CreateAdmissionRule
objectData required to create a new admission rule
Rule logic or condition for the admission rule
Example:user.department == 'Engineering'
Human-readable name for the admission rule
Example:Engineering Department Access
Whether this rule includes time-based constraints
AdmissionRule
objectComplete admission rule information with configuration and metadata
Unique identifier for the admission rule
Example:550e8400-e29b-41d4-a716-446655440000
Timestamp when the rule was created
Example:2023-01-15T10:30:00Z
Timestamp when the rule was last modified
Example:2023-01-15T10:30:00Z
Human-readable name for the admission rule
Example:Engineering Department Access
Type of admission rule (ALLOW, DENY, or CUSTOM)
Allowed values:ALLOWDENYCUSTOM
Example:ALLOW
Whether this rule includes time-based constraints
Rule logic or condition for the admission rule
Example:user.department == 'Engineering'
UpdateAdmissionRule
objectData for updating an admission rule
Rule logic or condition for the admission rule
Example:user.department == 'Engineering'
Human-readable name for the admission rule
Example:Engineering Department Access
Whether this rule includes time-based constraints
CreatePolicy
objectData required to create a new access policy
Array of group IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440000
Array of user IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440001
Array of device IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440002
Array of resource IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440003
Array of gateway IDs to apply this policy to
Example:550e8400-e29b-41d4-a716-446655440004
Admission rule ID for this policy
Example:550e8400-e29b-41d4-a716-446655440005
Human-readable name for the policy
Example:Engineering Team Access
Detailed description of the policy’s purpose and scope
Example:Allows engineering team to access development resources
Whether this policy applies to all groups
Default:false
Whether this policy applies to all users
Default:false
Whether this policy applies to all devices
Default:false
Whether this policy applies to all resources
Default:false
Array of source IP addresses or ranges
Example:192.168.1.0/24, 10.0.0.0/8
Type of resources this policy applies to
Allowed values:PRIVATESAASINTERNETSITETOSITE
Example:PRIVATE
Access mode for this policy
Allowed values:LOCALRESTRICTEDREMOTE
Example:LOCAL
Whether this policy allows (true) or denies (false) access
Example:true
PolicyGroup
objectGroup information within a policy context
Unique identifier for the group
Example:550e8400-e29b-41d4-a716-446655440000
Timestamp when the group was created
Example:2023-01-15T14:30:00Z
Timestamp when the group was last updated
Example:2023-01-15T14:30:00Z
Human-readable name for the group
Example:Engineering Team
Detailed description of the group’s purpose
Example:Team responsible for software development and engineering
Maximum number of devices allowed for this group
Example:10
Whether this is the default group for SAML users
Array of identity provider mapping identifiers
Example:engineering-team, dev-team