# Okta schema ERD

Table and field reference for the Fivetran Okta connector.

## Table & Field Reference

### custom_role

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| created | Instant |  |
| description | String |  |
| label | String |  |
| last_updated | String |  |

### policy

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_self_hints_allow | Json |  |
| _links_self_href | String |  |
| conditions | Json |  |
| created | Instant |  |
| description | String |  |
| is_system | Boolean |  |
| last_updated | Instant |  |
| name | String |  |
| priority | Int |  |
| settings | Json |  |
| status | String |  |
| type | String |  |

### user_type

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_schema_href | String |  |
| _links_schema_method | String |  |
| _links_schema_rel | String |  |
| _links_self_href | String |  |
| _links_self_method | String |  |
| _links_self_rel | String |  |
| created | Instant |  |
| created_by | String |  |
| default | Boolean |  |
| description | String |  |
| display_name | String |  |
| last_updated | Instant |  |
| last_updated_by | String |  |
| name | String |  |

### user_enrolled_factor

| Column | Type | Keys |
| --- | --- | --- |
| id | Unknown | PK |
| user_id | String | PK, FK |
| created | Instant |  |
| embedded | Json |  |
| factor_type | Unknown |  |
| last_updated | Instant |  |
| profile | Json |  |
| provider | Unknown |  |
| status | Unknown |  |
| vendor_name | Unknown |  |

### custom_role_permission

| Column | Type | Keys |
| --- | --- | --- |
| label | String | PK |
| custom_role_id | String | PK, FK |
| _links_role_href | String |  |
| _links_self_href | String |  |
| created | Instant |  |
| last_updated | Instant |  |

### device_user

| Column | Type | Keys |
| --- | --- | --- |
| device_id | String | PK, FK |
| users_id | String | PK, FK |
| created | Instant |  |
| management_status | String |  |

### resource

| Column | Type | Keys |
| --- | --- | --- |
| _fivetran_id | String | PK |
| resource_set_id | String | FK |
| _links_groups_href | String |  |
| _links_self_href | String |  |
| _links_users_href | String |  |
| created | Instant |  |
| id | String |  |
| last_updated | Instant |  |

### profile_mapping_property

| Column | Type | Keys |
| --- | --- | --- |
| index | Unknown | PK |
| profile_mapping_id | String | PK, FK |
| expression | String |  |
| push_status | String |  |

### profile_mapping

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_self_hints_allow | Json |  |
| _links_self_href | String |  |
| source_id | String |  |
| source_name | String |  |
| source_type | String |  |
| target_id | String |  |
| target_name | String |  |
| target_type | String |  |

### resource_set

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_bindings_href | String |  |
| _links_resources_href | String |  |
| _links_self_href | String |  |
| created | Instant |  |
| description | String |  |
| label | String |  |
| last_updated | Instant |  |

### user_credentials_email

| Column | Type | Keys |
| --- | --- | --- |
| value | String | PK |
| users_id | String | PK, FK |
| status | String |  |
| type | String |  |

### user_custom_profile

| Column | Type | Keys |
| --- | --- | --- |
| name | Unknown | PK |
| users_id | String | PK, FK |
| value | String |  |

### users

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| realm_id | String | FK |
| type_id | String | FK |
| _links_self_href | String |  |
| activated | Instant |  |
| created | Instant |  |
| credentials_password_hash_value | String |  |
| credentials_provider_name | String |  |
| credentials_provider_type | String |  |
| credentials_recovery_question | String |  |
| last_login | Instant |  |
| last_updated | Instant |  |
| password_changed | Instant |  |
| profile_bob_department | String |  |
| profile_city | String |  |
| profile_cost_center | String |  |
| profile_country_code | String |  |
| profile_department | String |  |
| profile_display_name | String |  |
| profile_division | String |  |
| profile_email | String |  |
| profile_employee_number | String |  |
| profile_first_name | String |  |
| profile_function | String |  |
| profile_honorific_prefix | String |  |
| profile_honorific_suffix | String |  |
| profile_internal_lifecycle_status | String |  |
| profile_key_gr_person | String |  |
| profile_key_guid | String |  |
| profile_last_name | String |  |
| profile_local | String |  |
| profile_login | String |  |
| profile_manager | String |  |
| profile_manager_id | String |  |
| profile_middle_name | String |  |
| profile_mobile_phone | String |  |
| profile_nick_name | String |  |
| profile_organization | String |  |
| profile_postal_address | String |  |
| profile_preferred_language | String |  |
| profile_primary_phone | String |  |
| profile_second_email | String |  |
| profile_state | String |  |
| profile_street_address | String |  |
| profile_timezone | String |  |
| profile_title | String |  |
| profile_url | String |  |
| profile_user_type | String |  |
| profile_zip_code | String |  |
| status | String |  |
| status_changed | Instant |  |
| transitioning_to_status | String |  |

