Accounts

An account is a resource that represents a unique set of credentials issued from a configured auth method which can be used to establish the identity of a user. A user can have zero or more accounts but an account can only belong to a single user. An account can only be associated with a user in the same scope as the account's auth method.

Attributes

All account types have the following configurable attributes:

• name - (optional) If set, the name must be unique within the account's auth method.

• description - (optional)

Password account attributes

Password account types have the following additional attributes:

• login_name - (required) Must be unique within the account's auth method. Can only contain lower case letters.

• password - (optional) Not setting the password disables the account.

LDAP account attributes

LDAP account types have the following additional attributes:

• login_name - (required) Must be unique within the account's auth method. Can only contain lower case letters.

• full_name - (output only) Maps to the name attribute for the authenticated user, and is updated every time the user successfully authenticates. It is empty until the user's first successful authentication.

• email - (output only) Maps to the email address attribute for the authenticated user, and is updated every time the user successfully authenticates. It is empty until the user's first successful authentication.

• dn - (output only) Maps to the distinguished name for the authenticated user, and is updated every time the user successfully authenticates. It is empty until the user's first successful authentication.

• member_of_groups - (output only) A list of the groups the authenticated user is a member of. It is empty until the user's first successful authentication.

Referenced by

• Auth Method
• Managed Group
• User

Service API docs

The following services are relevant to this resource:

• Account Service