Microsoft Identity Manager 2016 Schema

  • Article

 

Applies To

  • MIM 2016

↑ Back to top

Download

You can download a single Excel file of this data at https://gallery.technet.microsoft.com/Identity-Manager-2016-c6bfda85

↑ Back to top

Synchronization Engine Schema

You can use the scroll bars to move right and / or down in the table.

 

Object Attribute Type Multi-valued Indexed SQL DataType SQL Length
function assembly String (non-indexable) No No nvarchar max
function csObjectID String (indexable) No No nvarchar 448
function description String (indexable) No No nvarchar 448
function displayName String (indexable) No No nvarchar 448
function functionName String (non-indexable) No No nvarchar max
function functionParameters String (non-indexable) No No nvarchar max
function namespace String (non-indexable) No No nvarchar max
function objectID String (non-indexable) No No nvarchar max
function objectType String (indexable) No No nvarchar 448
function returnType String (non-indexable) No No nvarchar max
synchronizationRule connectedObjectType String (non-indexable) No No nvarchar max
synchronizationRule connectedSystem String (non-indexable) No No nvarchar max
synchronizationRule connectedSystemScope String (non-indexable) No No nvarchar max
synchronizationRule msidmOutboundScopingFilters String (non-indexable) No No nvarchar max
synchronizationRule createConnectedSystemObject Boolean No No bit 1
synchronizationRule createILMObject Boolean No No bit 1
synchronizationRule csObjectID String (indexable) No No nvarchar 448
synchronizationRule disconnectConnectedSystemObject Boolean No No bit 1
synchronizationRule dependency Reference (DN) No No uniqueidentifier 36
synchronizationRule description String (indexable) No No nvarchar 448
synchronizationRule displayName String (indexable) No No nvarchar 448
synchronizationRule existenceTest String (non-indexable) Yes No nvarchar max
synchronizationRule flowType Number No No bigint N/A
synchronizationRule initialFlow String (non-indexable) Yes No nvarchar max
synchronizationRule objectID String (non-indexable) No No nvarchar max
synchronizationRule ilmObjectType String (non-indexable) No No nvarchar max
synchronizationRule persistentFlow String (non-indexable) Yes No nvarchar max
synchronizationRule precedence Number No No bigint N/A
synchronizationRule relationshipCriteria String (non-indexable) No No nvarchar max
synchronizationRule synchronizationRuleParameters String (non-indexable) Yes No nvarchar max
synchronizationRule msidmOutboundIsFilterBased Boolean No No bit 1
expectedRuleEntry createdTime String (indexable) No No nvarchar 448
expectedRuleEntry csObjectID String (indexable) No No nvarchar 448
expectedRuleEntry displayName String (indexable) No No nvarchar 448
expectedRuleEntry objectID String (non-indexable) No No nvarchar max
expectedRuleEntry expectedRuleEntryAction String (non-indexable) No No nvarchar max
expectedRuleEntry resourceParent Reference (DN) No No uniqueidentifier 36
expectedRuleEntry synchronizationRuleData String (non-indexable) Yes No nvarchar max
expectedRuleEntry synchronizationRuleID Reference (DN) No No uniqueidentifier 36
expectedRuleEntry statusError String (non-indexable) No No nvarchar max
expectedRuleEntry status String (indexable) No No nvarchar 448
detectedRuleEntry connector String (non-indexable) No No nvarchar max
detectedRuleEntry csObjectID String (indexable) No No nvarchar 448
detectedRuleEntry displayName String (indexable) No No nvarchar 448
detectedRuleEntry objectID String (non-indexable) No No nvarchar max
detectedRuleEntry objectType String (indexable) No No nvarchar 448
detectedRuleEntry resourceParent Reference (DN) No No uniqueidentifier 36
detectedRuleEntry synchronizationRuleID Reference (DN) No No uniqueidentifier 36
person accountName String (indexable) No No nvarchar 448
person ad_UserCannotChangePassword Boolean No No bit 1
person address String (indexable) No No nvarchar 448
person assistant Reference (DN) No No uniqueidentifier 36
person authNWFLockedOut Reference (DN) Yes No uniqueidentifier 36
person authNWFRegistered Reference (DN) Yes No uniqueidentifier 36
person c String (indexable) No No nvarchar 448
person city String (indexable) No No nvarchar 448
person cn String (indexable) No No nvarchar 448
person co String (indexable) No No nvarchar 448
person comment String (indexable) No No nvarchar 448
person company String (indexable) No No nvarchar 448
person costCenter String (indexable) No No nvarchar 448
person costCenterName String (indexable) No No nvarchar 448
person country String (indexable) No No nvarchar 448
person creator Reference (DN) No No uniqueidentifier 36
person deleteTime String (indexable) No No nvarchar 448
person department String (indexable) No No nvarchar 448
person description String (indexable) No No nvarchar 448
person displayName String (indexable) No No nvarchar 448
person division String (indexable) No No nvarchar 448
person domain String (indexable) No No nvarchar 448
person email String (indexable) No No nvarchar 448
person employeeEndDate String (indexable) No No nvarchar 448
person employeeStartDate String (indexable) No No nvarchar 448
person expirationTime String (indexable) No No nvarchar 448
person employeeID String (indexable) No No nvarchar 448
person employeeStatus String (indexable) No No nvarchar 448
person employeeType String (indexable) No No nvarchar 448
person facsimileTelephoneNumber String (indexable) No No nvarchar 448
person firstName String (indexable) No No nvarchar 448
person freezeCount Number No No bigint N/A
person freezeLevel String (indexable) No No nvarchar 448
person generationQualifier String (indexable) No No nvarchar 448
person homePhone String (indexable) No No nvarchar 448
person info String (indexable) No No nvarchar 448
person initials String (indexable) No No nvarchar 448
person jobTitle String (indexable) No No nvarchar 448
person l String (indexable) No No nvarchar 448
person lastName String (indexable) No No nvarchar 448
person lastResetAttemptTime String (indexable) No No nvarchar 448
person location String (indexable) No No nvarchar 448
person loginName String (indexable) No No nvarchar 448
person manager Reference (DN) No No uniqueidentifier 36
person mobilePhone String (indexable) No No nvarchar 448
person mail String (indexable) No No nvarchar 448
person mailNickname String (indexable) No No nvarchar 448
person middleName String (indexable) No No nvarchar 448
person mobile String (indexable) No No nvarchar 448
person o String (indexable) No No nvarchar 448
person objectID String (non-indexable) No No nvarchar max
person objectSid Binary (indexable) No No varbinary 900
person objectType String (indexable) No No nvarchar 448
person officeFax String (indexable) No No nvarchar 448
person officeLocation String (indexable) No No nvarchar 448
person officePhone String (indexable) No No nvarchar 448
person otherMailbox String (indexable) Yes Yes nvarchar 448
person ou String (indexable) No No nvarchar 448
person pager String (indexable) No No nvarchar 448
person personalTitle String (indexable) No No nvarchar 448
person photo Binary (non-indexable) No No varbinary max
person physicalDeliveryOfficeName String (indexable) No No nvarchar 448
person postOfficeBox String (indexable) No No nvarchar 448
person postalAddress String (indexable) No No nvarchar 448
person postalCode String (indexable) No No nvarchar 448
person proxyAddressCollection String (indexable) Yes Yes nvarchar 448
person register Boolean No No bit 1
person registrationRequired Boolean No No bit 1
person resetPassword String (indexable) No No nvarchar 448
person secretary Reference (DN) No No uniqueidentifier 36
person seeAlso Reference (DN) No No uniqueidentifier 36
person sIDHistory Binary (non-indexable) Yes No varbinary max
person sn String (indexable) No No nvarchar 448
person st String (indexable) No No nvarchar 448
person street String (indexable) No No nvarchar 448
person telephoneNumber String (indexable) No No nvarchar 448
person title String (indexable) No No nvarchar 448
person uid String (indexable) No No nvarchar 448
person userCertificate Binary (non-indexable) Yes No varbinary max
person userSMIMECertificate Binary (non-indexable) Yes No varbinary max
person givenName String (indexable) No No nvarchar 448
person expectedRulesList Reference (DN) Yes No uniqueidentifier 36
person detectedRulesList Reference (DN) Yes No uniqueidentifier 36
person csObjectID String (indexable) No No nvarchar 448
organizationalUnit company String (indexable) No No nvarchar 448
organizationalUnit description String (indexable) No No nvarchar 448
organizationalUnit displayName String (indexable) No No nvarchar 448
organizationalUnit facsimileTelephoneNumber String (indexable) No No nvarchar 448
organizationalUnit l String (indexable) No No nvarchar 448
organizationalUnit ou String (indexable) No No nvarchar 448
organizationalUnit physicalDeliveryOfficeName String (indexable) No No nvarchar 448
organizationalUnit postOfficeBox String (indexable) No No nvarchar 448
organizationalUnit postalAddress String (indexable) No No nvarchar 448
organizationalUnit postalCode String (indexable) No No nvarchar 448
organizationalUnit seeAlso Reference (DN) No No uniqueidentifier 36
organizationalUnit st String (indexable) No No nvarchar 448
organizationalUnit street String (indexable) No No nvarchar 448
organizationalUnit telephoneNumber String (indexable) No No nvarchar 448
organization company String (indexable) No No nvarchar 448
organization description String (indexable) No No nvarchar 448
organization displayName String (indexable) No No nvarchar 448
organization facsimileTelephoneNumber String (indexable) No No nvarchar 448
organization l String (indexable) No No nvarchar 448
organization o String (indexable) No No nvarchar 448
organization physicalDeliveryOfficeName String (indexable) No No nvarchar 448
organization postOfficeBox String (indexable) No No nvarchar 448
organization postalAddress String (indexable) No No nvarchar 448
organization postalCode String (indexable) No No nvarchar 448
organization seeAlso Reference (DN) No No uniqueidentifier 36
organization st String (indexable) No No nvarchar 448
organization street String (indexable) No No nvarchar 448
organization telephoneNumber String (indexable) No No nvarchar 448
locality description String (indexable) No No nvarchar 448
locality displayName String (indexable) No No nvarchar 448
locality l String (indexable) No No nvarchar 448
locality seeAlso Reference (DN) No No uniqueidentifier 36
locality st String (indexable) No No nvarchar 448
locality street String (indexable) No No nvarchar 448
domain company String (indexable) No No nvarchar 448
domain dc String (indexable) No No nvarchar 448
domain description String (indexable) No No nvarchar 448
domain displayName String (indexable) No No nvarchar 448
domain facsimileTelephoneNumber String (indexable) No No nvarchar 448
domain l String (indexable) No No nvarchar 448
domain o String (indexable) No No nvarchar 448
domain physicalDeliveryOfficeName String (indexable) No No nvarchar 448
domain postOfficeBox String (indexable) No No nvarchar 448
domain postalAddress String (indexable) No No nvarchar 448
domain postalCode String (indexable) No No nvarchar 448
domain seeAlso Reference (DN) No No uniqueidentifier 36
domain st String (indexable) No No nvarchar 448
domain street String (indexable) No No nvarchar 448
domain telephoneNumber String (indexable) No No nvarchar 448
computer cn String (indexable) No No nvarchar 448
computer description String (indexable) No No nvarchar 448
computer displayName String (indexable) No No nvarchar 448
computer l String (indexable) No No nvarchar 448
computer location String (indexable) No No nvarchar 448
computer manager Reference (DN) No No uniqueidentifier 36
computer o String (indexable) No No nvarchar 448
computer ou String (indexable) No No nvarchar 448
computer seeAlso Reference (DN) No No uniqueidentifier 36
printer cn String (indexable) No No nvarchar 448
printer description String (indexable) No No nvarchar 448
printer displayName String (indexable) No No nvarchar 448
printer l String (indexable) No No nvarchar 448
printer location String (indexable) No No nvarchar 448
printer manager Reference (DN) No No uniqueidentifier 36
printer o String (indexable) No No nvarchar 448
printer ou String (indexable) No No nvarchar 448
printer seeAlso Reference (DN) No No uniqueidentifier 36
group accountName String (indexable) No No nvarchar 448
group cn String (indexable) No No nvarchar 448
group creator Reference (DN) No No uniqueidentifier 36
group csObjectID String (indexable) No No nvarchar 448
group deleteTime String (indexable) No No nvarchar 448
group description String (indexable) No No nvarchar 448
group displayedOwner Reference (DN) No No uniqueidentifier 36
group displayName String (indexable) No No nvarchar 448
group domain String (indexable) No No nvarchar 448
group email String (indexable) No No nvarchar 448
group expirationTime String (indexable) No No nvarchar 448
group mail String (indexable) No No nvarchar 448
group mailNickname String (indexable) No No nvarchar 448
group manager Reference (DN) No No uniqueidentifier 36
group member Reference (DN) Yes No uniqueidentifier 36
group memberFilter String (non-indexable) No No nvarchar max
group membershipAddWorkflow String (indexable) No No nvarchar 448
group membershipLocked Boolean No No bit 1
group o String (indexable) No No nvarchar 448
group objectID String (non-indexable) No No nvarchar max
group objectType String (indexable) No No nvarchar 448
group ou String (indexable) No No nvarchar 448
group owner Reference (DN) Yes No uniqueidentifier 36
group seeAlso Reference (DN) No No uniqueidentifier 36
group scope String (indexable) No No nvarchar 448
group temporal Boolean No No bit 1
group type String (indexable) No No nvarchar 448
group uid String (indexable) No No nvarchar 448
group expectedRulesList Reference (DN) Yes No uniqueidentifier 36
group detectedRulesList Reference (DN) Yes No uniqueidentifier 36
group objectSid Binary (indexable) No No varbinary 900
group sIDHistory Binary (non-indexable) Yes No varbinary max
role company String (indexable) No No nvarchar 448
role description String (indexable) No No nvarchar 448
role displayName String (indexable) No No nvarchar 448
role facsimileTelephoneNumber String (indexable) No No nvarchar 448
role l String (indexable) No No nvarchar 448
role member Reference (DN) Yes No uniqueidentifier 36
role ou String (indexable) No No nvarchar 448
role physicalDeliveryOfficeName String (indexable) No No nvarchar 448
role postOfficeBox String (indexable) No No nvarchar 448
role postalAddress String (indexable) No No nvarchar 448
role postalCode String (indexable) No No nvarchar 448
role seeAlso Reference (DN) No No uniqueidentifier 36
role st String (indexable) No No nvarchar 448
role street String (indexable) No No nvarchar 448
role telephoneNumber String (indexable) No No nvarchar 448