### api_token_metadata

| Column | Type | Keys |
| --- | --- | --- |
| id | Unknown | PK |
| user_id | Unknown | FK |
| client_name | Unknown |  |
| created | Unknown |  |
| expires_at | Unknown |  |
| last_updated | Unknown |  |
| name | Unknown |  |
| network_connection | Unknown |  |
| token_window | Unknown |  |

### device

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_activate_hints_allow | Json |  |
| _links_activate_href | String |  |
| _links_deactivate_hints_allow | Json |  |
| _links_deactivate_href | String |  |
| _links_self_hints_allow | Json |  |
| _links_self_href | String |  |
| _links_suspend_hints_allow | Json |  |
| _links_suspend_href | String |  |
| _links_unsuspend_hints_allow | Json |  |
| _links_unsuspend_href | String |  |
| _links_users_hints_allow | Json |  |
| _links_users_href | String |  |
| created | Instant |  |
| last_updated | Instant |  |
| profile_display_name | String |  |
| profile_imei | String |  |
| profile_manufacturer | String |  |
| profile_meid | String |  |
| profile_model | String |  |
| profile_os_version | String |  |
| profile_platform | String |  |
| profile_registered | Boolean |  |
| profile_secure_hardware_present | Boolean |  |
| profile_serial_number | String |  |
| profile_sid | String |  |
| profile_tpm_public_key_hash | String |  |
| profile_udid | String |  |
| resource_alternate_id | String |  |
| resource_display_name_sensitive | Boolean |  |
| resource_display_name_value | String |  |
| resource_id | String |  |
| resource_type | String |  |
| status | String |  |

### network_zone_gateway

| Column | Type | Keys |
| --- | --- | --- |
| value | Unknown | PK |
| network_zone_id | Unknown | PK, FK |
| type | Unknown |  |

### network_zone_proxy

| Column | Type | Keys |
| --- | --- | --- |
| value | Unknown | PK |
| network_zone_id | Unknown | PK, FK |
| type | Unknown |  |

### network_zone

| Column | Type | Keys |
| --- | --- | --- |
| id | Unknown | PK |
| created | Unknown |  |
| last_updated | Unknown |  |
| name | Unknown |  |
| status | Unknown |  |
| systems | Unknown |  |
| type | Unknown |  |
| usage | Unknown |  |

### group_role

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| groups_id | String | PK, FK |
| custom_role_id | String | FK |
| resource_set_id | String | FK |
| _links_assignee_href | String |  |
| _links_member_href | String |  |
| _links_permissions_href | String |  |
| _links_resource_set_href | String |  |
| _links_role_href | String |  |
| assignment_type | String |  |
| created | Instant |  |
| label | String |  |
| last_updated | Instant |  |
| status | String |  |
| type | String |  |

### assign_user_to_group_id

| Column | Type | Keys |
| --- | --- | --- |
| groups_id | String | PK, FK |
| rule_id | String | PK, FK |

### user_excluded_from_rule

| Column | Type | Keys |
| --- | --- | --- |
| rule_id | String | PK, FK |
| users_id | String | PK, FK |

### group_excluded_from_rule

| Column | Type | Keys |
| --- | --- | --- |
| groups_id | String | PK, FK |
| rule_id | String | PK, FK |

