type: object nullable: true description: Refers to a specific Identity attribute, Account attibute, or Entitlement used in Role membership criteria properties: type: $ref: './RoleCriteriaKeyType.yaml' property: type: string description: The name of the attribute or entitlement to which the associated criteria applies. example: "attribute.email" sourceId: type: string nullable: true description: >- ID of the Source from which an account attribute or entitlement is drawn. Required if type is ACCOUNT or ENTITLEMENT example: 2c9180867427f3a301745aec18211519 required: - type - property