User

Prev Next
Caption
Name
Requirement
Type
Description
Modified Timeactiveoptionalboolean_tUser.modified_time: The timestamp when the user entry was last modified.
Created Timecreated_timeoptionaltimestamp_tUser.created_time: The timestamp when the user was created. 
Email Addressemail_addroptionalemail_tUser.email_addr: The user's primary email address. For example: noone@nowhere.ru
Email Addressesemail_addrsoptionalemail_t ArrayUser.email_addresses: A list of additional email addresses for the user. 
Employee IDemployee_uidoptionalstring_tUser.employee_uid: The employee identifier assigned to the user by the organization.
End Timeend_timeoptionaltimestamp_tUser.end_time: The end time of when a particular state of the user was valid. Using the start_time and end_time together bound the time when a particular user state was valid. If there is no end_time it tells the analyst that this is the current state of the user as DataBee understands it. There will ever only be a single user for which the end_time is null.
Full Namefull_nameoptionalstring_tUser.full_name: The full name of the person, as per the LDAP Common Name attribute (cn).
Given Namegiven_nameoptionalstring_tUser.given_name: The given or first name of the user.
Groups Namegroup_namesoptionalstring_t ArrayUser.groups: The administrative groups to which the user belongs.
Group.name: The group name.
History IDhidrequiredinteger_tUser.hid: The unique DataBee ID to identify a particular history entry in an object table. This field is the PK and should not be mapped manually as the DataBee product populates this field itself.
Hire Datehire_datetimeoptionaltimestamp_tUser.hire_datetime: The datetime when the user was/will be hired. 
IDidrequiredinteger_tUser.id: The unique identifier used by DataBee for a specific user. This will be logged as user_id in activity tables to link to a particular user in this table. This field should not be mapped manually as the DataBee product populates this field itself.
Job Titlejob_titleoptionalstring_tUser.job_title: The user's job title.
Leave Dateleave_datetimeoptionaltimestamp_tUser.leave_datetime: The datetime when the user left/will be leaving the organization.
Geo Location Citylocation_cityoptionalstring_tUser.location: The detailed geographical location associated with a user. When used with the user_inventory event class, this typically documents the users usual work location.
Location.city: The name of the city. For example: san diego.
Geo Location Countrylocation_countryoptionalstring_tUser.location: The detailed geographical location associated with a user. When used with the user_inventory event class, this typically documents the users usual work location.
Location.country: The ISO 3166-1 Alpha-2 country code. For the complete list of country codes see `ISO 3166-1 alpha-2 codes <https://www.iso.org/obp/ui/#iso:pub:PUB500001:en>`_.
Managermanager_idoptionalinteger_tUser.manager: The user's manager. This helps in understanding an org hierarchy. This should only ever be populated once in an event. I.e. there should not be a manager's manager in an event. 
Modified Timemodified_timeoptionaltimestamp_tUser.modified_time: The timestamp when the user entry was last modified.
Namenamerecommendedstring_tUser.name: The username. For example, janedoe1
Office Locationoffice_locationoptionalstring_tUser.office_location: The primary office location associated with the user. This could be any string and isn't a specific address. For example, South East Virtual.
Organization Nameorg_nameoptionalstring_tUser.org: Organization and org unit related to the user. Organization.name: The name of the organization. For example, Widget, Inc. 
Organization Org Unit Nameorg_ou_nameoptionalstring_tUser.org: Organization and org unit related to the user. Organization.ou_name: The name of the organizational unit, within an organization.  For example, Finance, IT, R&D.
Record Created Atrecord_created_atrequiredtimestamp_tCDPs generated timestamp when record was created. 
Record Updated Atrecord_updated_atrequiredtimestamp_tCDPs generated timestamp when record was last updated.
Backtracesourcesrecommendedstring_t ArrayUser.backtrace: This object is a key value set that relates each field in the user to the earliest raw event that gave DataBee that particular value in the correlation. For example, {'email_addr': 'email_activity.key=123456'}.
Start Timestart_timeoptionaltimestamp_tUser.start_time: The start time when a particular state of the user became valid. 
Surnamesurnameoptionalstring_tUser.surname: The last or family name for the user.
Typetypeoptionalstring_tUser.type: The type of the user. For example, System, AWS IAM User, etc.
Type IDtype_idrecommendedinteger_tUser.type_id: The account type identifier. 
Unique IDuidrecommendedstring_tUser.uid: The unique user identifier. For example, the Windows user SID, ActiveDirectory DN or AWS user ARN.