↑ Back to top

Portal Schema - Resources (Objects)

You can use the scroll bars to move right and / or down in the table.

System Name Display Name Description Resource ID
ActivityInformationConfiguration Activity Information Configuration This resource drives the appearance of an activity in FIM Portal. e1a42ced-6968-457c-b5c8-3f9a573295a6
Approval Approval   c51c9ef3-2de0-4d4e-b30b-c1a18e79c56e
ApprovalResponse Approval Response This is the response to an approval. 81d41a1e-567c-4146-bf17-2a83a97f2972
AttributeTypeDescription Attribute Type Description This describes an attribute type. dba523e6-9c17-406a-ad44-222222222222
BindingDescription Binding Description This resource describes the relationship between a resource type and an attribute type. dba523e6-9c17-406a-ad44-333333333333
msidmCompositeType CompositeType   8007bcdd-5e5e-4155-abda-91e2e86fdb3d
Configuration Configuration This is used for user to specify the configuration for each application. 280c867e-2c3c-4ca8-86a3-d51f5c03250f
ConstantSpecifier Constant Specifier This resource can be used by user to specify localized strings for FIM enumeration strings. 63701ba2-e9cf-435d-8583-07527aad2e05
msidmDataWarehouseBinding Data Warehouse Binding This resource describes a reporting binding object type. These objects are used to specify a mapping between FIM objects and attributes and their related classes and properties in the FIM reporting database. f7911e69-e9b5-4c54-bce6-e9ec90b59d1f
DetectedRuleEntry Detected Rule Entry This resources is created and added to Detected Rules List of a resource when the existence flows for a Synchronization Rule are confirmed to exist within the external system. 73c35052-5194-4ced-b254-8844e2329359
DomainConfiguration Domain Configuration Active Directory Domain configuration. e33699e3-6ba1-4406-8f20-82993f84eebb
EmailTemplate Email Template Templates for email generated by notification and approval activities. bfaa87c9-845e-486f-9d8e-23af4e3e55a6
ExpectedRuleEntry Expected Rule Entry This resource is created by the Synchronization Rule Activity, and represents a specific Synchronization Rule that is to be added to or removed from a target resource. aa8b886d-990c-40f8-8be5-57d2f898f325
FilterScope Filter Permission This resource identifies a list of attributes and members that are permitted to be included in the filter of a set or group. 9267c97a-1b5e-443b-bb06-c661fd8fd217
ForestConfiguration Forest Configuration Active Directory Forest and Trust configuration. 69f83edb-b10e-492c-b9cd-54f66bf670f8
Function Function This is a descriptor of a function used during transformations. 9485beb3-9833-4cf2-985b-0993bedc2a7e
GateRegistration Gate Registration This is a private resource type to keep track of password gate registration information. 5b510657-6d84-4c80-be4e-bb444d09eff3
Group Group   6774df80-faf5-4169-bedb-0124767a66ed
HomepageConfiguration Home Page Resource These resources drive the homepage appearance in FIM Portal. ba056189-f4d5-4c63-b53b-30469c0253c7
ma-data ma-data   a818a691-b33b-4210-a3d6-5e8844e4d5e3
ManagementPolicyRule Management Policy Rule   f4e15054-ac9a-4ade-b5c4-175a704da312
mv-data mv-data   698868f3-8ef6-43a4-8307-68d11435f001
NavigationBarConfiguration Navigation Bar Resource These resources drives the appearance of the navigation pane in FIM Portal. 29582c6b-7114-4703-a1f2-dd9f81941f76
msidmPamConfiguration PAM Configuration PAM Configuration Object 5acbdb31-4619-42a4-8fab-ded898106ffd
msidmPamRequest PAM Request PAM Request Object 29c7739a-43e7-4e3c-8e2f-529ad6d953fc
msidmPamRole PAM Role PAM Role Object 5de2fb81-5e4d-4054-9501-37e591e72d57
PortalUIConfiguration Portal Configuration This resource is used to store global portal configuration and the branding apperance in FIM Portal.There exists only one instance of this resource type in each FIM Portal deployment. 2f78843e-80e3-4251-8396-373ace535400
msidmReportingJob Reporting Job This resource describes a reporting job object type.These objects are used to store data about Reporting ETL processes that are occurring between FIM and the System Center Management Server. ce5a0793-b8f8-4223-80b8-8bcc8bc51d54
Request Request   176d385f-6fce-459d-80c6-6809703edbc7
msidmRequestContext Request Context This includes additional request context. 853cad04-3ffb-48f9-aaa9-5ec139cee19d
msidmRequestTargetDetail Request Target Detail This resource represents the target of a specific request.These objects are used by the Reporting ETL process to model requests in the Data Warehouse. dbc565c5-f2b6-49e5-830c-c1f8e60a073f
Resource Resource This is the base resource type. The attributes bound to this resource type appears in all resources. dba523e6-9c17-406a-ad44-000000000000
ObjectVisualizationConfiguration Resource Control Display Configuration This resource drives the detailed appearance of a resource in FIM Portal. 6935e8e0-1b26-4134-b7ba-ffb8656a6350
ObjectTypeDescription Resource Type Description This describes a resource type. dba523e6-9c17-406a-ad44-111111111111
SearchScopeConfiguration Search Scope This resource describes the scope within which a user look for a resource. e64a551d-7a0c-493f-b605-08414115014c
Set Set A collection of object references defined by a filter or selected manually. bac24b6c-31db-4661-9675-c79b8cf74e59
SupportedLocaleConfiguration Supported Locale This resource defines a list of supported languages in FIM Portal. There exists only one instance of this resource type in FIM Portal deployment. 240c59a6-a399-4219-83c6-2feb8df778af
SynchronizationFilter Synchronization Filter This resource defines a list of properties that can be synced on a certain resource type. a5c2dc46-701d-4bc5-b452-37196160f91a
SynchronizationRule Synchronization Rule This resource defines synchronization behavior between FIM resources and resources in external systems. d502531d-948b-40b3-9a4e-4a0c9e9b1364
msidmSystemConfiguration System Configuration Settings Common configuration settings across all FIM Service instances. dfc035b8-2051-4bd6-a9bf-f434e707b81a
SystemResourceRetentionConfiguration System Resource Retention Configuration This resource is used for controlling how long completed requests and workflow instances are retained before becoming available only through historical query. e62a4da1-bf08-4e31-a5e7-1eff01b2e25d
TimeZoneConfiguration Time Zone This resource defines a supported timezone in FIM Portal. 2b3f54f3-47d1-468b-90c9-30a5c08fe15f
Person User This resource defines applicable policies to manage incoming requests. 6cb7e506-b4b3-4901-8b8c-ff044f14e743
WorkflowDefinition Workflow Definition The declarative definition of a workflow available for execution during request processing. 50193587-8093-4e93-9162-dcdc11a80641
WorkflowInstance Workflow Instance A specific instance of a workflow definition that is, or has been, executed. bc48a2a0-a114-4325-9f2f-de7874756b43

 ↑ Back to top

Portal Schema - Attributes

You can use the scroll bars to move right and / or down in the table.