### rule

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| all_groups_valid | Boolean |  |
| conditions_expression_type | String |  |
| conditions_expression_value | String |  |
| created | Instant |  |
| last_updated | Instant |  |
| name | String |  |
| status | String |  |
| type | String |  |

### user_role

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| users_id | String | PK, FK |
| custom_role_id | String | FK |
| resource_set_id | String | FK |
| _links_assignee_href | String |  |
| _links_member_href | String |  |
| _links_permissions_href | String |  |
| _links_resource_set_href | String |  |
| _links_role_href | String |  |
| assignment_type | String |  |
| created | Instant |  |
| label | String |  |
| last_updated | Instant |  |
| status | String |  |
| type | String |  |

### application_user

| Column | Type | Keys |
| --- | --- | --- |
| application_id | String | PK, FK |
| user_id | String | PK, FK |
| _links_app_href | String |  |
| _links_self_href | String |  |
| _links_user_href | String |  |
| created | Instant |  |
| credentials_user_name | String |  |
| external_id | String |  |
| last_sync | Instant |  |
| last_updated | Instant |  |
| password_changed | Instant |  |
| scope | String |  |
| status | String |  |
| status_changed | Instant |  |
| sync_state | String |  |

### group_push_mapping

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| application_id | String | PK, FK |
| source_group_id | String | FK |
| app_config | Json |  |
| created | Instant |  |
| error_summary | String |  |
| last_push | Instant |  |
| last_updated | Instant |  |
| status | String |  |
| target_group_id | String |  |

### system_log_target

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| system_log_id | String | PK, FK |
| alternate_id | String |  |
| detail_entry | Json |  |
| display_name | String |  |
| type | String |  |

### system_log_request

| Column | Type | Keys |
| --- | --- | --- |
| _fivetran_id | String | PK |
| system_log_id | String | FK |
| geographical_context | String |  |
| ip | String |  |
| source | String |  |
| version | String |  |

### system_log

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| actor_alternate_id | String |  |
| actor_detail_entry | String |  |
| actor_display_name | String |  |
| actor_id | Unknown |  |
| actor_type | Unknown |  |
| authentication_context_authentication_provider | String |  |
| authentication_context_authentication_step | String |  |
| authentication_context_credential_provider | String |  |
| authentication_context_credential_type | String |  |
| authentication_context_external_session_id | String |  |
| authentication_context_interface | String |  |
| authentication_context_issuer | String |  |
| client_device | String |  |
| client_geographical_context | String |  |
| client_id | String |  |
| client_ip_address | String |  |
| client_user_agent_browser | String |  |
| client_user_agent_os | String |  |
| client_user_agent_raw_user_agent | String |  |
| client_zone | String |  |
| device | String |  |
| display_message | String |  |
| event_type | String |  |
| legacy_event_type | String |  |
| outcome_reason | String |  |
| outcome_result | String |  |
| published | Instant |  |
| security_context_as_number | Long |  |
| security_context_as_org | String |  |
| security_context_domain | String |  |
| security_context_is_proxy | Boolean |  |
| security_context_isp | String |  |
| severity | String |  |
| transaction_id | String |  |
| transaction_type | String |  |
| version | String |  |
| debug_context_debug_data_** |  |  |

### group_logo_link

| Column | Type | Keys |
| --- | --- | --- |
| href | String | PK |
| groups_id | String | PK, FK |
| name | String |  |
| type | String |  |

### groups

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_apps_href | String |  |
| _links_self_href | String |  |
| _links_source_href | String |  |
| _links_users_href | String |  |
| created | Instant |  |
| last_membership_updated | Instant |  |
| last_updated | Instant |  |
| object_class | Json |  |
| profile_description | String |  |
| profile_dn | String |  |
| profile_external_id | String |  |
| profile_name | String |  |
| profile_sam_account_name | String |  |
| profile_windows_domain_qualified_name | String |  |
| type | String |  |

