Domain fields

A set of standard set of Cloud Identity Service domains are available for the creation of views.

Some domains can include fields from one or more other domains. In addition, in some domains you might have extra custom fields specific to your organization. Depending on how Cloud Identity Service was set up for your organization, some domains or fields might not be available.

Audit data domain

Contains Cloud Identity Service audit data.
Table 1. Audit fields
Field Type Description
current date   The current date, in YYYY-MM-DD format.
current time   The current time, in 24-hour clock format.
date String Date that an event occurred, in YYYY-MM-DD format.
day String The day that an event occurred. Can be used as a measure, 1 through to 7.
Event Name String Audit event name. For more information on audit events, see Audit events.
hour String The hour of the day that an event occurred in, in 24-hour clock format. Can be used as a measure, 0 through to 24.
Log Source String Event log source.
minute String The minute of the hour that an event occurred. Can be used as a measure.
month String The month that an event occurred in. Can be used as a measure, 1 through to 12.
quarter String The quarter of the year that an event occurred in. The first quarter of the year is Q1, which represents the months January through to March.
time_of_day String The time of day that an event occurred, in 24-hour clock format.
User Email String The email of the user who is the agent of an event. For example, the email of the user that approved a service request.
User Name String The user name of the user who is the agent of an event. For example, the user name of the user that accepted a service request.
User ID   UUID of the user who is the agent of an event. For example, the UUID of the user that accepted a service request.
weekday_name String The day of the week that an event occurred.
year String The year that an event occurred. Can be used as a measure.
Subject User Name String The user name of the user that is the subject of an event. For example, the user name of the user that a service request is accepted for.
Subject User Email String The email of the user that is the subject of an event. For example, the email of the user that a service request is accepted for.
Subject User ID String UUID of the user that is the subject of an event. For example, the UUID of the user that a service request is accepted for.
Additional Event Data Keys String Additional data that is associated with an audit event. For example, for the event APPROVE_ADD_USER_TO_SERVICE, the additional data items are:
  • service_name
  • user_uuid.
Additional Event Data Values String Values for additional data. For example, Service Name 1, and 4357437543.
Event ID String The audit event ID. Can be used as a measure.
Additional Data XML String Complete XML for all additional data and values for an event.

Group and user domain

Contains user data for group members, and associated group data.
Table 2. Group fields
Field Type Description
cn String Name of the group.
description String Description of the group.
member_businessCategory String The kind of business that is performed by an organization.
member_c String Country. Indicated by a two-letter ISO 3166 country code (countryName).
member_carLicense String Vehicle license plate tag.
member_cn String Common name. The X.500 commonName attribute, which contains a name of an object. If the object corresponds to a person, it is typically the full name of the person.
member_departmentNumber String A department within an organization.
member_description String A lengthy description of a directory object entry. An attribute that is common to CIM and LDAP schema.
member_displayName String A name that is used to display an entry in a one-line summary list.
member_employeeType String The type of employment for an employee.
member_facsimileTelephoneNumber String A fax number.
member_givenName String The part of the name of a person that is not their surname or their middle name, for example John, Jane, or Joe.
member_AddressLine1 String The first line of a postal address.
member_AddressLine2 String The second line of a postal address.
member_IsManager Boolean Indicates whether a user is a manager of other users in Cloud Identity Service.
member_LastRecertDate String The last recertification date for a user.
member_Manager Boolean Indicates the name of a manager for a user.
member_UserType String The user type.
member_homeFax String A home fax number.
member_homePhone String A home telephone number.
member_homePostalAddress String A postal address.
member_initials String The initials of some or all of the name of a person, but not including the surname, for example D. or D. A. for a person with the name Dan Andrew Smith.
member_internationalISDNNumber String The Integrated Services Digital Network (ISDN) addresses, in the format specified in CCITT Rec. E. 164.
member_l String The name of a locality, such as a city, county, or other geographic region. (localityName in X.500.)
member_labeledURI String The Uniform Resource Identifier with an optional label as defined in RFC2079.
member_mail String Email address.
member_manager String The distinguished name of the manager of a person.
member_middleName String The middle name of a person.
member_mobile String The mobile or cellular phone number.
member_o String The name of an organization. (organizationName in X.500.)
member_organizationalStatus String Specifies a category by which a person is often referred to in an organization.
member_otherMailbox String Indicates values for electronic mailbox types other than X.400 and rfc822.
member_ou String The name of an organizational unit. (organizationName in X.500.)
member_pager String A pager phone number.
member_personalTitle String A personal title for a person, for example Mr, Ms, Dr, Prof, and Rev.
member_physicalDeliveryOfficeName String A physical delivery office number.
member_postalAddress String A mailing address. This field is intended to include multiple lines.
member_postalCode String Postal code.
member_postOfficeBox String Post office box number.
member_preferredDeliveryMethod String A preferred contact or delivery method.
member_roomNumber String A room number. The commonName attribute is normally used for naming room objects.
member_seeAlso String The distinguished names of objects that are related to the subject object. Each related object name is one value of this multi-valued attribute.
member_sn String The X.500 surname attribute, which is the surname of a person.
member_st String The full name of a state or province. (stateOrProvinceName in X.500)
member_telephoneNumber String A telephone number.
member_telexNumber String A telex number.
member_title String The title, such as Vice President, of a person in their organizational context.
member_uid String A login names that are associated with the user, typically shortname, or userid.
member_uniqueIdentifier String A unique identifier for an object that is represented in the directory. The domain within which the identifier is unique, and the exact semantics of the identifier, are defined locally.
member_x500UniqueIdentifier String Differentiates objects when a distinguished name is reused. The method of identification is binary.

