. 

To enable a role to provision this attribute, you must add ’csv=true’ to the RoleAttribute element in the Role object XML.

shell

-s/Path

The user’s login shell. 

If you are provisioning to an NIS master, the value of the user shell will be checked on the NIS master only. Checks against other machines the user may log on to will not be performed. 

time_last_login

Obtained from the lastlog command. 

The date and time of the last login. This value is read-only. If you do not need to track this attribute, delete it from the schema map, as additional calls to the resource are required to retrieve the last login time. 

uid

- u User ID

The user ID, in digit form.