openapi: 3.2.0 info: termsOfService: http://developer.centrify.com/license title: Centrify Identity Platform Resource Management API version: 23.1.261-447315 description: This site provides basic reference material for the Centrify Identity Platform API. tags: - description: Manage resources and accounts for CPS name: Resource Management paths: /Aws/AddAccessKey: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AccessKeyId: type: string description: The AWS access key ID. AccountId: type: string description: The PAS account ID of the IAM user. SecretAccessKey: type: string description: The AWS secret access key. required: - AccessKeyId - AccountId - SecretAccessKey type: object required: true x-centrify-anon: false description: The access key must already exist in AWS. summary: Add an AWS Access Key and Secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsAddAccessKey' operationId: postAwsAddAccessKey x-operation-id-source: derived /Aws/DeleteAccessKey: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload23' x-centrify-anon: false description: The key is removed from PAS, but the access key in AWS is uneffected. summary: Deletes an access key for an IAM user responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsDeleteAccessKey' operationId: postAwsDeleteAccessKey x-operation-id-source: derived /Aws/DeployConnector: post: tags: - Resource Management requestBody: content: application/json: schema: properties: KeyPairName: type: string description: The AWS key pair name to assign when launching instance. Region: type: string description: The AWS region to launch instance. SecurityGroupId: type: string description: The AWS security group ID to attach to the instance. If not specified one will be created InstanceName: type: string description: The value for the Name tag for the instance IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. VpcId: type: string description: The AWS VPC when launching instance. InstanceProfileArn: type: string description: ARN of an instance profile associated with an IAM role for the instance AmiId: type: string description: The AmiId of the desired windows instance CloudProviderId: type: string description: The database ID of the cloud provider. required: - KeyPairName - Region - CloudProviderId type: object required: true x-centrify-anon: false summary: Launch an Ec2 instance and install a connector registered to this tenant responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsDeployConnector' operationId: postAwsDeployConnector x-operation-id-source: derived /Aws/GetAccessKeys: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The database ID for the IAM user. required: - ID type: object required: true x-centrify-anon: false summary: Gets Access Keys for an IAM user responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetAccessKeys' operationId: postAwsGetAccessKeys x-operation-id-source: derived /Aws/GetAvailabilityZones: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Region: type: string description: The AWS region of interest. IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - Region - CloudProviderId type: object required: true x-centrify-anon: false summary: Get a List of all AWS availability zones in a given region responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetAvailabilityZones' operationId: postAwsGetAvailabilityZones x-operation-id-source: derived /Aws/GetCentrifyAwsAccountInfo: post: tags: - Resource Management x-centrify-anon: false summary: Get the Centrify AWS Account ID and External ID for the tenant responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetCentrifyAwsAccountInfo' operationId: postAwsGetCentrifyAwsAccountInfo x-operation-id-source: derived /Aws/GetConnectorsForRegions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload2' x-centrify-anon: false summary: Get a list of VPC's along with information about connector(s) servicing the VPC responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetConnectorsForRegions' operationId: postAwsGetConnectorsForRegions x-operation-id-source: derived /Aws/GetEc2IamRoles: post: tags: - Resource Management requestBody: content: application/json: schema: properties: IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. CloudProviderId: type: string description: The database ID of the cloud provider. required: - CloudProviderId type: object required: true x-centrify-anon: false summary: Get a list of all roles for EC2 instances responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetEc2IamRoles' operationId: postAwsGetEc2IamRoles x-operation-id-source: derived /Aws/GetKeyPairs: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Region: type: string description: The AWS region to launch instance. IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - Region - CloudProviderId type: object required: true x-centrify-anon: false summary: Get a List of all ssh keypairs in a given region responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetKeyPairs' operationId: postAwsGetKeyPairs x-operation-id-source: derived /Aws/GetRegionNames: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload24' x-centrify-anon: false summary: Get region names responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetRegionNames' operationId: postAwsGetRegionNames x-operation-id-source: derived /Aws/GetRegions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload24' x-centrify-anon: false summary: Get a List of all aws regions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetRegions' operationId: postAwsGetRegions x-operation-id-source: derived /Aws/GetSecurityGroups: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Region: type: string description: The AWS region. IncludeDeploymentSecurityGroup: type: string description: If true, return a place-holder security group for connector deployment even if it does not yet exist. IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. VpcId: type: string description: The AWS VpcId in which to list security groups. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - Region - IncludeDeploymentSecurityGroup - VpcId - CloudProviderId type: object required: true x-centrify-anon: false summary: Get a list of all security groups in a region responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetSecurityGroups' operationId: postAwsGetSecurityGroups x-operation-id-source: derived /Aws/GetSubnets: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Region: type: string description: The AWS region of the VPC. IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. VpcId: type: string description: The AWS VpcId in which to list subnets. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - Region - VpcId - CloudProviderId type: object required: true x-centrify-anon: false summary: Get a list of all subnets in a given VPC responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetSubnets' operationId: postAwsGetSubnets x-operation-id-source: derived /Aws/GetSubnetsForRegions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload2' x-centrify-anon: false summary: Get a list of all subnets in a specified list of regions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetSubnetsForRegions' operationId: postAwsGetSubnetsForRegions x-operation-id-source: derived /Aws/GetVpcs: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Region: type: string description: The AWS region. IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - Region - CloudProviderId type: object required: true x-centrify-anon: false summary: Get a list of all VPC's in a given region responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsGetVpcs' operationId: postAwsGetVpcs x-operation-id-source: derived /Aws/ImportAccessKey: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload17' x-centrify-anon: false description: This will create the cloud provider and IAM user of the access key if they do not already