An asterisk * in the title indicates the field is mandatory.
If a field has a default value, it is shown in the Description column.
If the field type is an array, the Field Name has a .[n] suffix, where n is the array index placeholder.
Object and array field names are listed to provide context. If a field belongs to an object or an array, the full field name is shown in dot separated notation.

Title

Description

Details

Credential Policy URI

Field Name: CredentialPolicyURI
Type: String
Format: uri

User Object Id *

The unique identifier of the User object to which this credential belongs. - template parameter [1]

Field Name: UserObjectId
Type: ["String"]
Target: device/cuc/UserTemplate
Target attr: ObjectId
Format: uri

Locked

A flag indicating whether access to the user account associated with this set of credentials is locked.

Field Name: Locked
Type: Boolean

Time Hacked

The date and time that the credential was locked due to too many hacks. The date and time is recorded in this column whenever a user credential is locked due to too many hacks based on the credential policy.

Field Name: TimeHacked
Type: String

Time Changed

The date and time when the credentials were last changed. The date and time is recorded in this column whenever a user credential is created or changed.

Field Name: TimeChanged
Type: String

Cant Change

A flag indicating whether the user can set this credential.

Field Name: CantChange
Type: Boolean

Credentials

The PIN or password, for a user. The credentials are stored in an encrypted format.

Field Name: Credentials
Type: String
Is Password: True

Time Last Hack

The date and time of the last logon attempt with an invalid user credential.

Field Name: TimeLastHack
Type: String

Credential Policy Object Id

The unique identifier of the CredentialPolicy object that is associated with this credential.

Field Name: CredentialPolicyObjectId
Type: String

URI

Field Name: URI
Type: String
Format: uri

User URI

Field Name: UserURI
Type: String
Format: uri

Credential Type

The type of credential such as password, PIN, Windows or Domino credential.

Field Name: CredentialType
Type: Integer

Alias

The unique text name for either a user, distribution list, or personal group.

Field Name: Alias
Type: String

Hacked

A flag indicating whether access to the user account associated with this set of credentials is locked due too many hack attempts.

Field Name: Hacked
Type: Boolean

Hack Count

The number of logons attempted that failed due to invalid credentials. The Unity system or external authentication provider determined that the credentials supplied as part of a user logon attempt were invalid.

Field Name: HackCount
Type: Integer

Doesnt Expire

A flag indicating whether this user credential will expire, and therefore the user must change the credential periodically. However, if the credential does not expire (value = "1"), the user still may change the credential (if allowed by CantChange).

Field Name: DoesntExpire
Type: Boolean

Is Primary

A flag indicating whether this credential is mapped to the user NT/AD domain account and as such is designated as the 'primary' credential for the user. This column is not currently used, but is retained from Unity 4.x in case it is needed in the future.

Field Name: IsPrimary
Type: Boolean

Object Id

Surrogate key to support IMS

Field Name: ObjectId
Type: String

Cred Must Change

A flag indicating whether the user must change their credentials (PIN or password) at the next login.

Field Name: CredMustChange
Type: Boolean

Time Lockout

The date and time that the credential was locked by an administrator.

Field Name: TimeLockout
Type: String

Model: device/cuc/UserTemplatePassword

Model Details