topic Re: Add access-role argument help in API / CLI Discussion

Add access-role argument help

Jason_Carrillo — Tue, 08 May 2018 16:30:05 GMT

Trying to create a batch of Access Roles and add a user group to them at the same time. I've got the "add access-role" set up to create the ARs, but I run into issues when I try to add the user group to the access role. Newbie to the new API and scripting engine for R80.10 I guess.

add access-role name FW_AR machines "any" networks "any" remote-access-clients "any" users "????????"

The group I want to add is an internal user group, everything else is very vanilla.

Re: Add access-role argument help

Joshua_Hatter — Tue, 08 May 2018 18:09:51 GMT

The users field if being specific needs to be an 'object'. So we will access the internal users keys source and selection with users.source, and users.selection.

Example:

#mgmt_cli add access-role name "<access-role-name>" machines "any" networks "any" remote-access-clients "any" users.source "Internal User Groups" users.selection "<name-of-internal-group>"

Hope this helps.

Re: Add access-role argument help

Robert_Decker — Wed, 09 May 2018 05:36:33 GMT

Correct, and in the case of several users, you should use a list notation -

users.1.source "src1" users.1.selection "sel1" users.2.source "src2" users.2.selection "sel2" etc.

Robert.

Re: Add access-role argument help

Jason_Carrillo — Wed, 09 May 2018 14:02:39 GMT

Thank you Robert, I didn't realize that I would need this until you mentioned it. Thanks!

Re: Add access-role argument help

Jason_Carrillo — Wed, 09 May 2018 14:02:59 GMT

Boom, that's exactly what I was looking for. Thanks!