Use to create and modify UserEntitlement objects.
This view has the following top-level attributes:
Table 3–73 Top-Level Attributes of User Entitlement View
Name |
Editable? |
Type |
Required? |
---|---|---|---|
name |
String |
Yes |
|
status |
String |
Yes |
|
user |
String |
Yes |
|
userId |
String |
Yes |
|
attestorHint |
String |
No |
|
userView |
GenericObject |
Yes |
|
reviewInstanceId |
String |
Yes |
|
reviewStartDate |
String |
Yes |
|
scanId |
String |
Yes |
|
scanInstanceId |
String |
Yes |
|
approvalWorkflowName |
String |
Yes |
|
organizationId |
String |
Yes |
|
attestorComments.name |
String |
No |
|
attestorComments.attestor |
String |
No |
|
attestorComments.time |
String |
No |
|
attestorComments.timestamp |
String |
No |
|
attestorComments.status |
No |
Identifies the User Entitlement (by a unique identifier).
Specifies the state of User Entitlement object. Valid states include PENDING, ACCEPTED, REJECTED, REMEDIATING, CANCELLED.
Identifies the name of the associated WSUser for this entitlement.
Specifies the ID of the associated WSUser.
Displays the (String) hint to the attestor that is provided by the Review Determination Rule. This hints acts as “advice” from the rule to the attestor.
Contains the User view that is captured by User Entitlement scanner. This view contains zero or more resource accounts depending on the configuration of the Access Scan object.
Specifies the ID of the PAR Task instance.
Indicates the (String) start date of the PAR task (in canonical format).
Specifies the ID of AccessScan Task definition.
Specifies the ID of AccessScan Task instance.
Identifies the name of workflow to be run for approval. This value comes from the Access Scan Task definition.
Specifies the ID of the WSUser’s organization at the time of the scan.
Lists attestation records for the entitlement. Each attestation record indicates an action or statement made about the entitlement, including approval, rejection, and rescan.
Timestamp used to identify this element in the list.
Identifies the WSUser name of the attestor making the comment on the entitlement.
Specifies the time at which the attestor attested this record. May differ from the timestamp.
Indicates the status assigned by the attestor. This can be any string, but typically is a string that indicates the action taken by the attestor -- for example, approve, reject, rescan, remediate.
Contains comments added by attestor.