erBPPersonItem

Edit online

The erBPPersonItem class is an auxiliary class that identifies attributes for a IBM® Business Partner person. This class is a domain entry. The parent class is top.

Table 1. erBPPersonItem table
Attribute name Description Type
Mail Email address. directory string
Cn Common name for person. directory string
erPersonStatus Status of person. integer
erSponsor DN of sponsor for this person. distinguished name
erRoles DN of roles for person. distinguished name
erAliases Aliases for person. directory string
erSharedSecret Value used by the user for password pickup. directory string
erCustomDisplay User-selected attribute to display in the BP Person list. directory string
erLocale The locale preference of the user. Default is the system locale. directory string
erCreateDate Timestamp of when the object is created. The timestamp is in Greenwich Mean Time format. directory string
erSynchPassword Password to be used for account creation. binary
erLastStatusChangeDate Timestamp of when the status is updated. The timestamp is in Greenwich Mean Time format. directory string
erLastOperation Available for custom use for lifecycle event. directory string
erPswdLastChanged Timestamp of the last password change date. The timestamp is in Greenwich Mean Time format. generalized time
erLastCertifiedDate1 Timestamp of the last execution of a user recertification policy for this user. A multivalued attribute that contains “;;” delimited strings. The first part of each string is the DN of the policy definition, and the second part is the timestamp of the policy implementation. directory string
erRoleRecertificationLastAction2 The last recertification action applied to a role membership. A multivalued attribute that contains “;;” delimited strings. The first part of each string is the DN of the role definition, and the second part is the last action applied to the role membership. Valid actions are: Certified (CERTIFIED) Rejected and marked (REJECTED_MARK) directory string
erRoleRecertificationLastActionDate2 Timestamp of the last recertification action applied to a role membership. A multivalued attribute that contains “;;” delimited strings. The first part of each string is the DN of the role definition, and the second part is the timestamp of the last action. directory string
erPersonPassword1 Account password of the person. directory string
erRoleAssignments3 Represents the person role assignment attribute value information. The actual role assignment data of business partner person is stored in the database and not in the directory server. Hence, this attribute is not populated on any business partner person entry in the directory server. directory string
erURI3 The universal resource identifier. directory string

1 Indicates the attribute is added in release 4.6 Express.

2 Indicates the attribute is added in release 5.1.

3 Indicates the attribute is added in IBM Verify Identity Governance 6.0.