System Name Display Name Data Type Multivalued Description String pattern Resource ID Resource Type Usage Keyword Creator
AccountName Account Name Indexed string FALSE User's log on name ^[^"/\\[\]:;|=,+/*?<>]{1,64}$ 3e04bbbf-014f-413c-8d07-6276cd383be8 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ActionParameter Action Parameter Indexed string TRUE The attribute names the policy works for (used for READ/UPDATE action)   85f1c7b2-a910-4947-9ea0-d1686dd94bd1 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ActionType Action Type Indexed string TRUE String representing the action associated with the management policy rule (Create, Delete, Read, Add, Remove, Modify, Transition In, Transition Out)   88035713-8701-413b-890e-fb1b67e75e41 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ActionWorkflowInstance Action Workflow Instance Reference TRUE A reference to a workflow instance executed during the action phase of request processing.   04465efc-a55c-43a4-9302-f1a626bbbd52 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ActionWorkflowDefinition Action Workflows Reference TRUE These workflows are applied as part of the policy. Read operations do not trigger workflows.   080a0df8-cfe2-4417-b39a-b301373b6c69 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ActivityName Activity Name Indexed string FALSE The class name of the correspondent activity   09fe0d1d-294f-4670-bfbe-d50fd418a783 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AD_UserCannotChangePassword AD User Cannot Change Password Boolean FALSE Will sync from AD to track whether the user is locked out from changing their AD password ^(Create|Read|Insert|Remove|Update|Delete|Transition)$ 29988985-5988-41a4-9349-22bd8fc0093a AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
Address Address Indexed string FALSE     f2a28530-fcef-47e1-8aac-61e1d7b516e7 AttributeTypeDescription    
msidmSearchScopeAdvancedFilter Advanced Filter Unindexed string FALSE A fully-formed search string with search term tokens that the search scope will execute.   f10f28e0-8e28-4b98-a7a9-263d367485c4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AllowedAttributes Allowed Attributes Reference TRUE Select the attributes permitted in the filter definition.   68c270fa-3b93-4393-9435-02b00db03f12 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AllowedMembershipReferences Allowed Membership References Reference TRUE Select a collection of groups or sets for which a filter may reference the members.   9c4df473-3f34-455c-ae88-0826011b677b AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AppliesToCreate Applies to Create Boolean FALSE The configuration applies to create mode of the target resource type   e113b8c8-5dee-4175-bf72-f717b824e833 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AppliesToEdit Applies to Edit Boolean FALSE The configuration applies to edit mode of the target resource type   c6d13a78-53d7-42ad-8735-07d5cf37407e AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AppliesToView Applies to View Boolean FALSE The configuration applies to view mode of the target resource type   cb65885b-4b02-4ad3-b477-ce150f1ea915 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Approval Approval Reference FALSE     37b40c9a-4cc5-42fa-b19a-bd1595831186 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ApprovalDuration Approval Duration Datetime FALSE     719476c5-aeb3-4306-8c41-cbe17ed49c5d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamIsRoleApprovalNeeded Approval required Boolean FALSE Indicates if the elevation to this role has to be approved.   1f483c2b-6e98-4cb4-8c14-30d6db27978d AttributeTypeDescription    
ApprovalResponse Approval Response Reference TRUE This is a reference type to ApprovalResponse resource   dad0b4d3-b199-4cef-87e0-6e2a915e2e58 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ApprovalStatus Approval Status Indexed string FALSE   ^(Pending|Approved|Rejected|Expired)$ da7adf58-d769-48bf-b8c0-2225d1dca3e8 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ApprovalThreshold Approval Threshold Integer FALSE     775a4d9d-7d87-49ed-a612-c4db117bda5f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Approver Approver Reference TRUE The set of approvers.   2849e58d-b587-4b2f-884d-fea3ea3a1503 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Assembly Assembly Indexed string FALSE The library in which to find functions.   2dbb5b0f-6c16-4290-8e73-d6418e2ae4e9 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AssemblyName Assembly Name Indexed string FALSE The assembly where the activity settings part is defined   5eb9b506-86d1-4455-bfb1-466dbb01f875 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Assistant Assistant Reference FALSE     df1b9fa9-8398-4b8a-a227-da88146badf0 AttributeTypeDescription    
SearchScopeColumn Attribute Indexed string FALSE System name (case sensitive) of the type of attribute to be shown in search results.   54936435-5deb-49e2-84f8-2084bd35d433 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Required Attribute Is Required Boolean FALSE     59464df8-3067-433e-bd4b-986f06af25e7 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmAttributeName Attribute Name Indexed string FALSE This attribute defines the name of the attribute being modified on the specified target object.This attribute comes from the request parameters of the parent request.   bbcbdf1d-fbc7-4669-a5d0-a43c946647db AttributeTypeDescription    
SearchScopeColumn Attribute Searched Indexed string TRUE System name (case sensitive) of the attributes that will be used to match against the search string supplied by the user.   681af98b-6094-49dd-8536-2c07aebc9c4f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
BoundAttributeType Attribute Type Reference FALSE The binding's attribute type   54ccb308-7cc9-451e-a952-0f071e95c917 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmAttributeTypeID Attribute Type ID Reference FALSE This attribute defines the ID used to differentiate attribute types in the Data Warehouse for use in searching and filtering.   ea677d7f-96d9-4f0a-9861-7d8017cbd10b AttributeTypeDescription    
msidmAttributeTypeKey Attribute Type Key Integer FALSE This attribute defines the key used to differentiate attribute type in the Data Warehouse for use in searching and filtering.   dbcb05b4-5af9-4bd5-8681-c98d6502d398 AttributeTypeDescription    
msidmAttributeValue Attribute Value Unindexed string FALSE This attribute defines the value of the attribute being modified on the specified target object.This attribute comes from the request parameters of the parent request.   1422247a-7467-40d2-a64e-4ee10751fd29 AttributeTypeDescription    
AuthenticationWorkflowInstance Authentication Workflow Instance Reference TRUE A reference to a workflow instance executed during the authentication phase of request processing.   23773893-79a3-4acd-b3c5-0708f58b40f9 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AuthenticationWorkflowDefinition Authentication Workflows Reference TRUE These workflows will not be applied to Requests created by the Built-in Synchronization Account or Forefront Identity Manager Workflow Activities. Read operations do not trigger workflows.   fbeec2c3-2cb0-434b-8500-5d865e57251c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AuthNWFLockedOut AuthN Workflow Locked Out Reference TRUE This is the list of AuthN Processes a user is locked out of   a44b310f-190c-40f9-8307-0e5777e3f741 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
AuthNWFRegistered AuthN Workflow Registered Reference TRUE This is the list of AuthN Processes a user is registered for   0f91f56e-6510-4195-9c17-7b11560edcf0 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
AuthorizationWorkflowInstance Authorization Workflow Instance Reference TRUE A reference to a workflow instance executed during the authorization phase of request processing.   bcdfa59d-4e0b-4d4e-b60b-dd12b2a15d22 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AuthorizationWorkflowDefinition Authorization Workflows Reference TRUE These workflows will not be applied to Requests created by the Built-in Synchronization Account or Forefront Identity Manager Workflow Activities. Read operations do not trigger workflows.   7879912d-aec6-4954-9eae-2485f6b664c1 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamRoleAvailabilityWindowEnabled Availability Window Enabled Boolean FALSE A boolean value that specifies if availability window is enabled for a PAM role.   790e3752-2282-46bf-93b8-a2420a14be1e AttributeTypeDescription    
EmailBody Body Unindexed string FALSE This is the body of the e-mail. E-mails are sent as HTML and can include HTML tags if needed, e.g. br will provide a line break.   f81486a3-e813-43c4-b149-dfc1dee94f0e AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
BrandingCenterText Branding Center Text Indexed string FALSE The centered branding text that used by branding control   f1b5b955-fe30-4d45-834b-2b2fb4095381 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
BrandingLeftImage Branding Left Image Indexed string FALSE The left url image that is used by branding control   6618a104-8e54-45ab-8ed7-facdbea1c137 AttributeTypeDescription    
BrandingRightImage Branding Right Image Indexed string FALSE The right url image that used by branding control   4dc25855-acd2-451d-b9a6-2c8298b798bc AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
City City Indexed string FALSE     0c89fc1b-0277-40b9-a3e6-9fefc6ca941e AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
ClearRegistration Clear Registration Boolean FALSE Modifying this attribute will clear the associated user registration data of this workflow   77856d7e-e15c-48d7-ae31-d704d3355bb5 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
CommittedTime Committed Time Datetime FALSE     c79a520a-8829-4e8d-881d-85106a659482 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Company Company Indexed string FALSE     93d6fff0-471f-4aa2-9e71-eec04441cdca AttributeTypeDescription    
msidmCompletedTime Completed Time Datetime FALSE The time at which an action has reached its final status.   6867e310-99c7-4f68-8e19-6ff3acb06164 AttributeTypeDescription    
ComputedActor Computed Actor Reference TRUE This attribute is intended to be used to setup rights as appropriate.   d30313b9-373f-44be-9193-b141efaf63e9 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ComputedMember Computed Member Reference TRUE Resources in the set that are computed from the membership filter   a6962149-c8db-47d8-ad4e-780d94c10795 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ConfigurationData Configuration Data Unindexed string FALSE It is a configurationData type.   b540d122-96ad-4231-9aed-f1d81d1704cb AttributeTypeDescription    
Connector Connector Indexed string FALSE The resource id of the connector space resource that this DRE was created for.   ea11f32e-ff73-4d8c-b497-55aca16ee988 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ConstantValueKey Constant Value Key Indexed string FALSE It is a the constant key value.   1150a08e-f38d-467b-8a9b-5a08643c0383 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ContactSet Contact Set Reference FALSE A reference to a set of all mail-enabled resources whose primary Active Directory resource does not reside in the Forest and therefore require a Contact in this Forest.   6d859105-9068-4c20-9fd1-cd549b5e6dbf AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
CostCenter Cost Center Indexed string FALSE     c7b905ba-bc2b-4e67-9759-88e58d5f5d57 AttributeTypeDescription    
CostCenterName Cost Center Name Indexed string FALSE     44c2ba14-9106-43f1-ac9e-b860d0769df3 AttributeTypeDescription    
Country Country/Region Indexed string FALSE     c3a508ca-2f87-4b62-a130-1e080f1828a2 AttributeTypeDescription    
msidmCreateCriteriaBasedGroupsAsDeferredByDefault Create Criteria-based Groups as Deferred By Default Boolean FALSE If this setting is set to true then any criteria-based group that will be created in the system while it is true will be marked for deferred evaluation.   198de566-53c1-4864-8704-d78bdf00070a AttributeTypeDescription    
CreateConnectedSystemObject Create External System Resource Boolean FALSE Indicates if an external system resource is created if the relationship criteria is not met.   69dc8a50-3508-4a6e-8cb8-738f7905b708 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
CreateILMObject Create FIM Resource Boolean FALSE Indicates if a resource should be created in FIM if the relationship criteria is not met.   c1508001-380d-4ee2-bad5-03d239282aa4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