### user_authenticator_enrollment

| Column | Type | Keys |
| --- | --- | --- |
| id | Unknown | PK |
| user_id | String | PK, FK |
| created | Instant |  |
| key | Unknown |  |
| last_updated | Instant |  |
| name | Unknown |  |
| nickname | Unknown |  |
| profile | Json |  |
| status | Unknown |  |
| type | Unknown |  |

### application_group

| Column | Type | Keys |
| --- | --- | --- |
| application_id | String | PK, FK |
| groups_id | String | PK, FK |
| _links_app_href | String |  |
| _links_group_href | String |  |
| _links_self_href | String |  |
| priority | Int |  |

### identify_provider_protocol_scope

| Column | Type | Keys |
| --- | --- | --- |
| scope | Unknown | PK |
| identity_provider_id | Unknown | PK, FK |

### identity_provider

| Column | Type | Keys |
| --- | --- | --- |
| id | Unknown | PK |
| created | Unknown |  |
| issuer_mode | Unknown |  |
| last_updated | Unknown |  |
| name | Unknown |  |
| policy_account_link_action | Unknown |  |
| policy_account_link_filter | Unknown |  |
| policy_max_clock_skew | Unknown |  |
| policy_provisioning_action | Unknown |  |
| policy_provisioning_condition_deprovisioned_action | Unknown |  |
| policy_provisioning_condition_suspended_action | Unknown |  |
| policy_provisioning_group_action | Unknown |  |
| policy_provisioning_profile_master | Unknown |  |
| policy_subject_filter | Unknown |  |
| policy_subject_match_attribute | Unknown |  |
| policy_subject_match_type | Unknown |  |
| policy_subject_username_template | Unknown |  |
| protocol_endpoint_authorization_binding | Unknown |  |
| protocol_endpoint_authorization_url | Unknown |  |
| protocol_endpoint_jwks_url | Unknown |  |
| protocol_endpoint_token_url | Unknown |  |
| protocol_issuer_url | Unknown |  |
| protocol_token_endpoint_binding | Unknown |  |
| protocol_type | Unknown |  |
| status | Unknown |  |
| type | Unknown |  |

### application_link

| Column | Type | Keys |
| --- | --- | --- |
| href | String | PK |
| application_id | String | PK, FK |
| name | String |  |
| type | String |  |

### application_logo_link

| Column | Type | Keys |
| --- | --- | --- |
| href | String | PK |
| application_id | String | PK, FK |
| name | String |  |
| type | String |  |

### application_client_credentials_link

| Column | Type | Keys |
| --- | --- | --- |
| href | String | PK |
| application_id | String | PK, FK |
| name | String |  |

### application_sign_on_attribute_statement

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| application_id | String | PK, FK |
| filter_type | String |  |
| filter_value | String |  |
| namespace | String |  |
| type | String |  |
| values | Json |  |

### application_sign_on_acs_endpoint

| Column | Type | Keys |
| --- | --- | --- |
| index | Int | PK |
| application_id | String | PK, FK |
| url | String |  |

### application_sign_on_inline_hook

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| application_id | String | PK, FK |
| _links_self_hints_allow | Json |  |
| _links_self_href | String |  |

### application_feature

| Column | Type | Keys |
| --- | --- | --- |
| feature | String | PK |
| application_id | String | PK, FK |

### oauth_client_grant_type

| Column | Type | Keys |
| --- | --- | --- |
| grant_type | String | PK |
| application_id | String | PK, FK |

### oauth_client_response_type

| Column | Type | Keys |
| --- | --- | --- |
| response_type | String | PK |
| application_id | String | PK, FK |

### oauth_client_redirect_uri

| Column | Type | Keys |
| --- | --- | --- |
| redirect_uri | String | PK |
| application_id | String | PK, FK |

### oauth_client_post_logout_redirect_uri

| Column | Type | Keys |
| --- | --- | --- |
| post_logout_redirect_uri | String | PK |
| application_id | String | PK, FK |