Role and user domain

Contains role data for users.
Table 3. Role fields
Field Type Description
app_section_name String The Self Service portal application sections that the role can access.
  • Help Desk (not all organizations)
  • Launchpad
  • Profile
  • Direct reports
  • Requests
  • Services
  • User control
  • Show check user name
role_name String Name of the role.
role_priority String The role priority, 1 is the highest priority.
businessCategory String The kind of business that is performed by an organization.
c String Country. Indicated by a two-letter ISO 3166 country code (countryName).
carLicense String Vehicle license plate tag.
cn String Common name. The X.500 commonName attribute, which contains a name of an object. If the object corresponds to a person, it is typically the full name of the person.
departmentNumber String A department within an organization.
description String A lengthy description of a directory object entry. An attribute that is common to CIM and LDAP schema.
displayName String A name that is used to display an entry in a one-line summary list.
employeeType String The type of employment for an employee.
facsimileTelephoneNumber String A fax number.
givenName String The part of the name of a person that is not their surname or their middle name, for example John, Jane, or Joe.
AddressLine1 String The first line of a postal address.
AddressLine2 String The second line of a postal address.
IsManager Boolean Indicates whether a user is a manager of other users in Cloud Identity Service.
LastRecertDate String The last recertification date for a user.
Manager Boolean Indicates the name of a manager for a user.
ServiceDN String Indicates the DN of a service.
UserType String The user type.
UUID String The UUID of a user.
homeFax String A home fax number.
homePhone String A home telephone number.
homePostalAddress String A postal address.
initials String The initials of some or all of the name of a person, but not including the surname, for example D. or D. A. for a person with the name Dan Andrew Smith.
internationalISDNNumber String The Integrated Services Digital Network (ISDN) addresses, in the format specified in CCITT Rec. E. 164.
l String The name of a locality, such as a city, county, or other geographic region. (localityName in X.500.)
labeledURI String The Uniform Resource Identifier with an optional label as defined in RFC2079.
mail String Email address.
middleName String The middle name of a person.
mobile String The mobile or cellular phone number.
o String The name of an organization. (organizationName in X.500.)
organizationalStatus String Specifies a category by which a person is often referred to in an organization.
otherMailbox String Indicates values for electronic mailbox types other than X.400 and rfc822.
ou String The name of an organizational unit. (organizationName in X.500.)
pager String A pager phone number.
personalTitle String A personal title for a person, for example Mr, Ms, Dr, Prof, and Rev.
physicalDeliveryOfficeName String A physical delivery office number.
postalAddress String A mailing address. This field is intended to include multiple lines.
postalCode String Postal code.
postOfficeBox String Post office box number.
preferredDeliveryMethod String A preferred contact or delivery method.
roomNumber String A room number. The commonName attribute is normally used for naming room objects.
seeAlso String The distinguished names of objects that are related to the subject object. Each related object name is one value of this multi-valued attribute.
sn String The X.500 surname attribute, which is the surname of a person.
st String The full name of a state or province. (stateOrProvinceName in X.500)
telephoneNumber String A telephone number.
telexNumber String A telex number.
title String The title, such as Vice President, of a person in their organizational context.
uid String A login names that are associated with the user, typically shortname, or userid.
uniqueIdentifier String A unique identifier for an object that is represented in the directory. The domain within which the identifier is unique, and the exact semantics of the identifier, are defined locally.
x500UniqueIdentifier String Differentiates objects when a distinguished name is reused. The method of identification is binary.