CreatedTime Created Time Datetime FALSE The time when the resource is created in the FIM service database. This attribute is assigned its value by the FIM service. It cannot be modified by any user.   194cd907-6bb7-473b-9581-4ba332234827 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamRequestCreationMethod CreationMethod Indexed string FALSE Indicates PAM Request creation method: PowerShell or Rest API   e2152150-78d0-4c7e-a283-eb8f069edf78 AttributeTypeDescription    
Creator Creator Reference FALSE This is a reference attribute that refers to the resource that directly created the resource in the FIM service database. This attribute is assigned its value by the FIM service. It cannot be modified by any user.   d6c0457f-d0ed-497b-b52a-e94f49f35c06 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
FlowType Data Flow Direction Integer FALSE A Synchronization Rule can be defined as inbound (0), outbound (1) or bi-directional (2).   3863c309-5c0f-4ec0-a8e7-c56ed9f8df03 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DataType Data Type Indexed string FALSE   ^(Binary|Boolean|DateTime|Integer|Reference|String|Text)$ 73c26865-473a-48c8-8c59-b6d33d16998a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmDataWarehouseBindingIdentity Data Warehouse Binding Identity Indexed string FALSE This attribute defines the name of a reporting binding object.   b92124ea-4a66-404f-9df3-51c6d0cbd4c6 AttributeTypeDescription    
msidmDataWarehouseMapping Data Warehouse Mapping Unindexed string FALSE This attribute defines a mapping between FIM objects and attributes and their related classes and properties in the FIM reporting database.   1bf951ff-17fe-464b-b2d4-08bd6d055a83 AttributeTypeDescription    
Decision Decision Indexed string FALSE   ^(Approved|Rejected)$ c995713f-4a99-4b43-b58e-64492b562445 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmDeferredEvaluation Deferred Evaluation Boolean FALSE Determines when evaluation of the group happens with respect to request processing - real-time or deferred.   35c27ca4-3925-468e-8e10-e68b5882b6b4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DeletedTime Deleted Time Datetime FALSE The time when the current resource is deleted from the FIM service database. This attribute is assigned its value by the FIM service. It cannot be modified by any user.   eccde56e-0f47-4bd6-bb65-f0b5ecb4d2df AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Department Department Indexed string FALSE     5399a6e8-ec8e-476a-8267-efeb502267f6 AttributeTypeDescription    
Dependency Dependency Reference FALSE A Synchronization Rule that must be applied to a resource before this Synchronization Rule can be applied.   a65e77b4-d89c-4af8-92b9-531bf1c32f9c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Description Description Indexed string FALSE     c66a012e-72af-46c3-b95b-c2779c6bcd3f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DetectedRulesList Detected Rules List Reference TRUE The synchronization rules detected for resources in external systems.   c851725e-3201-42b0-adb5-6f49e166ad3c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Disabled Disabled Boolean FALSE Determines if resource is disabled or enabled   e7fddbc2-919c-4ebe-b909-97c9048afd90 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DisconnectConnectedSystemObject Disconnect External System Resource Boolean FALSE This option applies when this Synchronization Rule is removed from a resource in FIM.   9c79ecd4-2102-496d-aa34-786595ba8fa6 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DisplayName Display Name Indexed string FALSE     7dcc83b6-8be7-4717-a1ac-62b0b1b7ce29 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DisplayedOwner Displayed Owner Reference FALSE     15c50153-ea0a-48cb-b140-ed5f93a73b49 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DistributionListDomain Distribution Group Domain Reference FALSE Specifies the domain in which a DG will be created, for DGs created by users in that forest.   0b7ba89b-3646-48dd-ab74-452f774ee736 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Domain Domain Indexed string FALSE Choose the domain where you want to create the user account for this user   da0212dc-9f78-483f-a318-5ac275175530 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
DomainConfiguration Domain Configuration Reference FALSE A reference to a the parent Domain resource for this resource.   0570d290-f66c-4c06-9e2f-7f97161fe234 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmElement Element Reference TRUE     10e0828e-b4ec-482a-ae7e-9457e33d813e AttributeTypeDescription    
msidmPamRequestElevatedUserSid ElevatedUserSid Indexed string FALSE The SID of the user account to which access was granted by this request   aabcab69-e52f-4045-b7e4-96f6cb4539e3 AttributeTypeDescription    
Email E-mail Indexed string FALSE Primary e-mail address for the user   ba33a27e-a0f1-49dd-8652-9f648b168f6e AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
MailNickname E-mail Alias Indexed string FALSE E-mail alias. It is used to create the e-mail address ^(?=[^\.])+(?!.*(\.)\1+.*)+(?=.*[^\.]$)+[?=!#%&'=`~\$\*\+\-\/\?\^\{\|\}a-zA-Z0-9_\u00A1-\u00FF\.]{1,64}$ 1b364ece-d609-461f-a365-9b3ebfb6ba16 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
EmployeeEndDate Employee End Date Datetime FALSE     5e65f04d-8ab7-4f70-b91b-052be33c343b AttributeTypeDescription    
EmployeeID Employee ID Indexed string FALSE     ce497121-8d0b-4f1f-9cb0-4c1324496163 AttributeTypeDescription    
EmployeeStartDate Employee Start Date Datetime FALSE     9d2bafbe-d619-4c9e-87f2-760a7ec181bf AttributeTypeDescription    
EmployeeType Employee Type Indexed string FALSE   ^(Contractor|Intern|Full Time Employee)?$ a742d99f-8f40-41ca-b0b1-f68879a82a83 AttributeTypeDescription    
EndpointAddress Endpoint Address Indexed string TRUE The endpoint address on which a workflow instance is listening.   ad08a089-d799-4b8e-8ec4-89c746768664 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ExistenceTest Existence Test Unindexed string TRUE Outbound attribute flows within a transformation marked as an existence tests for the Synchronization Rule.   12a0aa52-f366-4154-95f8-3b4942f50f1f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ExpectedRuleEntryAction Expected Rule Entry Action Indexed string FALSE Indicates whether to apply or stop applying a sync rule. ^(Add|Remove)$ 3f5a00b1-fbae-4252-88d3-dcf7edf8b449 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ExpectedRulesList Expected Rules List Reference TRUE This resource has been added to these Synchronization Rules and will be manifested in external systems according to the Synchronization Rule definitions.   0b28567e-f97e-42d8-8aa3-c73cdc4087c9 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ExpirationTime Expiration Time Datetime FALSE The date and time when the resource expires. The appropriate Management Policy Rule will delete the resource when the current date and time is later than the date and time specified in this attribute.   1bbba958-4aa1-4752-8443-076e4c8ed04c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamRequestExpirationProcessedState ExpirationProcessState Indexed string FALSE Indicates the state of the action of the expiration of the PAM Request that was processed by the server ^(Handled|NotHandled|HandledWithWarning|HandledWithError)$ 593fb1be-a206-42ec-ab1e-2d3ddb941215 AttributeTypeDescription    
msidmPamRequestExpirationStatusInfo ExpirationProcessStatusInfo Indexed string FALSE Provides additional information to the Expiration process of the PAM Request   53097cd7-4186-49c3-94a4-386a9b05cbc3 AttributeTypeDescription    
ConnectedSystem External System Indexed string FALSE The Management Agent identifying the external system this Synchronization Rule will operate on.   6444efb5-1ccf-45dc-9e95-38cad9e6535a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ConnectedObjectType External System Resource Type Indexed string FALSE The resource type in the external system that this Synchronization Rule applies to.   4970cd48-a8f9-465d-bb4c-c2559a287819 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ConnectedSystemScope External System Scoping Filter Unindexed string FALSE A filter representing the resources on the external system that the rule applies to.   1c95ea87-febc-41ba-8c84-eb5fa9060ec8 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
OfficeFax Fax Indexed string FALSE     ab23f0ab-3cd0-4651-b70f-0f7414e9e8d4 AttributeTypeDescription    
Filter Filter Unindexed string FALSE A predicate defining a subset of the resources.   43d86477-dc6d-4d28-a339-a7c322a06fe4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ILMObjectType FIM Resource Type Indexed string FALSE The resource type in the FIM Metaverse that this Synchronization Rule applies to.   87f7b4d7-eca8-414a-9c47-c1d86f1285e4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
FirstName First Name Indexed string FALSE     58650157-dd41-4507-8c5b-fc412ed09587 AttributeTypeDescription    
ForeignSecurityPrincipalSet Foreign Security Principal Set Reference FALSE A reference to a set of all security resources whose primary Active Directory resource does not reside in the Forest and therefore require a Foreign Security Principal in this Forest.   028854f0-d492-45e0-9951-a2418e4dc740 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ForestConfiguration Forest Configuration Reference FALSE A reference to a the parent Forest resource for this Domain.   a18c9d0c-2bdb-4843-b484-65fca7105baa AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
FreezeCount Freeze Count Integer FALSE     92f7c54a-a446-45e9-b042-3e663611f1cc AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
FreezeLevel Freeze Level Indexed string FALSE Tracks the number of times the user has unsuccessfully attempted to run an AuthN WF   d119290b-df3d-4674-a794-4b30c028cee3 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
FunctionName Function Name Indexed string FALSE The name of the function.   9bb52445-8718-4eae-9654-5412646edf1d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
GateData Gate Data Binary FALSE     ff9d22ce-a3dd-43e6-bdd6-2c0b97b3bc53 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
GateID Gate ID Indexed string FALSE     8f63f1d8-bf84-40f2-a557-764768c84e40 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
GateTypeID Gate Type Indexed string FALSE     4025cfd6-1fd1-450f-93e5-22da3cc1078e AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
UICacheTime Global Cache Duration Integer FALSE This time how long the UI configuration element will be kept on the cache   419d9e98-5272-4f2a-886d-bf457da7547c AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
GrantRight Grant Right Boolean FALSE     6db5d53c-411e-4f11-a4ca-8eb45ead5b9a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamRequestGroupSidList GroupSidList Indexed string TRUE The list of AD groups to which access was granted by this request   7a07e1f0-e1c5-44ae-a868-8360f0aee7ac AttributeTypeDescription    
HasCollateralRequest Has Collateral Request Boolean FALSE This request requires action workflows to be run on alternate targets and must wait for these collateral requests to finish before it can be completed.   15330b6d-93fb-4ad4-9e55-782f1dad0ce4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ImageUrl Image Url Indexed string FALSE Image url for the a given element.   21af66fa-2dbc-489d-af21-ec13993ad158 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
InitialFlow Initial Flow Unindexed string TRUE A series of outbound flows between FIM and external systems.These flows are only executed upon creation of a new resource.   f6c1a1ad-4fe6-4a14-b3de-fb6c27e26528 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IntegerMaximum Integer Maximum Integer FALSE For an Integer attribute, this is the maximum value, inclusive.   a6a1761b-72a8-4e4c-b12e-d00e25ab82a2 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IntegerMinimum Integer Minimum Integer FALSE For an Integer attribute, this is the minimum value, inclusive.   712cf433-2918-486b-a2b9-5a93719c20d1 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IsActionActivity Is Action Activity Boolean FALSE This is an indication that this activity could be put into an action process   d9735b18-649d-4ee9-b1f8-eb578e4ae532 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IsAuthenticationActivity Is Authentication Activity Boolean FALSE This is an indication that this activity could be put into an authentication process   ab2dc728-4b52-47ea-9a9f-e440646397d4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IsAuthorizationActivity Is Authorization Activity Boolean FALSE This is an indication that this activity could be put into an authorization process   d41c2968-93db-4460-a196-d03e22320a45 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IsConfigurationType Is Configuration Type Boolean FALSE This is an indication that this resource is a configuration resource.   95a8a0bc-b3bb-48af-a176-2d725c59d735 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmIsReference Is Reference Integer FALSE Describes whether the underlying attribute value in a request target detail object is a reference or not.   8c1823bc-8e09-44a0-800a-3fe8b55d0274 AttributeTypeDescription    