exist. summary: Import AWS Access Key and Secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsImportAccessKey' operationId: postAwsImportAccessKey x-operation-id-source: derived /Aws/RetrieveAccessKey: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload23' x-centrify-anon: false summary: Retrieve an access key ID and secret access key for an IAM user responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsRetrieveAccessKey' operationId: postAwsRetrieveAccessKey x-operation-id-source: derived /Aws/VerifyAccessKey: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload17' x-centrify-anon: false summary: Verify an AWS Access Key and Secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsVerifyAccessKey' operationId: postAwsVerifyAccessKey x-operation-id-source: derived /Aws/VerifyAccessKeyForUserAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AccessKeyId: type: string description: The AWS access key. UserName: type: string description: The IAM user name. If not provided, only the CloudProviderId will be validated. SecretAccessKey: type: string description: The AWS access secret. CloudProviderId: type: string description: The Cloud Provider that will use this access key. required: - AccessKeyId - SecretAccessKey - CloudProviderId type: object required: true x-centrify-anon: false summary: Verify an AWS Access Key and Secret for an IAM User name and Cloud Provider responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsVerifyAccessKeyForUserAccount' operationId: postAwsVerifyAccessKeyForUserAccount x-operation-id-source: derived /Aws/VerifyAssumeRoleConfiguration: post: tags: - Resource Management requestBody: content: application/json: schema: properties: RoleArn: type: string description: The AWS role to assume. CloudProviderId: type: string description: The database ID of the cloud provider. required: - RoleArn - CloudProviderId type: object required: true x-centrify-anon: false summary: Verify assume role configuration responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsVerifyAssumeRoleConfiguration' operationId: postAwsVerifyAssumeRoleConfiguration x-operation-id-source: derived /Aws/VerifySqsQueueConfiguration: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Region: type: string description: The AWS region for the queue. QueueUrl: type: string description: The URL of the queue IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. CloudProviderId: type: string description: The database ID of the cloud provider. required: - Region - QueueUrl - CloudProviderId type: object required: true x-centrify-anon: false summary: Verify SQS queue configuration responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/AwsVerifySqsQueueConfiguration' operationId: postAwsVerifySqsQueueConfiguration x-operation-id-source: derived /CloudProvider/AddCloudProvider: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ExternalId: type: string description: The external ID to be used with the RoleArn Type: type: string description: The type of the cloud provider. Supported values are 'Aws'. RoleArn: type: string description: The ARN of an AWS role used for access account resources Description: type: string description: The description of the cloud provider Name: type: string description: The name of the cloud provider required: - Type - Name type: object required: true x-centrify-anon: false summary: AddCloudProvider - Adds a cloud provider responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderAddCloudProvider' operationId: postCloudProviderAddCloudProvider x-operation-id-source: derived /CloudProvider/DeleteCloudProvider: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload22' x-centrify-anon: false summary: DeleteCloudProvider - Deletes a cloud provider responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderDeleteCloudProvider' operationId: postCloudProviderDeleteCloudProvider x-operation-id-source: derived /CloudProvider/DeleteCloudProviders: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SecretName: type: string description: Name of secret for account passwords SetQuery: type: string description: Set identifier or sql query for cloud providers to be deleted Ids: items: type: string type: array description: List of Ids for the cloud providers to be deleted SaveToSecrets: type: boolean description: Choose to save passwords for cloud providers accounts to a csv secret file RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. type: object required: true x-centrify-anon: false description: 'Creates a asynchronous operation which will delete all cloud providers and associate accounts in the background. You must be a system administrator or have ''Delete'' permission on the cloud providers. Must provide either Ids or SetQuery for request.' summary: Creates a asynchronous operation which will delete all cloud providers responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderDeleteCloudProviders' operationId: postCloudProviderDeleteCloudProviders x-operation-id-source: derived /CloudProvider/GetAllCloudProviders: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload25' x-centrify-anon: false summary: GetAllCloudProviders - Gets all cloud providers responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderGetAllCloudProviders' operationId: postCloudProviderGetAllCloudProviders x-operation-id-source: derived /CloudProvider/GetCloudProvider: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload22' x-centrify-anon: false summary: GetCloudProvider - Gets a cloud provider responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderGetCloudProvider' operationId: postCloudProviderGetCloudProvider x-operation-id-source: derived /CloudProvider/GetCloudProviderCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload26' x-centrify-anon: false summary: Gets list of grants associated with a set of cloud providers responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderGetCloudProviderCollectionPermissions' operationId: postCloudProviderGetCloudProviderCollectionPermissions x-operation-id-source: derived /CloudProvider/GetCloudProviderPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the cloud provider RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets list of grants associated with a cloud provider responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderGetCloudProviderPermissions' operationId: postCloudProviderGetCloudProviderPermissions x-operation-id-source: derived /CloudProvider/SetCloudProviderCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the cloud provider set Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, Retrieve, None' Principal: type: string description: User name or role name PType: type: string description: 'Principal type: User, Role' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the cloud provider set. summary: Grant permissions on cloud provider sets responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderSetCloudProviderCollectionPermissions' operationId: postCloudProviderSetCloudProviderCollectionPermissions x-operation-id-source: derived /CloudProvider/SetCloudProviderPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the cloud provider Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, Retrieve, None' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, Retrieve, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the cloud provider. summary: Grant permissions on cloud providers responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderSetCloudProviderPermissions' operationId: postCloudProviderSetCloudProviderPermissions x-operation-id-source: derived /CloudProvider/UpdateCloudProvider: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ExternalId: type: string description: The external ID to be used with the RoleArn ID: type: string description: The ID of the cloud provider. Type: type: string description: The type of the cloud provider. Supported values are 'Aws'. RoleArn: type: string description: The ARN of an AWS role used for access account resources Description: type: string description: The description of the cloud provider Name: type: string description: The name of the cloud provider required: - ID - Type type: object required: true x-centrify-anon: false summary: UpdateCloudProvider - Updates a cloud provider responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CloudProviderUpdateCloudProvider' operationId: postCloudProviderUpdateCloudProvider x-operation-id-source: derived /Collection/GetCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the collection, set to null to get global permissions required: - ID type: object required: true x-centrify-anon: false summary: Get list of permissions associated with a set responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CollectionGetCollectionPermissions' operationId: postCollectionGetCollectionPermissions x-operation-id-source: derived /Collection/SetCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the collection, Set to null for global permissions Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc..' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Grant, Edit.. ' required: - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the collection or have global 'Grant' permission on collections. summary: Grant permissions on a set responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CollectionSetCollectionPermissions' operationId: postCollectionSetCollectionPermissions x-operation-id-source: derived /CssIntegration/DzdoExecute: post: tags: - Resource Management requestBody: content: application/json: schema: properties: device_type: type: string description: The type of device to execute the Dzdo authentication challenge. required: - device_type type: object required: true x-centrify-anon: false summary: Execute the Dzdo authentication challenge responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CssIntegrationDzdoExecute' operationId: postCssIntegrationDzdoExecute x-operation-id-source: derived /CssIntegration/GetChallengeProfiles: post: tags: - Resource Management x-centrify-anon: false summary: Get the Dzdo and the Mfa challenge profile ids responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CssIntegrationGetChallengeProfiles' operationId: postCssIntegrationGetChallengeProfiles x-operation-id-source: derived /CssIntegration/MfaLogin: post: tags: - Resource Management requestBody: content: application/json: schema: properties: device_type: type: string description: The type of device to execute the Mfa authentication challenge. required: - device_type type: object required: true x-centrify-anon: false summary: Execute the Mfa authentication challenge responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CssIntegrationMfaLogin' operationId: postCssIntegrationMfaLogin x-operation-id-source: derived /CssIntegration/SetChallengeProfiles: post: tags: - Resource Management requestBody: content: application/json: schema: properties: MfaChallenge: type: string description: The Mfa challenge profile id. DzdoChallenge: type: string description: The Dzdo challenge profile id. required: - MfaChallenge - DzdoChallenge type: object required: true x-centrify-anon: false summary: Sets the Dzdo and the Mfa challenge profile id responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/CssIntegrationSetChallengeProfiles' operationId: postCssIntegrationSetChallengeProfiles x-operation-id-source: derived /DashAccount/AddDiscoveryProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: NameMapping: type: string description: A pipe delimited list of discovery account name mappings. DashAccountOUs: items: type: string type: array description: The discovery profile account organizational units. DashAccountGroups: type: object description: The discovery profile account groups. Domains: items: type: object type: array description: The discovery profile list of domains. Description: type: string description: The discovery profile description. Name: type: string description: The discovery profile name. required: - NameMapping - Name type: object required: true x-centrify-anon: false summary: Adds an alternate account discovery profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountAddDiscoveryProfile' operationId: postDashAccountAddDiscoveryProfile x-operation-id-source: derived /DashAccount/CancelDiscovery: post: tags: - Resource Management x-centrify-anon: false summary: Cancel all running Alternate Account Discovery jobs responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountCancelDiscovery' operationId: postDashAccountCancelDiscovery x-operation-id-source: derived /DashAccount/ClearOwnerAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: PVID: type: string description: The unique identifier of the alternate account. required: - PVID type: object required: true x-centrify-anon: false summary: Clear owner account set on the alternate account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountClearOwnerAccount' operationId: postDashAccountClearOwnerAccount x-operation-id-source: derived /DashAccount/CommitDiscoveredAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The unique identifier of the alternate account to commit. ProposedOwnerUuid: type: string description: The proposed discovery account owner unique identifier. DiscoveredAccountUuid: type: string description: The discovered account unique identifier. required: - ID - ProposedOwnerUuid - DiscoveredAccountUuid type: object required: true x-centrify-anon: false summary: Commit a discovered alternate account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountCommitDiscoveredAccount' operationId: postDashAccountCommitDiscoveredAccount x-operation-id-source: derived /DashAccount/CommitDiscoveredAccounts: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DiscoveredAccounts: items: properties: ID: type: string description: The ID in the pending accounts table. Cannot be empty. ProposedOwnerUuid: type: string description: The proposed owner unique identifier. DiscoveredAccountUuid: type: string description: The discovered account unique identifier. type: object description: A proposed discover account. type: array description: A list of discovered alternate accounts. DiscoveredAccountType: default: None type: string description: A discovery account type (None, StronglyMatched, WeaklyMatched, NoMatched). required: - DiscoveredAccounts type: object required: true x-centrify-anon: false summary: Commit a list of discovered alternate accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountCommitDiscoveredAccounts' operationId: postDashAccountCommitDiscoveredAccounts x-operation-id-source: derived /DashAccount/DeleteDiscoveredAccounts: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload27' x-centrify-anon: false summary: Deletes a list of alternate account discovery profiles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountDeleteDiscoveredAccounts' operationId: postDashAccountDeleteDiscoveredAccounts x-operation-id-source: derived /DashAccount/DeleteDiscoveryProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: A discovery profile id. force: type: string description: Cancel the job if its running before deleting the discovery profile. required: - ID - force type: object required: true x-centrify-anon: false summary: Delete an alternate account discovery profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountDeleteDiscoveryProfile' operationId: postDashAccountDeleteDiscoveryProfile x-operation-id-source: derived /DashAccount/GetDiscoveryProfile: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload19' x-centrify-anon: false summary: Gets an alternate account discovery profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountGetDiscoveryProfile' operationId: postDashAccountGetDiscoveryProfile x-operation-id-source: derived /DashAccount/GetDiscoveryProfiles: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload25' x-centrify-anon: false summary: Gets a list of alternate account discovery profiles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountGetDiscoveryProfiles' operationId: postDashAccountGetDiscoveryProfiles x-operation-id-source: derived /DashAccount/GetMyDashAAccountsWithCheckout: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AccountFilter: type: string description: Search filter for accounts. type: object required: true x-centrify-anon: false summary: Get the current user's dash A accounts that they can checkout responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountGetMyDashAAccountsWithCheckout' operationId: postDashAccountGetMyDashAAccountsWithCheckout x-operation-id-source: derived /DashAccount/GetProfileRights: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The alternate account discovery profile unique identifier. required: - ID type: object required: true x-centrify-anon: false summary: Gets the current user rights of the alternate account discovery profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountGetProfileRights' operationId: postDashAccountGetProfileRights x-operation-id-source: derived /DashAccount/RunDiscovery: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload27' x-centrify-anon: false summary: Starts a job for each of the alternate account discovery profile ids provided responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountRunDiscovery' operationId: postDashAccountRunDiscovery x-operation-id-source: derived /DashAccount/SetDiscoveryProfilePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The alternate account discovery profile unique identifier. Grants: items: type: string type: array description: A list of rights to grant. required: - ID - Grants type: object required: true x-centrify-anon: false summary: Set alternate account discovery profile permissions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountSetDiscoveryProfilePermissions' operationId: postDashAccountSetDiscoveryProfilePermissions x-operation-id-source: derived /DashAccount/UpdateDiscoveredAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The discovery account unique identifier. ProposedOwnerId: type: string description: The proposed discovery account owner unique identifier. DiscoveredAccountId: type: string description: The discovery account unique identifier. ProposedOwnerDirectoryServiceUuid: type: string description: The proposed directory service unique identifier. ProposedOwnerName: type: string description: The proposed discovery account owner name. required: - ID - ProposedOwnerId - DiscoveredAccountId - ProposedOwnerDirectoryServiceUuid - ProposedOwnerName type: object required: true x-centrify-anon: false summary: Changes the discovery account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountUpdateDiscoveredAccount' operationId: postDashAccountUpdateDiscoveredAccount x-operation-id-source: derived /DashAccount/UpdateDiscoveryProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: NameMapping: type: string description: A pipe delimited list of discovery account name mappings. ID: type: string description: A discovery profile id. DashAccountOUs: items: type: string type: array description: The discovery profile account organizational units. DashAccountGroups: type: object description: The discovery profile account groups. Domains: items: type: object type: array description: The discovery profile list of domains. Description: type: string description: The discovery profile description. Name: type: string description: The discovery profile name. required: - NameMapping - ID - Name type: object required: true x-centrify-anon: false description: A discovery profile identifier is required. It can be referenced as ID or _RowKey. summary: Update an alternate account discovery profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DashAccountUpdateDiscoveryProfile' operationId: postDashAccountUpdateDiscoveryProfile x-operation-id-source: derived /Discovery/AddDiscoveryAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Account: properties: Password: type: string description: The discovery account password. Account: type: string description: The local account used to access the target system. Description: type: string description: The discovery account description. Name: type: string description: The discovery account name. type: object description: The discovery account to add. required: - Account type: object required: true x-centrify-anon: false summary: Add a discovery account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryAddDiscoveryAccount' operationId: postDiscoveryAddDiscoveryAccount x-operation-id-source: derived /Discovery/AnyDiscoveryAccountsReferenced: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AccountIds: items: type: string description: An id. type: array description: A list of discovery account ids. required: - AccountIds type: object required: true x-centrify-anon: false summary: Are any discovery accounts referenced responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryAnyDiscoveryAccountsReferenced' operationId: postDiscoveryAnyDiscoveryAccountsReferenced x-operation-id-source: derived /Discovery/DeleteBlacklistedComputer: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The computer ID. required: - ID type: object required: true x-centrify-anon: false summary: Delete a blacklisted computer responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryDeleteBlacklistedComputer' operationId: postDiscoveryDeleteBlacklistedComputer x-operation-id-source: derived /Discovery/DeleteDiscoveryAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The id of the discovery account to delete. required: - ID type: object required: true x-centrify-anon: false summary: Delete a discovery account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryDeleteDiscoveryAccount' operationId: postDiscoveryDeleteDiscoveryAccount x-operation-id-source: derived /Discovery/DeleteExcludedAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: A host profile id. required: - ID type: object required: true x-centrify-anon: false summary: Delete a host from the excluded discovery list responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryDeleteExcludedAccount' operationId: postDiscoveryDeleteExcludedAccount x-operation-id-source: derived /Discovery/GetDiscoveryProfilePermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload19' x-centrify-anon: false summary: Get discovery profile permissions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryGetDiscoveryProfilePermissions' operationId: postDiscoveryGetDiscoveryProfilePermissions x-operation-id-source: derived /Discovery/GetExcludedAccounts: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload25' x-centrify-anon: false summary: Get a list of hosts excluded from discovery responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryGetExcludedAccounts' operationId: postDiscoveryGetExcludedAccounts x-operation-id-source: derived /Discovery/GetHistory: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DaysCount: default: 30 type: integer description: How many days of history to get. RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Get discovery job history responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryGetHistory' operationId: postDiscoveryGetHistory x-operation-id-source: derived /Discovery/GetReferencedVpcs: post: tags: - Resource Management x-centrify-anon: false summary: Gets list of referenced VPC's responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryGetReferencedVpcs' operationId: postDiscoveryGetReferencedVpcs x-operation-id-source: derived /Discovery/GetVpcName: post: tags: - Resource Management requestBody: content: application/json: schema: properties: VpcIdentifier: type: string description: The identifier for the VPC. required: - VpcIdentifier type: object required: true x-centrify-anon: false summary: Get the name of a VPC responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryGetVpcName' operationId: postDiscoveryGetVpcName x-operation-id-source: derived /Discovery/SetDiscoveryProfilePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: A discovery profile id. Grants: items: properties: Rights: type: string description: The right. Principal: type: string description: The user name. PrincipalId: type: string description: The user id. PType: type: string description: The principal type -- User. type: object description: A right. type: array description: What rights to grant. required: - ID - Grants type: object required: true x-centrify-anon: false summary: Set discovery profile permissions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoverySetDiscoveryProfilePermissions' operationId: postDiscoverySetDiscoveryProfilePermissions x-operation-id-source: derived /Discovery/UpdateDiscoveryAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Account: properties: Password: type: string description: The discovery account password. _RowKey: type: string description: The discovery account unique identifier. Account: type: string description: The local account used to access the target system. Description: type: string description: The discovery account description. Name: type: string description: The discovery account name. type: object description: The discovery account to update. required: - Account type: object required: true x-centrify-anon: false summary: Update a discovery account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/DiscoveryUpdateDiscoveryAccount' operationId: postDiscoveryUpdateDiscoveryAccount x-operation-id-source: derived /PrivilegeElevation/CanManagePrivilegeElevation: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ScopeType: type: string description: 'whether to check if requester can manage privilege elevation in a system/system set. Valid values are: "System", "Collection"' Scope: type: string description: Identity of system/system set. If "ScopeType" is "System", specifies UUID of the requested system. If "ScopeType" is "Collection", specifies UUID of collection. required: - ScopeType type: object required: true x-centrify-anon: false summary: Check if requester can Manage Assignment responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCanManagePrivilegeElevation' operationId: postPrivilegeElevationCanManagePrivilegeElevation x-operation-id-source: derived /PrivilegeElevation/GetAssignmentsByScope: post: tags: - Resource Management requestBody: content: application/json: schema: properties: CommandId: type: string description: If specified, only return privilege elevation assignments for privilege elevation command with this ID. You cannot specify both Command and CommandId ScopeType: type: string description: "Specifies whether to search for privilege elevation assignments that are effective on system set or a specific system. Specify:\n \"Collection\" to search for all privilege elevation assignments that are effective for the system set specified in \"Scope\".\n \"System\" to search for all privilege elevation assignments that are effective for the system specified in \"Scope\"" Scope: type: string description: "scope of rule. Values:\n 1. If \"ScopeType\" is \"Collection\", UUID of collection should be specified.\n 2. If \"ScopeType\" is \"System\", UUID of system should be specified." Command: type: string description: If specified, only return privilege elevation assignment for this privilege elevation command name. You cannot specify both Command and CommandId Inherit: default: false type: boolean description: Use inheritance. required: - ScopeType type: object required: true x-centrify-anon: false description: '1. "Starts" and "Expires" are returned only if there is any value in the assignment. 2. UI can call this UI to enumerate all the effective privilege elevation assignments on a system/system set. 3. If neither "Command" or "CommandId" is specified, this function returns ALL effective privilege elevation assignments on a system/system set.' summary: Enumerate all privilege elevation assignments that are effective for a specific… responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationGetAssignmentsByScope' operationId: postPrivilegeElevationGetAssignmentsByScope x-operation-id-source: derived /PrivilegeElevation/GetChallenges: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload16' x-centrify-anon: false summary: Get Challenges for privilege elevation to a System responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationGetChallenges' operationId: postPrivilegeElevationGetChallenges x-operation-id-source: derived /PrivilegeElevation/GetCommands: post: tags: - Resource Management requestBody: content: application/json: schema: properties: System: type: string description: name or UUID of target machine that the privilege command will run on. TargetOS: type: string description: OS platform for the requested system. Only 'Windows' and 'Linux' are supported User: type: string description: UPN of user who requests to run the privilege command required: - System - User type: object required: true x-centrify-anon: false description: '1. Since this is a Read/Query operation, HTTP Get method is used. 2. In version 1, both "System" and "User" are required parameters. This allows us to narrow the search for specify user on specify computers. We may relax this to support "all" in "System" and "User" in future. However, we need to consider the performance/scalability implications when there are thousands of computers and thousands of users. 3. In future versions, additional information about each rule will be returned as key/value pairs in each item. Example of such information includes umask settings, required checksum/signature of the executable etc. 4. The caller can be a machine service account or an authenticated user. a. If the caller is the machine service account, the request is sent from cagent. The request is allowed only when the caller is the machine service account for "system". This means that the administrator of one client system cannot find out what is available as privilege elevation commands on another system.' summary: Returns list of allowed privilege elevation commands for a specific user on a… responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationGetCommands' operationId: postPrivilegeElevationGetCommands x-operation-id-source: derived /PrivilegeElevation/SubmitWorkFlowRequest: post: tags: - Resource Management requestBody: content: application/json: schema: properties: args: properties: RequestedOptions: properties: AssignmentType: type: string description: type of assignment. Must be one of "temp", "perm" or "window" ScopeType: type: string description: Scope of requested privilege elevation assignment. Must be "System" or "Collection" Ticket: type: string description: associated ticket information CommandID: type: string description: UUID of privilege elevation command to request Scope: type: string description: Name of the system or collection where privilege elevation command is requested. StartGrantValue: type: integer description: number of StartTimeInterval units when assignment starts after approval. Used when "AssignmentType" is "temp" EndTime: type: string description: time when assignment ends. Specifies as "YYYY-MM-DDThh:mm:ss.000Z". Used when "AssignmentType" is "window" StartTimeInterval: type: integer description: unit for assignment starts after approval in minutes. Specify 60 for hour, 1440 for day. Used when "AssignmentType" is "temp" EndTimeInterval: type: integer description: unit for assignment duration in minutes. Specify 60 for hour, 1440 for day. Used when "AssignmentType" is "temp" StartTime: type: string description: time when assignment starts. Specifies as "YYYY-MM-DDThh:mm:ss.000Z". Used when "AssignmentType" is "window" RunAsUser: type: string description: Name of runAs user EndGrantValue: type: integer description: number of EndTimeInterval units for duration. Used when "AssignmentType" is "temp" AccessType: type: string description: access type IsCommandCollection: type: boolean description: Whether the "Command" requested is a collection. type: object description: options about the request Reason: type: string description: reason for the request type: object description: arguments for the job User: type: string description: UPN of user who requests the workflow approval request required: - args - User type: object required: true x-centrify-anon: false description: '1. This is similar to REST API JobFlow/StartJob. The difference is that the caller of this API must be the service account of a client, and the actual user is specified in the "User" parameter in the payload. Internally, this function validates the input parameters and then runs the job script as the actual user who requests the workflow request. This allows the same job script to be used when we allow the user to submit the workflow request from UI portal, where JobFlow/StartJob API is used to start the job. 2. CommandID is used to identify the command instead of command name. The reason is that the command name maybe I18N already so may not be easily handled by Linux systems which use UTF-8 instead of simple UCS-2 as in windows... When we support user selection of commands to request workflow request on, the backend should send out a list of names with UUID. The UI displays the name and let user to select the item. The sudo plugin needs to return the corresponding UUID. 3. Using collection as scope type is not supported yet in v1.' summary: Initiate a privilege elevation workflow request responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationSubmitWorkFlowRequest' operationId: postPrivilegeElevationSubmitWorkFlowRequest x-operation-id-source: derived /PrivilegeElevationCommand/Add: post: tags: - Resource Management requestBody: content: application/json: schema: properties: MatchingCriteria: properties: UseRegex: type: boolean description: Whether do Regex matching for the pattern, default as true, false means do Glob matching Path: type: string description: Specify the PATH for the command matching, may be "system_path" as standard system paths, "user_path" as standard user paths, "search_path" as standard system search paths, or other customerized paths type: object description: An object of additional criteria for CommandPattern matching CommandPattern: type: string description: A pattern expression to be matched against the privilege command request, only the matched ones are allowed to run ApplyTo: type: string description: Centrify Client platforms that this privilege elevation command applies to. Valid values are "Windows", "Linux" and "Windows, Linux" RunAsUser: type: string description: Allowed run as user for such command, will always pass "run as user" check if unset, with cloud user in UPN format, local user in "username@localhost" format Priority: type: integer description: An integer to determine which Privilege Elevation Command prevails if found multiple matches Description: type: string description: command description Name: type: string description: name of privilege elevation command required: - CommandPattern - ApplyTo - Name type: object required: true x-centrify-anon: false description: '1. NO NEED TO EXPOSE THIS IN V1 AS THERE IS NO NEED TO CREATE/MODIFY NEW PRIVILEGE ELEVATION COMMAND IN V1. However, it is implemented for use in testing. 2. Additional optional parameters will be added in V2.' summary: Create a new privilege elevation command responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandAdd' operationId: postPrivilegeElevationCommandAdd x-operation-id-source: derived /PrivilegeElevationCommand/AddAssignment: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ScopeType: type: string description: Whether the assignment is for a system or a system set. Specifies "Collection", or "System" Scope: type: string description: "Scope of this assignment.\n If \"ScopeType\" is \"System\", specifies UUID of system.\n If \"ScopeType\" is \"Collection\", specifies UUID of system set." PrivilegeElevationCommand: type: string description: UUID of privilege elevation command returned in PrivilegeElevationCommand/Add REST API Expires: type: string description: "If the permission to execute is temporary, specifies the expiration time in ISO 8601 format. \n Example: 2020-10-21T15:09:10Z. Note that the caller has to convert the time to UTC. " Starts: type: string description: "If the permission to execute is temporary, specifies the start time in ISO 8601 format. \n Example: 2020-10-21T15:09:10Z. Note that the caller has to convert the time to UTC. " Principal: type: string description: Name of user/group/role in assignment. Either "PrincipalId" or "Principal" must be specified. PrincipalId: type: string description: UUID of user/group/role in assignment. Either "PrincipalId" or "Principal" must be specified. BypassChallenge: default: false type: boolean description: Whether user can execute the privilege elevation command without challenge PrincipalType: type: string description: 'Principal type. Supported values: "User", "Group", "Role"' required: - ScopeType - PrivilegeElevationCommand - PrincipalType type: object required: true x-centrify-anon: false description: '1. In v1, there is only one privilege elevation command. 2. If additional columns are added to privilegeelevationassignment table in future for whatever reasons, they need to be optional columns and will be specified as additional optional parameters to this API. 3. In v2, a new API will be added to grant user/group/role permission to run commands specified in a privilege elevation command collection. 4. When adding permanent privilege elevation assignments (i.e., "Starts" and "Expires" are not specified), the REST API checks if there is any existing permanent privilege elevation assignment for the same command to the same principal and scope already exists, and throws an exception if it finds out. However, no distributed lock is taken for this check due to performance reason. So, there is still a slight chance that it may not catch this unusual case. However, this situation is handled by privilege elevation. It will calculate the effective permission based on all matching entries. 5. Note that it is legal to have multiple temporary privilege elevation asignments for the same command to the same principal and scope. 6. There is no support for dynamic system set.' summary: Grant privilege elevation command to user/role/group responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandAddAssignment' operationId: postPrivilegeElevationCommandAddAssignment x-operation-id-source: derived /PrivilegeElevationCommand/Delete: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: Unique ID of privilege elevation command. Either Name or ID must be specified. Name: type: string description: name of privilege elevation command. Either Name or ID must be specified. type: object required: true x-centrify-anon: false summary: Delete a privilege elevation command responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandDelete' operationId: postPrivilegeElevationCommandDelete x-operation-id-source: derived /PrivilegeElevationCommand/DeleteAssignment: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The ID of the privilege elevation assignment to delete required: - ID type: object required: true x-centrify-anon: false description: This API deletes the specific privilege elevation assignment. The caller should call GetAssignment to get the list of privilege elevation assignment(s) and call this API for each one. summary: Delete privilege elevation assignment responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandDeleteAssignment' operationId: postPrivilegeElevationCommandDeleteAssignment x-operation-id-source: derived /PrivilegeElevationCommand/GetAssignments: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ScopeType: type: string description: whether the assignment is for a system or a system set. Must be Collection, or System Scope: type: string description: "scope of rule. Values:\n 1. If \"ScopeType\" is \"Collection\", UUID of collection should be specified.