Check Point - Management API reference
where-used name "Host 1" indirect true details-level "uid" indirect-max-depth 5 --format json • "--format json" is optional. By default the output is presented in plain text.
Output
{ "used-directly" : { "total" : 2, "objects" : [ "f5c7640d-92eb-4c91-b7ad-c9c972ec31d6" ], "threat-prevention-rules" : [ ], "nat-rules" : [ ], "access-control-rules" : [ { "rule" : "6c4fc003-4a45-4a09-9438-b76745c55674", "position" : "2", "owner" : "f799c262-0942-4cb7-a7da-c5daed16b27b", "policy" : "21bef0f6-026d-4730-80b2-b8159a0bc11a", "layer" : "f799c262-0942-4cb7-a7da-c5daed16b27b", "layer-position" : 0, "package" : "68451b5c-c330-4b5c-a9f4-4c9ff97b7b2d" } ] }, "used-indirectly" : { "total" : 6, "objects" : [ "7a42b6fa-c0ab-4646-9f38-e6a75a2d1f65", "a991a0db-cf5b-4228-ab7f-3093f8018fae", "47f15ffc-a7ba-4a80-a58d-5a992c649c8e", "a652839f-2232-4db9-a444-b2f910fb0642", "d2ddc3ef-29bc-469b-ab6c-c469a778d31f" ], "threat-prevention-rules" : [ ], "nat-rules" : [ { "rule" : "774bafc8-38d9-4580-817e-14b0da4e605e", "position" : "1", "owner" : "20fd80bf-57f3-4c2b-8fa1-916f87375941", "policy" : "ed31f1cb-3f02-4bec-b29f-3814cc4f0e07", "package" : "68451b5c-c330-4b5c-a9f4-4c9ff97b7b2d" } ], "access-control-rules" : [ ] } }
You can see this scenario:
"Web Server" is part of Group "aaaa"
Group "aaaa" is part of group "bbbb"
indirect of "Web Server" is "bbbb"