JobTitle Job Title Indexed string FALSE     2b57ca23-0967-45aa-a2a8-d1707aa00a12 AttributeTypeDescription    
LastName Last Name Indexed string FALSE     843df943-b828-49fd-88da-c4ad8567147c AttributeTypeDescription    
LastResetAttemptTime Last Reset Attempt Time Datetime FALSE     31529fe6-2226-475c-9188-8229fbfb4c76 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
ListViewCacheTimeOut ListView Cache Time Out Integer FALSE Specify the amount of time for the ListView cache to time out and expire.   0ead4e83-918e-4d76-9e9c-18f853051cef AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
ListViewPageSize ListView Items per Page Integer FALSE Specify the number of items to show per page in all ListViews.   d344081b-bfa9-4967-bd86-8920a46f20b1 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
ListViewPagesToCache ListView Pages to Cache Integer FALSE Specify the number of pages to cache while retrieving ListView results.   8fcd419e-b96b-4707-8e0b-1e00cbae3a0c AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
Locale Locale Indexed string FALSE The region and language for which the representation of a resource has been adapted.   c33d5c8c-f62f-475f-87aa-9ace534deca2 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Localizable Localizable Boolean FALSE A true indicates this attribute can be localized. Only allowed for String DataTypes.   fbbf17e9-3f84-4ce3-8783-930261434b59 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
AuthNLockoutRegistrationID Lockout Gate Registration Data Ids Reference TRUE This is the list of gate registration ids used by the lockout gate   a9c1fb53-0fac-4df7-bab0-f63ec88fcd8b AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
LoginName Login Name Indexed string FALSE This is a combination for domain/Alias   6d3ed886-4d09-4b8c-997a-63dc43a6081d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ManagementAgentID Management Agent ID Reference FALSE Description: The Management Agent identifying the external system this Synchronization Rule will operate on.   da03c635-bef1-4425-8af3-8f17db62271c AttributeTypeDescription   7fb2b853-24f0-4498-9534-4e10589723c4
ManagementPolicy Management Policy Rule Reference TRUE A reference to a management policy resource triggered by a request.   f8d3457a-ce54-4dc4-8e5a-4e8cd61dfd4d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ManagementPolicyRuleType Management Policy Rule Type Indexed string FALSE Indicates the type of this policy rule. ^(Request|SetTransition)$ ad77a9ed-688a-4270-b3cc-7d429e7df1c3 AttributeTypeDescription Microsoft.ResourceManagement.WebServices 7fb2b853-24f0-4498-9534-4e10589723c4
Manager Manager Reference FALSE     b64c4c60-2601-43d4-8c70-2cf2c0c91ddf AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
ExplicitMember Manually-managed Membership Reference TRUE     604484e7-8745-4667-8680-e4b501ad131a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
MembershipAddWorkflow Membership Add Workflow Indexed string FALSE   ^(None|Custom|Owner Approval)?$ fe182ad0-60c3-46ff-afb9-366b87811a25 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
MembershipLocked Membership Locked Boolean FALSE     bc20a9a5-8c99-4edc-bcf3-1f7462ea8ead AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamRoleMfaEnabled MFA Enabled Boolean FALSE A boolean value that specifies if MFA is enabled for a PAM role.   4d4e58bc-96ac-4c4f-98cd-eb491589e917 AttributeTypeDescription    
msidmMFAPINCode MFA PIN Code Indexed string FALSE The PIN code that should be used during Multi-Factor Authentication process   17a248fd-406f-480c-bab2-2f4598e58589 AttributeTypeDescription    
MiddleName Middle Name Indexed string FALSE     a71e8335-0bc5-4739-9ba2-4474804161ab AttributeTypeDescription    
MobilePhone Mobile Phone Indexed string FALSE     bc2faf35-885b-41e0-84a6-48270a2a5465 AttributeTypeDescription    
msidmMode Mode Indexed string FALSE This attribute defines the mode of the update occurring on the specified target object.This attribute comes from the request parameters of the parent request.   fed7b4cb-0d23-4473-adea-c08610acf86f AttributeTypeDescription    
Multivalued Multivalued Boolean FALSE     83aeb95d-5793-47c5-97c8-967dec87ebc9 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
MVObjectID MV Resource ID Indexed string FALSE The GUID of an entry in the FIM metaverse corresponding to this resource.   70e9424e-7700-42e1-8da3-fbe72357cc1c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Name Name Indexed string FALSE   ^[(a-z)(A-Z)(_)(:)][(a-z)(A-Z)(0-9)(\-)(.)(_)(:)]*$ f059c901-a968-4df8-862d-6dc36997a8ab AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Namespace Namespace Indexed string FALSE The namespace where the function resides.   81901366-0723-4323-9717-5f1378b32cab AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
UICountCacheTime Navigation Bar Resource Count Cache Duration Integer FALSE This time how long the UI dynamic counts will stay on the cache before it expired   37de3ea3-3ba5-46bd-b879-5074a824d4d7 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
NavigationPage Navigation Page Indexed string FALSE     4ccae28b-afd6-47a3-9057-e959c8e97c81 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
NavigationUrl Navigation Url Indexed string FALSE URL for navigation when user clicks this item.   8d8aa769-e6f1-4c7e-a588-0bb1e4e014c2 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
OfficeLocation Office Location Indexed string FALSE     078977c0-221e-4561-a5d7-56051538cbac AttributeTypeDescription    
OfficePhone Office Phone Indexed string FALSE     85522959-4d96-41be-a242-352ee89df15f AttributeTypeDescription    
msidmOneTimePasswordEmailAddress One-Time Password Email Address Indexed string FALSE Email address used to deliver a one-time password to the user. ^.+@[^\.].*\.[a-zA-Z]{2,}$ 654e350d-dee5-4239-b746-88405c28fdfd AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmOneTimePasswordMobilePhone One-Time Password Mobile Phone Indexed string FALSE Mobile phone number used to deliver a one-time password to the user. ^[0-9\(\)\-\+' ']+$ 3ffb8a94-3f99-4fab-a447-ef6e46c1e611 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Operation Operation Indexed string FALSE   ^(Create|Get|Put|Delete|Enumerate|Pull|SystemEvent)$ bac5c452-88fc-4ed7-8720-bb966a4fbcf4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Order Order Integer FALSE Precedence of this item within a parent grouping   c34b34d6-ac91-4ef4-8ee7-04348dc2e604 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
msidmOutboundIsFilterBased Outbound Scope Filter Based Boolean FALSE Determines how the synchronization rule is applied to existing resources.   3f41af47-3818-49bc-8d39-a05740009ec7 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmOutboundScopingFilters Outbound Scoping Filters Unindexed string FALSE A filter representing the resources on the FIM metaverse that the rule applies to.   b072b390-5a12-46ff-9275-c8cd622e87fc AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Owner Owner Reference TRUE     369a2f34-bc55-43c9-a7b5-807f56295919 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPamCandidates PAM Candidates Reference TRUE PAM Candidates   a050422e-6d3b-492f-a7ba-814cedc7327f AttributeTypeDescription    
msidmPamForestFunctionality PAM Configuration Forest Functionality Indexed string FALSE PAM Configuration Forest Functionality ^(DS_BEHAVIOR_WIN2000|DS_BEHAVIOR_WIN2003_WITH_MIXED_DOMAINS|DS_BEHAVIOR_WIN2003|DS_BEHAVIOR_WIN2008|DS_BEHAVIOR_WIN2008R2|DS_BEHAVIOR_WIN2012|DS_BEHAVIOR_WIN2012R2|DS_BEHAVIOR_WIN2015)$ 7b812947-e1f9-453c-8b64-995f51e0fd3f AttributeTypeDescription    
msidmPamPrivUserPrefix PAM Configuration Priv User Prefix Indexed string FALSE PAM Configuration Priv User Prefix   615ed1a6-eef8-4054-9b54-eb147ab5e8bc AttributeTypeDescription    
msidmPamRequestExpirationInDays PAM Configuration Request Expiration In Days Integer FALSE PAM Configuration Request Expiration In Days   63e30847-1a74-48e5-a828-3114482b72b1 AttributeTypeDescription    
msidmPamRoleDefaultDurationInSeconds PAM Configuration Role Default Duration In Seconds Integer FALSE PAM Configuration Role Default Duration In Seconds   15a977f3-3cda-4ba0-a708-dda12489f059 AttributeTypeDescription    
msidmPamRoleMaximalDurationInSeconds PAM Configuration Role Maximal Duration In Seconds Integer FALSE PAM Configuration Role Maximal Duration In Seconds   a1076ceb-e666-4fee-9699-94d822526e29 AttributeTypeDescription    
msidmPamRoleMinimalDurationInSeconds PAM Configuration Role Minimal Duration In Seconds Integer FALSE PAM Configuration Role Minimal Duration In Seconds   45fcf408-1364-4399-a1fe-05ecf3b5fac0 AttributeTypeDescription    
msidmPamUserAdminPasswordLength PAM Configuration User Admin Password Length Integer FALSE PAM Configuration User Admin Password Length   02f7ce36-b7ba-487f-8179-2145ea9d907a AttributeTypeDescription    
msidmDefaultADContainer PAM Default Active Directory Container Indexed string FALSE PAM Default Active Directory Container   3acd5017-f327-41a6-b306-64dcb027792f AttributeTypeDescription    
msidmPamEnabled PAM Enabled Boolean FALSE A boolean value that specifies if a Group is enabled for PAM.   0513334c-af5d-48f8-8120-3acd21e27106 AttributeTypeDescription    
msidmPamSourceDomainName PAM Group Source Domain Name Indexed string FALSE The Source domain of a PAM group.   02460b98-d2f2-4d1e-b5e9-ae63bd7f2808 AttributeTypeDescription    
msidmPamSourceSid PAM Group Source SID Binary FALSE A binary value that specifies the Source security identifier (SID) of a PAM Group. The SID is a unique value used to identify the group as a security principal.   4f5be149-e498-48bc-8a0e-447a2ab3979b AttributeTypeDescription    
msidmPamLinkedUser PAM Linked User Reference FALSE The user identity used by PAM request   43d97cf8-3558-4a00-942d-05abab8df007 AttributeTypeDescription    
msidmPamPrivileges PAM Privileges Reference TRUE PAM Privileges   d0947713-fd6c-49a4-bea7-4f793f3a413f AttributeTypeDescription    
msidmPamRequestExpirationDate PAM Request Expiration Date Datetime FALSE PAM request expiration date and time   6ef65244-eb87-47e5-a3ca-5ac41c4ddec4 AttributeTypeDescription    
msidmPamRequestRole PAM Request Role Reference FALSE PAM Role Request   3e149a10-f585-4237-b4c0-ae414dafa9ca AttributeTypeDescription    
msidmPamRequestTime PAM Request Time Datetime FALSE The date and time that the PAM User requested   127c8bbf-f4f1-4b5e-aae4-92431e4fa0c3 AttributeTypeDescription    
msidmPamRequestWasClosed PAM Request Was Closed Boolean FALSE Indicates whether the PAM request was closed   beeeb379-0d70-4efd-bdfa-d3abf61bbca8 AttributeTypeDescription    
msidmPamRoleAvailableFrom PAM role available from Datetime FALSE PAM role lower bound of the availability time window   cd81f3f7-efad-428d-b1fd-383f3b8df3b2 AttributeTypeDescription    
msidmPamRoleAvailableTo PAM role available to Datetime FALSE PAM role upper bound of the availability time window   239ab5e8-97b9-4978-a8eb-cdc4155015b2 AttributeTypeDescription    
msidmPamRoleTTL PAM Role TTL(sec) Integer FALSE The maximum time(sec) for a member to be in the role.   0813913a-993b-4556-a200-d3012f109e74 AttributeTypeDescription    
msidmPamSourceGroupName PAM Source Group Name Indexed string FALSE The name of the group that is shadowed by this group.   8c51d52d-9372-41f2-95eb-79fc44715d34 AttributeTypeDescription    
msidmPamRequestTTL PAMRequest TTL Integer FALSE The TTL that the PAM User requested. Might be smaller than the role's TTL.   8e9721c0-acf7-4229-be78-53ebe47d5577 AttributeTypeDescription    
FunctionParameters Parameters List Indexed string FALSE Contains the list of parameters a function takes as input.   dc4c6143-2785-483e-b8af-f32cefde9a09 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ParentOrder Parent Order Integer FALSE Parent order attribute is used to group child elements with that number   75d090b3-8f18-4bdf-a271-71e37a99e00a AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
