Purpose
The Account CDP contains the accounts DataBee has identified within an organization, such as directory, cloud, application, local, and service accounts. It is the subset of the User CDP whose user type is anything other than Person, and is the best starting point for questions about access and sign-in identities.
Entity Correlation
The Entity Correlator identifies and differentiates accounts using these fields, in order of priority: Username and Domain together, then Username, then Email Address. Because username and domain are matched together, the same username in two different domains (for example, john.smith in azure_ad and in microsoft_entra) produces two separate accounts. Each account receives its own DataBee user ID, separate from the person it belongs to.
For more on how persons and accounts are resolved, see Asset and Entity Resolution.
Schema
Caption | Name | Requirement | Type | Description |
|---|---|---|---|---|
Account Status | account_status | optional | string_t | User.account: The account associated with this user, such as a cloud or identity-governance account. Account.status: The status of the account. For example: Active, Inactive, Disabled. |
Account Status ID | account_status_id | optional | integer_t | User.account: The account associated with this user, such as a cloud or identity-governance account. Account.status_id: The normalized account status identifier. |
Account Type | account_type | optional | string_t | User.account: The account associated with this user, such as a cloud or identity-governance account. Account.type: The account type. For example: AWS Account, Azure AD Account, GCP Account. |
Account Type ID | account_type_id | optional | integer_t | User.account: The account associated with this user, such as a cloud or identity-governance account. Account.type_id: The normalized account type identifier. |
Account UID | account_uid | optional | string_t | User.account: The account associated with this user, such as a cloud or identity-governance account. Account.uid: The unique identifier of the account. For example: an AWS account ID. |
Active | active | optional | boolean_t | Indicates whether this row is the current record for the account. Only the most recent row for each ID that has no end_time is TRUE; when an attribute changes, a new row is added and earlier rows are set to FALSE. |
Created Time | created_time | optional | timestamp_t | User.created_time: The timestamp when the user was created in the system. Useful for tracking user lifecycle and onboarding events. Synonyms: creation date, onboarding time. |
Domain | domain | optional | string_t | User.domain: The domain where the user is defined. For example: the LDAP or Active Directory domain. |
Email Address | email_addr | optional | email_t | User.email_addr: The user's primary email address. For example: |
End Time | end_time | optional | timestamp_t | User.end_time: The end time of when a particular entity state was valid. Using start_time and end_time together bounds the time when a particular entity state was valid. If there is no end_time, this is the current state of the entity as DataBee understands it. |
History ID | hid | optional | integer_t | User.hid: The unique DataBee ID to identify a particular history entry or row in an entity table (i.e., user, device or product table). This field is the primary key and should not be mapped manually as the DataBee product populates this field itself. |
ID | id | required | integer_t | User.id: The unique identifier used by DataBee for a specific account. This is the primary key for the Account table and is referenced as user_id in activity and event tables to link to this account. Synonyms: user_id. |
Modified Time | modified_time | optional | timestamp_t | User.modified_time: The timestamp when the user entry was last modified. Useful for tracking changes to user attributes or status. Synonyms: last modified, update time. |
Name | name | recommended | string_t | User.name: The username. For example, |
Record Created At | record_created_at | required | timestamp_t | CDPs generated timestamp when record was created. |
Record Updated At | record_updated_at | required | timestamp_t | CDPs generated timestamp when record was last updated. |
Data Sources | sources | recommended | string_t Array | User.backtrace: This object is a key value set that relates each field in the user to the earliest raw event that gave DataBee that particular value in the correlation. For example, |
Start Time | start_time | optional | timestamp_t | User.start_time: The start time when a particular state of the user became valid |
Type | type | optional | string_t | User.type: The type of the user. For example: System, AWS IAM User. Any type other than Person. |
Type ID | type_id | recommended | integer_t | User.type_id: The user type identifier. |
Unique ID | uid | recommended | string_t | User.uid: The unique user identifier. For example, the Windows user SID, ActiveDirectory DN or AWS user ARN. |