Overview
Administrators can implement Attribute-Level Mastering management for each profile attribute (Attribute) for efficient ledger management of user identity. Through Profile Editor, you can set the ledger authority for each user attribute and manage updates. This Profile Editor has no impact on QueryPie users and controls the attribute management authority for users whose Auth Provider is set to external IdP such as Okta, LDAP.
Additionally, not only predefined attributes but also custom attributes can be created, modified, and deleted according to organizational needs. This enables flexible user information management tailored to each organization’s policies.
User Attribute Authority Setting Definition
Source Priority can be specified for each user attribute, and the types are as follows:
- Inherit from profile source
- This is an option that means allowing updates for that Attribute from external Auth Provider.
- The user’s Attribute becomes updatable (patch) through SCIM API.
- Inherit from QueryPie
- This is an option that means managing that Attribute independently within QueryPie even though the user was created from external Auth Provider.
- Even if the user’s corresponding Attribute is pushed for update through SCIM API, it becomes an Attribute managed independently by QueryPie and ignores changes.
Status Column Definition
The Status column in Profile Editor sets whether that Attribute will be displayed in the user profile (General > Users > User Detail > Profile).
- Operation method: Select
Visible
orHidden
through the dropdown menu.Visible
: The corresponding Attribute is displayed in the user profile.Hidden
: The corresponding Attribute is not displayed in the user profile or user profile edit screen (User Profile Edit).
- Application target: Can be applied to both basic Attributes and Custom Attributes.
- Always Visible: The following basic Attributes are always maintained in
Visible
status and cannot be changed toHidden
. When attempting to change, an error message such as “‘Variable Name’ is managed by the system and cannot be changed.” is displayed.- Username
- Primary email
- Display name
- Risk score
- Limitations: The Status of Attributes linked with IdP cannot be modified.