ParentRequest Parent Request Reference FALSE The Request that created this Request.If this Request was not created by a workflow, this attribute will not have a value.   a061a320-32d5-47bc-9090-86b1eeb9f353 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
UIUserCacheTime Per User Cache Duration Integer FALSE This time for how long the UI user data will stay on the cache before it expired   b22e417e-6a07-46d0-ad80-cc9c59901941 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
PersistentFlow Persistent Flow Unindexed string TRUE A series of attribute flow definitions.   52d0773e-10ac-4f15-8816-0b50bf5d5ec0 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmPhoneGatePhoneNumber Phone Gate Phone Number Indexed string FALSE Phone number used to Phone Gate Authentication. ^[0-9\(\)\-\+' ']+$ 8330a2ae-d4f6-4804-8549-5cfcefd7882d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Photo Photo Binary FALSE     f35e21ba-f5f2-46b2-9d5a-2c6a116fcf5f AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
PostalCode Postal Code Indexed string FALSE     d351e488-2340-427d-953f-adfcd3d590e8 AttributeTypeDescription    
Precedence Precedence Integer FALSE A number indicating the Synchronization Rule's precedence relative to all other Synchronization Rules that apply to the same external system. A smaller number represents a higher precedence.   344a872a-9b42-423d-a81b-5b235e8eff4c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
PrincipalSet Principal Set Reference FALSE Reference to the set the principal resource should belongs to.   1200a345-8a3e-40da-b5a6-81aa940a87ba AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
PrincipalRelativeToResource Principal Set Relative To Resource Indexed string FALSE     52e8f8e7-e41c-44bf-8444-43fddbd20b78 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ProxyAddressCollection Proxy Address Collection Indexed string TRUE     abfdace8-656d-4fe3-8186-2ca0d030b908 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
IsRASEnabled RAS Access Permission Boolean FALSE     e83e5d26-9e71-4b6c-88ec-b5623de2185e AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
Reason Reason Indexed string FALSE     0970cebd-4ae6-442b-8d56-af48e1bea4df AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SearchScopeTargetURL Redirecting URL Indexed string FALSE Relative path for the page where search results are to be show for searches from the home page.   f2298403-f9f5-4aa1-adfb-68834f544f67 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
Region Region Integer FALSE Specifies where the item will be shown in the UI.   a79cd603-1b7d-4858-882b-ef91bbbacfee AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
Register Register Boolean FALSE     9c9585a6-be53-43bb-ae4e-d818d6553e3a AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
RegistrationRequired Registration Required Boolean FALSE Tracks if the user must register for SSPR   40e84b9b-95f6-41c9-a6fd-cf8611785a5b AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
RelationshipCriteria Relationship Criteria Indexed string FALSE Defines how a relationship between a resource in FIM and a resource in an external system is detected   cdde9675-2955-4ff6-9fb4-8721dc62548d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmReportingJobDetails Reporting Job Details Unindexed string FALSE This attribute defines the operational information associated with a reporting job.   22e82c0b-3add-4c7e-84dd-acae9cdde472 AttributeTypeDescription    
msidmReportingJobStatus Reporting Job Status Indexed string FALSE This attribute defines the status of a reporting job. ^(Completed|Error|NotRunning|Running)$ 2e52a6d4-a684-4fd2-8fd3-7790786c32e7 AttributeTypeDescription    
msidmReportingJobType Reporting Job Type Indexed string FALSE This attribute defines the type of reporting job being represented by a reporting job object. ^(Initial|Incremental|InitialPartial|ResumeInitial|ResumeInitialPartial)$ 503c9a99-075b-48df-8123-355ef75d9910 AttributeTypeDescription    
msidmReportingLoggingEnabled Reporting Logging Enabled Boolean FALSE This attribute controls whether service activity is logged for reporting purposes.   5f951897-ecf2-45f0-8201-1d6dd55c5f18 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Request Request Reference FALSE The Request associated with the given Approval.   bde47c24-a188-4993-9dec-93574b350070 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmRequestContext Request Context Reference FALSE This includes additional request context.   57f051d7-3468-41a1-bf25-af990b1a18c0 AttributeTypeDescription    
RequestControl Request Control Indexed string FALSE Used to alter normal processing of a Request. ^(CancelOperation|CancelActionWorkflow)$ d7178e58-fea2-4134-ba66-dfd53b093167 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmRequestMaximumActiveDuration Request Maximum Active Duration Integer FALSE Requests that exceed this duration before reaching a final state will be automatically canceled by the system. Value defined in days.   9c983650-bcc9-4b98-834f-3b1b82ebbd12 AttributeTypeDescription    
msidmRequestMaximumCancelingDuration Request Maximum Canceling Duration Integer FALSE Maximum duration a request can be in the Canceling state before the system auto terminates it. Value defined in days.   9f02f555-d791-43f4-a37a-c867e82b6bc1 AttributeTypeDescription    
RequestParameter Request Parameters Unindexed string TRUE Serialized strongly typed request parameter that describes the details of an operation associated with a request.   98655fd1-bad1-4419-8a9c-64c52707b1fe AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
RequestPhase Request Phase Indexed string FALSE   ^(Authentication|Authorization|Action)$ 470829cc-8c2f-4b9b-aef0-2c349b1e5a15 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
RequestStatus Request Status Indexed string FALSE This is a request status type Enum ^(NotFound|Denied|Validating|Canceling|Validated|Authenticating|Authenticated|Authorizing|Authorized|Failed|Canceled|Committed|CanceledPostProcessing|PostProcessing|PostProcessingError|Completed)$ cb568ad7-d6e9-45d5-a926-16dfd25ea39f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
RequestStatusDetail Request Status Detail Unindexed string TRUE Additional request information generated during the processing of this request. This may contain information messages or details of errors.   1ab7df78-14a5-4825-85fa-18a59081bef0 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Requestor Requestor Reference FALSE This attribute is intended to be used to setup rights as appropriate.   7bc62cde-0aa5-4d0d-85d0-2faa022d5d23 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ResetPassword Reset Password Indexed string FALSE This attribute is used to trigger a password reset process.   057c273a-acb2-4b1a-b53c-61e4410c4360 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
CountXPath Resource Count Indexed string FALSE Count resources associated with this item (optional)   0d617356-001b-47e4-9d37-59b447dfe34e AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
ResourceCurrentSet Resource Current Set Reference FALSE     78683e65-a1bd-449b-b4ed-7f4615ee57c4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ResourceFinalSet Resource Final Set Reference FALSE     de1c9a81-2491-40a1-8eff-3699097c7305 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ObjectID Resource ID Reference FALSE The value of the attribute is a globally unique identifier (GUID) assigned by FIM to each resource when it is created.   703c5735-0d86-44a5-82c3-75550498e600 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ResourceParent Resource Parent Reference FALSE This is a reference to the container resource.   733e63fd-35bd-46d2-8c75-e01dbf91caa2 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ObjectSID Resource SID Binary FALSE A binary value that specifies the security identifier (SID) of the user. The SID is a unique value used to identify the user as a security principal.   3d0beb9e-4971-421d-877a-a6d19a54fbbb AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ResourceTime Resource Time Datetime FALSE The date and time of a representation of a resource. This attribute is updated by the FIM service. This attribute can be used to define time triggered Management Policy Rules.   3f3ffab2-5ff8-4c56-9e72-59b68edf50f4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
BoundObjectType Resource Type Reference FALSE The binding's resource type   9f35c912-18bb-4b73-b128-281be0cae32f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
ObjectType Resource Type Indexed string FALSE The resource type of a resource. This attribute is assigned its value when the resource is created in the FIM service database by the FIM service. It cannot be modified by any user.   acbcad3b-8394-4af3-a1d4-149cabae05d1 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SearchScopeResultObjectType Resource Type Indexed string FALSE System name of the type of resource that the search scope returns.   7325ebf2-0756-4b91-b2f3-c00e5e80b049 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
RetentionPeriod Retention Period in Days Integer FALSE The number of days after completion a Request, Approval, Approval Response or Workflow Instance is retained before being deleted.   b14c53e3-e237-473b-9d8a-4ad328f2df9d AttributeTypeDescription    
ReturnType Return Type Indexed string FALSE The type of the value returned by a function.   2357982b-e19a-4a8a-8cc6-ea3c2aba9972 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Rules Rules Unindexed string FALSE Rules file for the workflow.   43cb7150-4d0c-45f2-bd5d-df6fd3ba4e38 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
RunOnPolicyUpdate Run On Policy Update Boolean FALSE Specifies if the workflow should be applied to existing members of a Transition Set in the Set Transition Policy referencing this workflow when the policy is created, enabled or when selected changes are made to the policy.   ca25ece7-86be-4ee7-a49a-8a61cb6dc873 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Scope Scope Indexed string FALSE   ^(DomainLocal|Global|Universal)$ 70aed207-2509-42b3-a641-b8f45cba2e60 AttributeTypeDescription Microsoft.ResourceManagement.PortalClient  
SearchScope Search Scope Filter Unindexed string FALSE XPath expression of which resources are to be returned by the search scope.   02f6d177-b018-4690-bff8-438102786588 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmSecurityContext Security Context Indexed string FALSE This is the security context for the request. ^(Extranet|Unspecified)$ 8b94a1d6-dde2-4a76-8f74-9aa68f0540ff AttributeTypeDescription    
msidmSequenceID Sequence ID Integer FALSE This attribute defines an ID which is unique for all request target detail objects associated with a single request.   4b0b5103-ab9d-470d-9dd6-0f0737672879 AttributeTypeDescription    
ServicePartitionName Service Partition Name Indexed string FALSE This attribute identifies the ServicePartitionName assigned to this Request. The Request and its Workflow Instances can only be processed by FIM Service instances that have this ServicePartitionName.   8cfab375-9b95-4b92-8c5c-77a3455a0f7d AttributeTypeDescription    
SIDHistory SID History Binary TRUE Contains previous SIDs used for the resource if the resource was moved from another domain.   d93ede3d-d358-473e-a969-266898fa3b3a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmStartTime Start Time Datetime FALSE This attribute defines the start time and date of a reporting job object and is specified in UTC.   4838a9b7-3a81-4daf-bb41-e26f32908506 AttributeTypeDescription    
StatusError Status Error Indexed string FALSE Sync rule error details upon failure.   e1c7dfeb-0810-4f0c-8b18-19cf62ea4e0c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
StringRegex String Regular Expression Unindexed string FALSE This is a .Net Regex pattern that defines what string values are allowed.   da9cadc0-298e-41d6-a3f1-08feaadc068e AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
StringResources String Resources Unindexed string FALSE This attribute contains the localized value of the string resources for the selected language.   efe2e929-bcd8-42c5-93ce-87c1353c0a40 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
