UpdateAdmissionRule
objectData for updating an admission rule
Rule logic or condition for the admission rule
Example:user.department == 'Engineering'
Human-readable name for the admission rule
Example:Engineering Department Access
Whether this rule includes time-based constraints
{
"name": "Engineering Department Access",
"rule": "user.department == 'Engineering'",
"hasTimeConstraint": false
}CreatePolicy
objectData required to create a new access policy
Array of group IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440000
Array of user IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440001
Array of device IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440002
Array of resource IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440003
Array of gateway IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440004
Admission rule ID for this policy
Example:550e8400-e29b-41d4-a716-446655440005
Human-readable name for the policy
Example:Engineering Team Access
Detailed description of the policy’s purpose and scope
Example:Allows engineering team to access development resources
Whether this policy applies to all groups
Default:false
Whether this policy applies to all users
Default:false
Whether this policy applies to all devices
Default:false
Whether this policy applies to all resources
Default:false
Array of source IP addresses or ranges
Example:192.168.1.0/24, 10.0.0.0/8
Type of resources this policy applies to
Allowed values:PRIVATESAASINTERNETSITETOSITE
Example:PRIVATE
Access mode for this policy
Allowed values:LOCALRESTRICTEDREMOTE
Example:LOCAL
Whether this policy allows (true) or denies (false) access
Example:true
{
"name": "Engineering Team Access",
"description": "Allows engineering team to access development resources",
"type": "PRIVATE",
"mode": "LOCAL",
"action": true,
"allGroups": false,
"allUsers": false,
"allDevices": false,
"allResources": false,
"groups": [
"550e8400-e29b-41d4-a716-446655440000"
],
"rule": "550e8400-e29b-41d4-a716-446655440005"
}PolicyGroup
objectGroup information within a policy context
Unique identifier for the group
Example:550e8400-e29b-41d4-a716-446655440000
Timestamp when the group was created
Example:2023-01-15T14:30:00Z
Timestamp when the group was last updated
Example:2023-01-15T14:30:00Z
Human-readable name for the group
Example:Engineering Team
Detailed description of the group’s purpose
Example:Team responsible for software development and engineering
Maximum number of devices allowed for this group
Example:10
Whether this is the default group for SAML users
Array of identity provider mapping identifiers
Example:engineering-team, dev-team
{
"id": "550e8400-e29b-41d4-a716-446655440000",
"createdAt": "2023-01-15T14:30:00Z",
"updatedAt": "2023-01-15T14:30:00Z",
"name": "Engineering Team",
"description": "Team responsible for software development and engineering",
"maxDevices": 10,
"isSamlDefaultGroup": false,
"idpMapping": [
"engineering-team",
"dev-team"
]
}PolicyUser
objectUser information within a policy context
Unique identifier for the user
Example:550e8400-e29b-41d4-a716-446655440000
Timestamp when the user was created
Example:2023-01-15T14:30:00Z
Timestamp when the user was last updated
Example:2023-01-15T14:30:00Z
Timestamp of the user’s last network connection
Example:2023-01-15T14:30:00Z
User’s email address
Example:jane.smith@company.com
Current status of the user account
Example:ACTIVE
User’s first name
Example:Jane
User’s last name
Example:Smith
Whether this user is the owner of the account
Maximum number of devices allowed for this user
Example:5
URL or path to the user’s profile image
Example:https://example.com/avatars/jane-smith.jpg
{
"id": "550e8400-e29b-41d4-a716-446655440000",
"createdAt": "2023-01-15T14:30:00Z",
"updatedAt": "2023-01-15T14:30:00Z",
"lastConnection": "2023-01-15T14:30:00Z",
"email": "jane.smith@company.com",
"status": "ACTIVE",
"firstName": "Jane",
"lastName": "Smith",
"isOwner": false,
"maxDevices": 5,
"image": "https://example.com/avatars/jane-smith.jpg"
}PolicyDevice
objectDevice information within a policy context
Unique identifier for the device
Example:550e8400-e29b-41d4-a716-446655440000
Timestamp when the device was created
Example:2023-01-15T14:30:00Z
Timestamp when the device was last updated
Example:2023-01-15T14:30:00Z
Human-readable name for the device
Example:John's MacBook Pro
Whether the device is currently active
Example:true
Timestamp of the device’s last network connection
Example:2023-01-15T14:30:00Z
Current operational status of the device
Allowed values:OnlineOfflineDeactivated
Example:Online
Unique hardware identifier for the device
Example:MAC-001122334455
Device posture information and compliance status
Example:{"compliant":true,"lastCheck":"2023-01-15T14:30:00Z"}
Version of the client application running on the device
Example:1.2.3
{
"id": "550e8400-e29b-41d4-a716-446655440000",
"createdAt": "2023-01-15T14:30:00Z",
"updatedAt": "2023-01-15T14:30:00Z",
"name": "John's MacBook Pro",
"active": true,
"lastConnection": "2023-01-15T14:30:00Z",
"status": "Online",
"hardwareId": "MAC-001122334455",
"posture": {
"compliant": true,
"lastCheck": "2023-01-15T14:30:00Z"
},
"appVersion": "1.2.3"
}