### application

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| _links_access_policy_href | String |  |
| _links_activate_href | String |  |
| _links_deactivate_href | String |  |
| _links_groups_href | String |  |
| _links_help_href | String |  |
| _links_help_type | String |  |
| _links_metadata_href | String |  |
| _links_metadata_type | String |  |
| _links_policies_hints_allow | Json |  |
| _links_policies_href | String |  |
| _links_profile_enrollment | String |  |
| _links_upload_logo_hints_allow | Json |  |
| _links_upload_logo_href | String |  |
| _links_users_href | String |  |
| accessibility_error_redirect_url | String |  |
| accessibility_login_redirect_url | String |  |
| accessibility_self_service | Boolean |  |
| created | Instant |  |
| credentials_oauth_client_auto_key_rotation | Boolean |  |
| credentials_oauth_client_token_endpoint_auth_method | String |  |
| credentials_reveal_password | Boolean |  |
| credentials_scheme | String |  |
| credentials_signing_kid | String |  |
| credentials_user_name | String |  |
| credentials_user_name_template | String |  |
| credentials_user_name_template_push_status | String |  |
| credentials_user_name_template_type | String |  |
| credentials_user_name_template_user_suffix | String |  |
| label | String |  |
| last_updated | Instant |  |
| name | String |  |
| request_object_signing_alg | String |  |
| settings_app | Json |  |
| settings_notes_admin | String |  |
| settings_notes_end_user | String |  |
| settings_notifications_help_url | String |  |
| settings_notifications_message | String |  |
| settings_notifications_vpn_network_connection | String |  |
| settings_notifications_vpn_network_include | Json |  |
| settings_oauth_client_application_type | String |  |
| settings_oauth_client_consent_method | String |  |
| settings_oauth_client_idp_initiated_login_default_scope | Json |  |
| settings_oauth_client_idp_initiated_login_mode | String |  |
| settings_oauth_client_initiate_login_uri | String |  |
| settings_oauth_client_issuer_mode | String |  |
| settings_oauth_client_logo_uri | String |  |
| settings_oauth_client_policy_uri | String |  |
| settings_oauth_client_refresh_token_leeway | Int |  |
| settings_oauth_client_refresh_token_rotation_type | String |  |
| settings_oauth_client_tos_uri | String |  |
| settings_oauth_client_uri | String |  |
| settings_oauth_client_wildcard_redirect | String |  |
| settings_sign_on_allow_multiple_acs_endpoints | Boolean |  |
| settings_sign_on_assertion_signed | Boolean |  |
| settings_sign_on_audience | String |  |
| settings_sign_on_authn_context_class_ref | String |  |
| settings_sign_on_default_relay_state | String |  |
| settings_sign_on_destination | String |  |
| settings_sign_on_digest_algorithm | String |  |
| settings_sign_on_honor_force_authn | Boolean |  |
| settings_sign_on_idp_issuer | String |  |
| settings_sign_on_login_url | String |  |
| settings_sign_on_recipient | String |  |
| settings_sign_on_redirect_url | String |  |
| settings_sign_on_request_compressed | Boolean |  |
| settings_sign_on_response_signed | Boolean |  |
| settings_sign_on_signature_algorithm | String |  |
| settings_sign_on_slo_enabled | Boolean |  |
| settings_sign_on_slo_logout_url | String |  |
| settings_sign_on_slo_sp_issuer | String |  |
| settings_sign_on_sp_certificate_x_5_c | Json |  |
| settings_sign_on_sp_issuer | String |  |
| settings_sign_on_sso_acs_url | String |  |
| settings_sign_on_subject_name_id_format | String |  |
| settings_sign_on_subject_name_id_template | String |  |
| sign_on_mode | String |  |
| status | String |  |
| visibility_app_links | Json |  |
| visibility_auto_launch | Boolean |  |
| visibility_auto_submit_toolbar | Boolean |  |
| visibility_hide_ios | Boolean |  |
| visibility_hide_web | Boolean |  |

### realm

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| created | Instant |  |
| domain | Json |  |
| is_default | Boolean |  |
| last_updated | Instant |  |
| profile_name | String |  |
| profile_realm_type | String |  |

### group_member

| Column | Type | Keys |
| --- | --- | --- |
| groups_id | String | PK, FK |
| users_id | String | PK, FK |