\n 2. If \"ScopeType\" is \"System\", UUID of system should be specified." PrivilegeElevationCommand: type: string description: UUID of privilege elevation command Principal: type: string description: Name of user/role/group in assignment. Either "PrincipalId" or "Principal" must be specified. PrincipalId: type: string description: UUID of user/role/group in assignment. Either "PrincipalId" or "Principal" must be specified. PrincipalType: type: string description: 'Principal type. Supported values: "User", "Group", "Role"' required: - ScopeType - PrivilegeElevationCommand - PrincipalType type: object required: true x-centrify-anon: false description: '1. If the "Principal" user has no permission to run the command, nothing is returned. 2. Usually only one entry is returned. However, it is possible that multiple entries may be returned. One example is that the user may have both a permanent and temporary grants, or multiple temporary grants. The caller has to figure out what to do with multiple results. 3. If new columns are added in future releases, they will be returned as new optional properties. 4. Note that this API does not take into account of inheritance. It only returns the assignments that are explicitly assigned to the requested user/principal and scope. Use ListAssignments to get all the effective assignments, including ones from inheritance.' summary: Get privilege elevation assignments that are explicitly granted responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandGetAssignments' operationId: postPrivilegeElevationCommandGetAssignments x-operation-id-source: derived /PrivilegeElevationCommand/GetPrivilegeElevationCommandCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload26' x-centrify-anon: false summary: Gets list of grants associated with a set of Privilege Elevation Commands responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandGetPrivilegeElevationCommandCollectionPermissions' operationId: postPrivilegeElevationCommandGetPrivilegeElevationCommandCollectionPermissions x-operation-id-source: derived /PrivilegeElevationCommand/GetPrivilegeElevationCommandPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the Privilege Elevation Command RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets list of grants associated with a Privilege Elevation Command responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandGetPrivilegeElevationCommandPermissions' operationId: postPrivilegeElevationCommandGetPrivilegeElevationCommandPermissions x-operation-id-source: derived /PrivilegeElevationCommand/ListAssignments: post: tags: - Resource Management requestBody: content: application/json: schema: properties: CommandId: type: string description: If specified, only return privilege elevation assignments for privilege elevation command with this ID. You cannot specify both Command and CommandId Command: type: string description: If specified, only return privilege elevation assignment for this privilege elevation command name. You cannot specify both Command and CommandId type: object required: true x-centrify-anon: false description: 1. "Starts" and "Expires" are returned only if there is any value in the assignment. summary: Enumerate privilege elevation assignments associated with a command responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandListAssignments' operationId: postPrivilegeElevationCommandListAssignments x-operation-id-source: derived /PrivilegeElevationCommand/SetPrivilegeElevationCommandCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the Privilege Elevation Command set Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, None' Principal: type: string description: User name or role name PType: type: string description: 'Principal type: User, Role' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the Privilege Elevation Command set. summary: Grant permissions on Privilege Elevation Command sets responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandSetPrivilegeElevationCommandCollectionPermissions' operationId: postPrivilegeElevationCommandSetPrivilegeElevationCommandCollectionPermissions x-operation-id-source: derived /PrivilegeElevationCommand/SetPrivilegeElevationCommandPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the Privilege Elevation Command Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, None' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the Privilege Elevation Command. summary: Grant permissions on Privilege Elevation Commands responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandSetPrivilegeElevationCommandPermissions' operationId: postPrivilegeElevationCommandSetPrivilegeElevationCommandPermissions x-operation-id-source: derived /PrivilegeElevationCommand/Update: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: Unique ID of privilege elevation command to be updated. required: - ID type: object required: true x-centrify-anon: false summary: Update a privilege elevation command responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandUpdate' operationId: postPrivilegeElevationCommandUpdate x-operation-id-source: derived /PrivilegeElevationCommand/UpdateAssignment: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The ID of the privilege elevation assignment to update Expires: type: string description: "If the permission to execute is temporary, specifies the expiration time in ISO 8601 format. \n Example: 2020-10-21T15:09:10Z. Note that the caller has to convert the time to UTC. " Starts: type: string description: "If the permission to execute is temporary, specifies the start time in ISO 8601 format. \n Example: 2020-10-21T15:09:10Z. Note that the caller has to convert the time to UTC. " BypassChallenge: type: boolean description: Whether user can execute the privilege elevation command without challenge required: - ID type: object required: true x-centrify-anon: false description: '1. This API updates the specific privilege elevation assignment. The caller should call GetAssignment to get the list of privilege elevation assignment(s) and call this API for each one. 2. If an optional parameter is NOT specified, it WILL remains unchanged.' summary: Update privilege elevation assignment responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/PrivilegeElevationCommandUpdateAssignment' operationId: postPrivilegeElevationCommandUpdateAssignment x-operation-id-source: derived /QuickStart/GetState: post: tags: - Resource Management x-centrify-anon: false summary: Get the quick start state responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/QuickStartGetState' operationId: postQuickStartGetState x-operation-id-source: derived /QuickStart/ManageAccounts: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AdminPassword: type: string description: The administrator password. AdminUserName: type: string description: The administrator user name. SystemId: items: type: string type: array description: A list of systems to put under management. required: - AdminPassword - AdminUserName - SystemId type: object required: true x-centrify-anon: false summary: Manage accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/QuickStartManageAccounts' operationId: postQuickStartManageAccounts x-operation-id-source: derived /QuickStart/RunDiscovery: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ComputerOUs: items: type: string type: array description: A list of computer organizational