Activating and Deactivating Attributes

This guide provides step-by-step instructions for activating and deactivating Custom Security Attributes in EmpowerID. Deactivation temporarily disables attributes without deleting them or their configurations, while activation restores them for use.

Deactivation Effects

When an attribute is deactivated:

• It is no longer available for new assignments
• Existing assignments remain intact
• The attribute does not appear in IAM Shop or assignment interfaces
• Configuration and predefined values are preserved
• It does not count against the maximum attribute limit

Prerequisites

Before activating or deactivating attributes, ensure:

• Attributes have been created within an attribute set
• The Microsoft Entra account store connection is active

Deactivating Attributes

Deactivation temporarily disables attributes without deleting their configuration or historical assignments.

Single Attribute Deactivation

1. Navigate to Resource Admin → Applications → Custom Security Attributes.
2. Click the attribute set containing the attribute you want to deactivate.
3. In the Active Attributes list, locate the attribute to deactivate.
4. Click the Deactivate button in the attribute's row.
5. Confirm the deactivation when prompted.

The attribute moves to the Deactivated Attributes tab.

Bulk Deactivation

1. Navigate to Resource Admin → Applications → Custom Security Attributes.

2. Click the attribute set containing the attributes you want to deactivate.

3. In the Active Attributes list, select multiple attributes using the checkboxes on the left.

   A Deactivate X Selected button appears at the bottom of the list.

4. Click the Deactivate X Selected button.

5. Confirm the bulk deactivation when prompted.

All selected attributes move to the Deactivated Attributes tab.

Activating Attributes

Reactivate deactivated attributes to make them available for assignment again.

Single Attribute Activation

1. Navigate to Resource Admin → Applications → Custom Security Attributes.
2. Click the attribute set containing the attribute you want to activate.
3. Switch to the Deactivated Attributes tab.
4. Locate the attribute to reactivate.
5. Click the Activate button in the attribute's row.

The attribute immediately moves back to the Active Attributes list.

Bulk Activation

1. Navigate to Resource Admin → Applications → Custom Security Attributes.

2. Click the attribute set containing the attributes you want to activate.

3. Switch to the Deactivated Attributes tab.

4. Select multiple attributes using the checkboxes on the left.

   An Activate X Selected button appears at the bottom of the list.

5. Click the Activate X Selected button.

All selected attributes move to the Active Attributes list.

Configuration Persistence

Deactivated attributes retain all configuration settings, including:

• Data type and value configuration
• Predefined values
• Eligibility rules
• IAM Shop settings

Reactivation restores the attribute exactly as it was before deactivation.

Next Steps

After activating or deactivating attributes:

• Create attribute assignments to assign active attributes to users and service principals
• Edit attributes to modify descriptions or manage predefined values
• Review the overview documentation for conceptual information