Services and user domain

Contains user data for service members and associated service data.
Table 4. Service fields
Field Type Description
businessCategory String The kind of business that is performed by an organization.
c String Country. Indicated by a two-letter ISO 3166 country code (countryName).
carLicense String Vehicle license plate tag.
cn String Common name. The X.500 commonName attribute, which contains a name of an object. If the object corresponds to a person, it is typically the full name of the person.
departmentNumber String A department within an organization.
description String A lengthy description of a directory object entry. An attribute that is common to CIM and LDAP schema.
displayName String A name that is used to display an entry in a one-line summary list.
employeeType String The type of employment for an employee.
facsimileTelephoneNumber String A fax number.
givenName String The part of the name of a person that is not their surname or their middle name, for example John, Jane, or Joe.
AddressLine1 String The first line of a postal address.
AddressLine2 String The second line of a postal address.
IsManager Boolean Indicates whether a user is a manager of other users in Cloud Identity Service.
LastRecertDate String The last recertification date for a user.
Manager Boolean Indicates the name of a manager for a user.
UserType String The user type.
homeFax String A home fax number.
homePhone String A home telephone number.
homePostalAddress String A postal address.
initials String The initials of some or all of the name of a user, but not including the surname, for example D. or D. A. for a person with the name Dan Andrew Smith.
internationalISDNNumber String The Integrated Services Digital Network (ISDN) addresses, in the format specified in CCITT Rec. E. 164.
l String The name of a locality, such as a city, county, or other geographic region. (localityName in X.500.)
labeledURI String The Uniform Resource Identifier with an optional label as defined in RFC2079.
mail String Email address.
manager String The distinguished name of the manager of a person.
middleName String The middle name of a person.
mobile String The mobile or cellular phone number.
o String The name of an organization. (organizationName in X.500.)
organizationalStatus String Specifies a category by which a person is often referred to in an organization.
otherMailbox String Indicates values for electronic mailbox types other than X.400 and rfc822.
ou String The name of an organizational unit. (organizationName in X.500.)
pager String A pager phone number.
personalTitle String A personal title for a person, for example Mr, Ms, Dr, Prof, and Rev.
physicalDeliveryOfficeName String A physical delivery office number.
postalAddress String A mailing address. This field is intended to include multiple lines.
postalCode String Postal code.
postOfficeBox String Post office box number.
preferredDeliveryMethod String A preferred contact or delivery method.
roomNumber String A room number. The commonName attribute is normally used for naming room objects.
seeAlso String The distinguished names of objects that are related to the subject object. Each related object name is one value of this multi-valued attribute.
sn String The X.500 surname attribute, which is the surname of a person.
st String The full name of a state or province. (stateOrProvinceName in X.500)
telephoneNumber String A telephone number.
telexNumber String A telex number.
title String The title, such as Vice President, of a person in their organizational context.
uid String A login names that are associated with the user, typically shortname, or userid.
uniqueIdentifier String A unique identifier for an object that is represented in the directory. The domain within which the identifier is unique, and the exact semantics of the identifier, are defined locally.
x500UniqueIdentifier String Differentiates objects when a distinguished name is reused. The method of identification is binary.
service_cn String Name of the service.
service_description String A description of the service.
service_ApprovalGracePeriod String The number of days before the approval reminder action is due. Defaults to 0.
service_ApprovalReminderActionId Integer Approval reminder action ID. The action to be taken when service membership is not approved by the due date. Defaults to 1. One of the following five action IDs can be specified.
  • 0. Take no action.
  • 1. Auto deny.
  • 2. Auto approve.
  • 3. Email approver
  • 4. Email manager of approver.
service_ContainedService String Name of the contained service.
service_DeProvisioningInstructions String Deprovisioning instructions for the service.
service_DestroyIdOnRevoke Boolean Indicates whether to delete the user account when membership to the service is revoked. Defaults to false.
service_HideFromSelfCare Boolean Indicates whether to hide the service from users in the Self Service portal.
service_ManagerApproval Boolean Indicates whether the approval of the user manager is required to add members to the service dynamically via a policy. Defaults to false.
service_ManagerApprovalManual Boolean Indicates whether service_ManagerApprovalManual is required for users manually added via a request. Defaults to false.
service_ManagerNotification Boolean Indicates whether to send notifications to the user manager, of membership assignments and revocations.
service_ManagerRecert Boolean Indicates whether manager recertification is required for users added dynamically via a policy. Defaults to false.
service_ManagerRecertManual Boolean Indicates whether service_ManagerRecertManual is required for users manually added via a request. Defaults to false.
service_MemberNotification Boolean Indicates whether members are notified of membership assignment and revocation. Defaults to false.
service_NoMembers Boolean Indicates whether the service can have members.
service_owner String The owner of the service.
service_OwnerApproval Boolean Indicates whether the approval of the service owner is required to add members to the service dynamically via a policy. Defaults to false.
service_OwnerApprovalManual Boolean Indicates whether service_OwnerApprovalManual is required for users manually added via a request. Defaults to false.
service_OwnerRecert Boolean Indicates whether service owner recertification is required for users added dynamically via a policy. Defaults to false.
service_OwnerRecertManual Boolean Indicates whether service_OwnerRecertManual is required for users manually added via a request. Defaults to false.
service_ParentService String Name of the parent service.
service_ProvisioningInstructions String Provisioning instructions for the service.
service_RecertGracePeriod Integer The number of days before the recertification reminder action is due. Defaults to 0.
service_RecertReminderActionId String Recertification reminder action ID. The action to be taken when service membership is not recertified by the due date. One of the following five action IDs can be specified.
  • 0. Take no action.
  • 1. Auto deny.
  • 2. Auto approve.
  • 3. Email approver
  • 4. Email manager of approver.
service_RequestInstructions String Instructions for requesting the service.
service_ServiceRequestXml String Service request XML.
service_ServiceRequestXml2 String Service request XML 2.
service_SODCalloutRequired Boolean Indicates whether a Separation of Duties (SOD) callout is required before the approval process is triggered to record service request approvals on an external system.