EmailSubject Subject Indexed string FALSE This is the subject of the e-mail.   338cac61-e2e4-4312-8011-d5f2008363a4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SupportedLanguageCode Supported Language Code Indexed string TRUE This attribute lists language codes for all supported locales in FIM Portal.   1c569f4d-c4d0-43b1-9196-60d726e16ecf AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-attribute-inclusion SyncConfig-attribute-inclusion Unindexed string FALSE Sync Configuration resource attribute   4c8f236a-41ba-4e0d-a29a-df2edf1aa221 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-capabilities-mask SyncConfig-capabilities-mask Integer FALSE Sync Configuration resource attribute   8978beb3-cb18-4365-8185-cddd397325e7 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-category SyncConfig-category Indexed string FALSE Sync Configuration resource attribute   7f76804d-6ebf-4ed0-ae8b-1c030a8ec16b AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-component_mappings SyncConfig-component_mappings Indexed string FALSE Sync Configuration resource attribute   2c7723cd-29f7-45f3-8e22-9318e018c3b9 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-controller-configuration SyncConfig-controller-configuration Unindexed string FALSE Sync Configuration resource attribute   0decbdef-c972-4c1b-b821-afb8e46566fe AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-creation-time SyncConfig-creation-time Indexed string FALSE Sync Configuration resource attribute   b01622a5-3eaf-46b3-b7c5-cdf4e7930ee3 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-dn-construction SyncConfig-dn-construction Indexed string FALSE Sync Configuration resource attribute   ca575f94-8cc6-452d-b490-74f81533b5e8 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-encrypted-attributes SyncConfig-encrypted-attributes Unindexed string FALSE Sync Configuration resource attribute   81ac3c36-a420-48f9-850c-187c17da65e3 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-export-attribute-flow SyncConfig-export-attribute-flow Unindexed string FALSE Sync Configuration resource attribute   188be708-6840-485c-b468-3c93754505a6 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-export-type SyncConfig-export-type Integer FALSE Sync Configuration resource attribute   ea451f11-650d-4d73-9a06-a6a70e244b1c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-extension SyncConfig-extension Unindexed string FALSE Sync Configuration resource attribute   36e9c5c6-84a5-41ad-95a2-173732918f75 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-format-version SyncConfig-format-version Integer FALSE Sync Configuration resource attribute   656e4f42-1d03-4fd9-8973-dfc4f10156ff AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-id SyncConfig-id Indexed string FALSE Sync Configuration resource attribute   706f39d2-7598-4964-8086-22776eced7bd AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-import-attribute-flow SyncConfig-import-attribute-flow Unindexed string FALSE Sync Configuration resource attribute   b6cfba10-d825-4d5d-94fe-af92dbff08fe AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-internal-version SyncConfig-internal-version Integer FALSE Sync Configuration resource attribute   ce85f686-b800-47f2-9f6f-c13305517944 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-join SyncConfig-join Unindexed string FALSE Sync Configuration resource attribute   6cf3c2a0-9f90-4e54-8923-49d2d2ffb0c1 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-last-modification-time SyncConfig-last-modification-time Indexed string FALSE Sync Configuration resource attribute   eb20e892-fd28-4306-ae6c-ceac45611ba5 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-ma-companyname SyncConfig-ma-companyname Indexed string FALSE Sync Configuration resource attribute   6ee14aa6-d4c2-4af3-857e-fac7728810c2 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-ma-listname SyncConfig-ma-listname Indexed string FALSE Sync Configuration resource attribute   001c59cd-e426-4ce7-875f-5a7e26a1aed1 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-ma-partition-data SyncConfig-ma-partition-data Unindexed string TRUE Sync Configuration resource attribute   e59e0acb-25a1-4006-82c4-8c69d67db486 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-ma-run-data SyncConfig-ma-run-data Unindexed string TRUE Sync Configuration resource attribute   ac155ab8-28a2-4f8e-aaf0-0682a94fd606 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-ma-ui-settings SyncConfig-ma-ui-settings Unindexed string FALSE Sync Configuration resource attribute   53f2947b-2f32-4e00-9ea6-fc9c09397462 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-mv-deletion SyncConfig-mv-deletion Unindexed string FALSE Sync Configuration resource attribute   bef23af9-b4df-4ff8-8628-13681c329dc6 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-password-change-history-size SyncConfig-password-change-history-size Integer FALSE ObjectTypes that are synced   75a38ec1-adf6-498b-aa21-4ecf788ea0f5 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-password-sync SyncConfig-password-sync Indexed string FALSE Sync Configuration resource attribute   6c62e388-5161-455b-b905-362d1c4fef26 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-password-sync-allowed SyncConfig-password-sync-allowed Integer FALSE Sync Configuration resource attribute   fef1d1cc-d997-4ca9-8ff1-f5b81eca9039 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-private-configuration SyncConfig-private-configuration Unindexed string FALSE Sync Configuration resource attribute   07472122-a861-42be-b5ac-22067003b562 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-projection SyncConfig-projection Unindexed string FALSE Sync Configuration resource attribute   10d093f5-0337-4ae3-86a1-72ca24ee8e3b AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-provisioning SyncConfig-provisioning Unindexed string FALSE Sync Configuration resource attribute   3f9f47dc-b4bc-428b-a8ac-22b8629d384f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-provisioning-cleanup SyncConfig-provisioning-cleanup Unindexed string FALSE Sync Configuration resource attribute   07003f1e-c886-470c-a89d-155ad5b7b7fa AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-provisioning-cleanup-type SyncConfig-provisioning-cleanup-type Indexed string FALSE Sync Configuration resource attribute   dc2ebf57-e114-4cb6-bc5f-72928a2865c5 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-provisioning-type SyncConfig-provisioning-type Indexed string FALSE Sync Configuration resource attribute   2084cf26-f622-4c65-b856-58ca5621f825 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-refresh-schema SyncConfig-refresh-schema Integer FALSE Refresh Schema   5124bbab-83fd-417c-b6b7-b4c73d2906a2 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-schema SyncConfig-schema Unindexed string FALSE Sync Configuration resource attribute   975b32a3-5df1-4cb5-aa7b-adbc74a44d19 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-stay-disconnector SyncConfig-stay-disconnector Unindexed string FALSE Sync Configuration resource attribute   e62303be-7492-41e2-8986-8168fc24f9ad AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-sub-type SyncConfig-sub-type Indexed string FALSE Sync Configuration resource attribute   b8138f34-8ef7-46ff-897b-ab3a582a93f4 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SyncConfig-version SyncConfig-version Integer FALSE Sync Configuration resource attribute   040cca97-cf68-4207-ac5c-9f3efa916929 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SynchronizationRuleData Synchronization Rule Data Indexed string TRUE Xml describing the values of workflow parameters.   00f3e69d-7637-458f-aa0b-e3c94015780f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SynchronizationRuleID Synchronization Rule ID Reference FALSE This is a reference to a SynchronizationRule resource.   884cca9d-b4d6-4340-9b8b-9d0508e8002f AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SynchronizationRuleName Synchronization Rule Name Indexed string FALSE This is the name of a SynchronizationRule   176a7d1b-7d8d-4b1f-82b6-53dddc3cf6a3 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SynchronizationRuleParameters Synchronization Rule Parameters Indexed string TRUE These are parameters which require values to be provided from the workflow that adds the Synchronization Rule to a resource.   4f49c6da-b99c-4c93-9006-94db9aeb717b AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SynchronizationRuleStatus Synchronization Rule Status Indexed string FALSE Indicates Applied, Not Applied, or Pending. ^(Applied|Not Applied|Pending)$ bebd0391-44e1-4495-91dd-365eccd2074d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
SynchronizeObjectType Synchronize ObjectTypeDescription Reference TRUE The list of resource types that are allowed to be synced.   a065f6e4-0ec6-4e0f-b2d9-eaf1ed642866 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmSystemThrottleLevel System Throttle Level Integer FALSE Increasing this number will allocate more system resources to process outstanding workloads. Setting the value to -1 will disable the system resource throttling.   2875b4c6-7e2d-480e-9521-ea05b9f4422c AttributeTypeDescription    
Target Target Reference FALSE Reference to the target of a request.   299c9743-5d6f-41af-ae9f-6e81e74f3c03 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
TargetObjectType Target Resource Type Indexed string FALSE Which resource type this configuration applies to   2049c8da-0846-4474-813b-77ff283c9d2d AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
msidmTargetObjectTypeIdentifier Target Resource Type Identifier Reference FALSE An identifier of the target resource type for a request.   0f5766f6-e0ed-4cb5-b6eb-5ad8ee38e72a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
EmailTemplateType Template Type Indexed string FALSE This is the context this e-mail can be used in the workflow activities. ^(Approval|Complete|Denied|Notification|Timeout)$ eaaabcd6-fd4f-4c0e-9cea-1e7cc3874d12 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Temporal Temporal Boolean FALSE Defined by a filter that matches resources based on date and time attributes   85d05a00-a41c-4dfd-b61a-005830f0b0bc AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
TimeZone Time Zone Reference FALSE Reference to timezone configuration   398697ac-82a7-49cc-b8bf-ac23c4a8816c AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
TimeZoneId Time Zone Id Indexed string FALSE .Net equivalent timezone id   e895d04b-cb93-4a27-9820-b6a60ad9401b AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
TrustedForest Trusted Forest Reference TRUE The list of Forest resources which are trusted by this Forest and for which an Incoming Trust for this Forest has been configured in Active Directory.   6176b60e-efdc-45ee-a137-5ee0babba81a AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
Type Type Indexed string FALSE   ^(Distribution|Security|MailEnabledSecurity)$ 7aeecb19-6585-432d-abc0-f0080969224e AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
TypeName Type Name Indexed string FALSE The class name of the activity settings part   e47a260b-efac-4397-aef6-759db9b396bc AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
UsageKeyword Usage Keyword Indexed string TRUE     1e289af5-4ac0-4ce7-a85f-331b70963ad0 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
UserID User ID Reference FALSE     2cf9a894-ca91-44d6-8d41-8160d3702638 AttributeTypeDescription Microsoft.ResourceManagement.PasswordReset  
msidmPamUsesSIDHistory Uses SID history Boolean FALSE Indicates if the PAM Group uses SID history.   9016550a-5282-4435-88ba-9833c7564822 AttributeTypeDescription    
WorkflowDefinition Workflow Definition Reference FALSE     02360372-c9d6-4d3c-936b-b898074d7942 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
WorkflowInstance Workflow Instance Reference FALSE     67c8c936-c947-4f2a-b3c3-e2c3b5c0666b AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
WorkflowStatus Workflow Status Indexed string FALSE Enumeration representing the current status of a workflow instance. ^(Created|Pending|Running|Suspended|Completed|Terminated|Canceled|DidNotExecute)$ 43c3b080-c51c-432a-bcc5-531b3b2d8828 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
WorkflowStatusDetail Workflow Status Detail Unindexed string TRUE This attribute is used to track workflow instance exceptions to assist with troubleshooting and auditing workflow execution.   e9b66b56-2cd8-4e16-80d6-f1bb0dcf5473 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  
XOML XOML Unindexed string FALSE     a2b426b9-a152-4dad-bddc-1008807949f7 AttributeTypeDescription Microsoft.ResourceManagement.WebServices  

