Creating Attributes
This guide provides step-by-step instructions for creating Custom Security Attributes within an attribute set in EmpowerID. Attributes define the specific metadata fields that can be assigned to users and service principals.
Prerequisites
Before creating an attribute, ensure:
- An attribute set has been created
- The Microsoft Entra account store connection is active
Procedure
-
Navigate to Resource Admin → Applications → Custom Security Attributes.
-
Click the attribute set where you want to create the attribute.
The attribute set overview page opens.

-
Click Add Attribute in the top-right corner.
The Add Attribute dialog opens.

-
Configure the attribute settings:
- Attribute Name (Required): Enter a unique identifier within the attribute set (1-32 characters). Use PascalCase or snake_case for consistency. Examples:
EmploymentType,department_code. - Description (Optional): Provide a detailed explanation of the attribute's purpose. Include usage guidelines, examples, and any business rules or constraints.
- Data Type (Required): Select from String (text values up to 256 characters), Integer (32-bit signed integer values), or Boolean (true or false values).
- Allow multiple values: Select No if the attribute can hold only one value, or Yes if the attribute can hold multiple values.
- Only allow predefined values: Select No to allow users to enter free text, or Yes to restrict users to selecting from predefined values.
- Attribute Name (Required): Enter a unique identifier within the attribute set (1-32 characters). Use PascalCase or snake_case for consistency. Examples:
-
If you selected Yes for "Only allow predefined values": a. Click Add value to define each allowed value.
b. Enter the value in the input field.
c. Click the + icon or press Enter to add the value.
d. Repeat steps b-c to add additional values.
e. Click the X next to any value to remove it. -
Click Add Attribute to create the attribute.
After creation, you cannot change:
- Attribute name
- Data type
- Allow multiple values setting
- Only allow predefined values setting
Only the description and predefined values can be modified after creation. Plan your attribute configuration carefully based on expected usage patterns.
After creating the attribute, it appears in the Active Attributes list on the attribute set overview page. The list displays the attribute name, description, data type, whether it's multi-valued, and available actions (Edit, Deactivate).
Next Steps
After creating an attribute:
- Configure attribute eligibility to set up IAM Shop access and approval policies
- Edit the attribute to modify the description or manage predefined values
- Review the overview documentation for conceptual information