Summary domain

Contains summary data for users, groups, services, and roles.
Table 5. Summary fields
Field Type Description
Users Integer The total number of users.
Groups Integer The total number of groups.
Services Integer The total number of services.
Roles Integer The total number of roles.

User domain

Contains user data, including LDAP attributes, custom user attributes, and Cloud Identity Service user attributes.
Table 6. User fields
Field Type Description
businessCategory String The kind of business that is performed by an organization.
c String Country. Indicated by a two-letter ISO 3166 country code (countryName).
carLicense String Vehicle license plate tag.
cn String Common name. The X.500 commonName attribute, which contains a name of an object. If the object corresponds to a person, it is typically the full name of the person.
departmentNumber String A department within an organization.
description String A lengthy description of a directory object entry. An attribute that is common to CIM and LDAP schema.
displayName String A name that is used to display an entry in a one-line summary list.
employeeType String The type of employment for an employee.
facsimileTelephoneNumber String A fax number.
givenName String The part of the name of a person that is not their surname or their middle name, for example John, Jane, or Joe.
AddressLine1 String The first line of a postal address.
AddressLine2 String The second line of a postal address.
IsManager Boolean Indicates whether a user is a manager of other users in Cloud Identity Service.
LastRecertDate String The last recertification date for a user.
Manager Boolean Indicates the name of a manager for a user.
UserType String The user type.
homeFax String A home fax number.
homePhone String A home telephone number.
homePostalAddress String A postal address.
initials String The initials of some or all of the name of a person, but not including the surname, for example D. or D. A. for a person with the name Dan Andrew Smith.
internationalISDNNumber String The Integrated Services Digital Network (ISDN) addresses, in the format specified in CCITT Rec. E. 164.
l String The name of a locality, such as a city, county, or other geographic region. (localityName in X.500.)
labeledURI String The Uniform Resource Identifier with an optional label as defined in RFC2079.
mail String Email address.
manager String The distinguished name of the manager of a person.
middleName String The middle name of a person.
mobile String The mobile or cellular phone number.
o String The name of an organization. (organizationName in X.500.)
organizationalStatus String Specifies a category by which a person is often referred to in an organization.
otherMailbox String Indicates values for electronic mailbox types other than X.400 and rfc822.
ou String The name of an organizational unit. (organizationName in X.500.)
pager String A pager phone number.
personalTitle String A personal title for a person, for example Mr, Ms, Dr, Prof, and Rev.
physicalDeliveryOfficeName String A physical delivery office number.
postOfficeBox String Post office box number.
postalAddress String A mailing address. This field is intended to include multiple lines.
postalCode String Postal code.
preferredDeliveryMethod String A preferred contact or delivery method.
roomNumber String A room number. The commonName attribute is normally used for naming room objects.
seeAlso String The distinguished names of objects that are related to the subject object. Each related object name is one value of this multi-valued attribute.
sn String The X.500 surname attribute, which is the surname of a person.
st String The full name of a state or province. (stateOrProvinceName in X.500)
telephoneNumber String A telephone number.
telexNumber String A telex number.
title String The title, such as Vice President, of a person in their organizational context.
uid String Login names that are associated with the user, typically shortname, or userid.
UUID String The unique identifier of the user.
uniqueIdentifier String A unique identifier for an object that is represented in the directory. The domain within which the identifier is unique, and the exact semantics of the identifier, are defined locally.
x500UniqueIdentifier String Differentiates objects when a distinguished name is reused. The method of identification is binary.