 ↑ Back to top

Password Change Notification Service (PCNS) Schema in AD

You can use the scroll bars to move right and / or down in the table.

name objectclass attributeID attributeSyntax isSingleValued possSuperiors governsID rangeUpper rangeLower
MS-MIIS-PCNS-Service top;classSchema       container 1.2.840.113556.1.5.250    
MS-MIIS-PCNS-Service-MaxNotificationRetries top;attributeSchema 1.2.840.113556.1.4.1905 2.5.5.9 TRUE     1000  
MS-MIIS-PCNS-Service-MaxQueueAge top;attributeSchema 1.2.840.113556.1.4.1904 2.5.5.9 TRUE        
MS-MIIS-PCNS-Service-MaxQueueLength top;attributeSchema 1.2.840.113556.1.4.1903 2.5.5.9 TRUE        
MS-MIIS-PCNS-Service-RetryInterval top;attributeSchema 1.2.840.113556.1.4.1906 2.5.5.9 TRUE     3600 10
MS-MIIS-PCNS-Target top;classSchema       container 1.2.840.113556.1.5.249    
MS-MIIS-PCNS-Target-Authentication-Service top;attributeSchema 1.2.840.113556.1.4.1898 2.5.5.9 TRUE        
MS-MIIS-PCNS-Target-Disabled top;attributeSchema 1.2.840.113556.1.4.1901 2.5.5.8 TRUE        
MS-MIIS-PCNS-Target-KeepAlive-Interval top;attributeSchema 1.2.840.113556.1.4.1900 2.5.5.9 TRUE     3600  
MS-MIIS-PCNS-Target-Server top;attributeSchema 1.2.840.113556.1.4.1897 2.5.5.12 TRUE     256  
MS-MIIS-PCNS-Target-SPN top;attributeSchema 1.2.840.113556.1.4.1896 2.5.5.12 TRUE     256  
MS-MIIS-PCNS-Target-UserName-Format top;attributeSchema 1.2.840.113556.1.4.1899 2.5.5.9 TRUE        
MS-MIIS-PCNS-TargetEncryptionKey top;attributeSchema 1.2.840.113556.1.4.1902 2.5.5.10 TRUE     8192  
MS-MIIS-PCNS-TargetExclusionSID top;attributeSchema 1.2.840.113556.1.4.1908 2.5.5.17 TRUE        
MS-MIIS-PCNS-TargetGUID top;attributeSchema 1.2.840.113556.1.4.1895 2.5.5.10 TRUE     16 16
MS-MIIS-PCNS-TargetInclusionSID top;attributeSchema 1.2.840.113556.1.4.1909 2.5.5.17 TRUE        
MS-MIIS-PCNS-TargetQueueWarningInterval top;attributeSchema 1.2.840.113556.1.4.1912 2.5.5.9 TRUE        
MS-MIIS-PCNS-TargetQueueWarningLevel top;attributeSchema 1.2.840.113556.1.4.1911 2.5.5.9 TRUE        

 ↑ Back to top