erPersonItem

The erPersonItem class is an auxiliary class that identifies attributes for a person. The erPersonItem is a domain entry. The parent class is top.

Attribute name Description Enter
Mail Email address. directory string
Cn Common name for person. directory string
erPersonStatus Status of person. integer
erRoles DN of the roles of the person. distinguished name
erAliases Aliases for person. directory string
erSupervisor DN of the supervisor of the person. distinguished name
erSharedSecret Value used by the user for password pickup. directory string
erCustomDisplay User-selected attribute to display in Person lists. directory string
erLocale Locale preference of the user. Default is the system locale. directory string
erCreateDate Timestamp of when the object is created. The timestamp is in Greenwich Mean Time (GMT) format. directory string
erSynchPassword Password to be used for account creation. binary
erLastStatusChangeDate Timestamp of when the status is updated. The timestamp is in GMT format. directory string
erLastOperation Available for custom use for lifecycle event. directory string
erPswdLastChanged Timestamp of the last password change date. The timestamp is GMT format. generalized time
erLastCertifiedDate1 Timestamp of the last execution of a user recertification policy for this user. A multivalued attribute that contains “;;” delimited strings. The first part of each string is the DN of the policy definition, and the second part is the timestamp of the policy execution. directory string
erRoleRecertificationLastAction2 The last recertification action applied to a role membership. A multivalued attribute that contains “;;” delimited strings. The first part of each string is the DN of the role definition, and the second part is the last action applied to the role membership. Valid actions are:

Certified (CERTIFIED.

Rejected and marked (REJECTED_MARK.

directory string
erRoleRecertificationLastActionDate2 Timestamp of the last recertification action applied to a role membership. A multivalued attribute that contains “;;” delimited strings. The first part of each string is the DN of the role definition, and the second part is the timestamp of the last action. directory string
erPersonPassword1 Account password of the person. directory string
erRoleAssignments3 Represents the person role assignment attribute value information. The actual role assignment data of the person is stored in database and not in the directory server. Hence, this attribute is not populated on any person entry in the directory server. directory string
erURI3 The universal resource identifier. directory string

1 Indicates the attribute is added in release 4.6 Express .

2 Indicates the attribute is added in release 5.1.

3 Indicates the attribute is added in ISIM 6.0.

Parent topic: General classes