2.auditor attributes