### policy_rule_condition_excluded_user

| Column | Type | Keys |
| --- | --- | --- |
| policy_rule_id | Unknown | PK, FK |
| user_id | Unknown | PK, FK |

### policy_rule

| Column | Type | Keys |
| --- | --- | --- |
| id | Unknown | PK |
| policy_id | String | FK |
| authtype_condition | Unknown |  |
| created | Unknown |  |
| last_updated | Unknown |  |
| name | Unknown |  |
| network_connection_condition | Unknown |  |
| priority | Unknown |  |
| signon_access | Unknown |  |
| signon_primary_factor | Unknown |  |
| signon_remember_device_by_default | Unknown |  |
| signon_require_factor | Unknown |  |
| signon_session_max_session_idle_minute | Unknown |  |
| signon_session_max_session_lifetime_minute | Unknown |  |
| signon_session_use_persistent_cookie | Unknown |  |
| status | Unknown |  |
| systems | Unknown |  |
| type | Unknown |  |

### realm_assignment

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| realm_id | String | FK |
| created | Instant |  |
| domains | Json |  |
| expression_value | String |  |
| is_default | Boolean |  |
| last_updated | Instant |  |
| name | String |  |
| profile_source_id | String |  |
| status | String |  |

## Relationships

- user_enrolled_factor(user_id) → users(id)
- custom_role_permission(custom_role_id) → custom_role(id)
- device_user(users_id) → users(id)
- device_user(device_id) → device(id)
- resource(resource_set_id) → resource_set(id)
- profile_mapping_property(profile_mapping_id) → profile_mapping(id)
- user_credentials_email(users_id) → users(id)
- user_custom_profile(users_id) → users(id)
- users(realm_id) → realm(id)
- users(type_id) → user_type(id)
- api_token_metadata(user_id) → users(id)
- network_zone_gateway(network_zone_id) → network_zone(id)
- network_zone_proxy(network_zone_id) → network_zone(id)
- group_role(custom_role_id) → custom_role(id)
- group_role(resource_set_id) → resource_set(id)
- group_role(groups_id) → groups(id)
- assign_user_to_group_id(groups_id) → groups(id)
- assign_user_to_group_id(rule_id) → rule(id)
- user_excluded_from_rule(users_id) → users(id)
- user_excluded_from_rule(rule_id) → rule(id)
- group_excluded_from_rule(groups_id) → groups(id)
- group_excluded_from_rule(rule_id) → rule(id)
- user_role(custom_role_id) → custom_role(id)
- user_role(resource_set_id) → resource_set(id)
- user_role(users_id) → users(id)
- application_user(user_id) → users(id)
- application_user(application_id) → application(id)
- group_push_mapping(source_group_id) → groups(id)
- group_push_mapping(application_id) → application(id)
- system_log_target(system_log_id) → system_log(id)
- system_log_request(system_log_id) → system_log(id)
- group_logo_link(groups_id) → groups(id)
- user_authenticator_enrollment(user_id) → users(id)
- application_group(groups_id) → groups(id)
- application_group(application_id) → application(id)
- identify_provider_protocol_scope(identity_provider_id) → identity_provider(id)
- application_link(application_id) → application(id)
- application_logo_link(application_id) → application(id)
- application_client_credentials_link(application_id) → application(id)
- application_sign_on_attribute_statement(application_id) → application(id)
- application_sign_on_acs_endpoint(application_id) → application(id)
- application_sign_on_inline_hook(application_id) → application(id)
- application_feature(application_id) → application(id)
- oauth_client_grant_type(application_id) → application(id)
- oauth_client_response_type(application_id) → application(id)
- oauth_client_redirect_uri(application_id) → application(id)
- oauth_client_post_logout_redirect_uri(application_id) → application(id)
- group_member(users_id) → users(id)
- group_member(groups_id) → groups(id)
- policy_rule_condition_excluded_user(user_id) → users(id)
- policy_rule_condition_excluded_user(policy_rule_id) → policy_rule(id)
- policy_rule(policy_id) → policy(id)
- realm_assignment(realm_id) → realm(id)