units. required: - ComputerOUs type: object required: true x-centrify-anon: false summary: Run the quick start discovery job responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/QuickStartRunDiscovery' operationId: postQuickStartRunDiscovery x-operation-id-source: derived /QuickStart/VerifyAdminAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AdminPassword: type: string description: The administrator password. AdminUserName: type: string description: The administrator user name. required: - AdminPassword - AdminUserName type: object required: true x-centrify-anon: false summary: Verify the administrator account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/QuickStartVerifyAdminAccount' operationId: postQuickStartVerifyAdminAccount x-operation-id-source: derived /ResourceProfile/AddResourceProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: PasswordProfileId: type: string description: The ID of a password profile to be used with this profile Version: type: string description: The version of the resource profile Identifier: type: string description: The identifier for the resource profile IconBase64: type: string description: A Base64 encoded icon for the resource profile Author: type: string description: The author of the resource profile Script: type: string description: The script used by the resource profile Description: type: string description: The description of the resource profile Name: type: string description: The name of the resource profile required: - PasswordProfileId - Identifier - Script - Name type: object required: true x-centrify-anon: false summary: AddResourceProfile - Adds a resource profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileAddResourceProfile' operationId: postResourceProfileAddResourceProfile x-operation-id-source: derived /ResourceProfile/DeleteResourceProfile: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload6' x-centrify-anon: false summary: DeleteResourceProfile - Deletes a resource profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileDeleteResourceProfile' operationId: postResourceProfileDeleteResourceProfile x-operation-id-source: derived /ResourceProfile/ExportResourceProfilePackage: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ExportPasswordProfile: default: false type: boolean description: Whether to include the resource profile password profile in the package. ExportIcon: default: true type: boolean description: Whether to include the resource profile icon in the package. Identifier: type: string description: The identifier to use when exporting the package ID: type: string description: The ID of the resource profile. required: - Identifier - ID type: object required: true x-centrify-anon: false description: 'The supplied identifier is used in the export rather than the identifier saved in the resource profile. The URL for the resource package is valid for at least one hour.' summary: ExportResourceProfilePackage - zips a resource profile into a package responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileExportResourceProfilePackage' operationId: postResourceProfileExportResourceProfilePackage x-operation-id-source: derived /ResourceProfile/GetAllResourceProfiles: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload25' x-centrify-anon: false summary: GetAllResourceProfiles - Gets all resource profiles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileGetAllResourceProfiles' operationId: postResourceProfileGetAllResourceProfiles x-operation-id-source: derived /ResourceProfile/GetResourceProfile: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload6' x-centrify-anon: false summary: GetResourceProfile - Gets a resource profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileGetResourceProfile' operationId: postResourceProfileGetResourceProfile x-operation-id-source: derived /ResourceProfile/GetResourceProfileCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload26' x-centrify-anon: false summary: Gets list of grants associated with a set of resource profiles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileGetResourceProfileCollectionPermissions' operationId: postResourceProfileGetResourceProfileCollectionPermissions x-operation-id-source: derived /ResourceProfile/GetResourceProfilePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource profile RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets list of grants associated with a resource profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileGetResourceProfilePermissions' operationId: postResourceProfileGetResourceProfilePermissions x-operation-id-source: derived /ResourceProfile/OpenResourceProfilePackage: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Files: items: type: object type: array description: A list of files (but only a single file) in the form-data, not as a parameter. required: - Files type: object required: true x-centrify-anon: false description: Note that the package is not loaded into PAS. Use AddResourceProfile to add a new profile. summary: OpenResourceProfilePackage - unzips and validates a resource profile package responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileOpenResourceProfilePackage' operationId: postResourceProfileOpenResourceProfilePackage x-operation-id-source: derived /ResourceProfile/SetResourceProfileCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource profile set Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, None' Principal: type: string description: User name or role name PType: type: string description: 'Principal type: User, Role' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the resource profile set. summary: Grant permissions on resource profile sets responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileSetResourceProfileCollectionPermissions' operationId: postResourceProfileSetResourceProfileCollectionPermissions x-operation-id-source: derived /ResourceProfile/SetResourceProfilePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource profile Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, None' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the resource profile. summary: Grant permissions on resource profiles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileSetResourceProfilePermissions' operationId: postResourceProfileSetResourceProfilePermissions x-operation-id-source: derived /ResourceProfile/UpdateResourceProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: PasswordProfileId: type: string description: The ID of a password profile to be used with this profile Version: type: string description: The version of the resource profile Identifier: type: string description: The identifier for the resource profile ID: type: string description: The ID of the resource profile. IconBase64: type: string description: A Base64 encoded icon for the resource profile Author: type: string description: The author of the resource profile Script: type: string description: The script used by the resource profile Description: type: string description: The description of the resource profile Name: type: string description: The name of the resource profile required: - Identifier - ID type: object required: true x-centrify-anon: false summary: UpdateResourceProfile - Updates a resource profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ResourceProfileUpdateResourceProfile' operationId: postResourceProfileUpdateResourceProfile x-operation-id-source: derived /ServerAgent/AddConfigFile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: FilePath: type: string description: file path on linux system where the config file is to be pushed Desc: type: string description: description of the config file ConfigFile: type: object description: config file to be uploaded to cloud Name: type: string description: Name of the config file required: - FilePath - Desc - ConfigFile - Name type: object required: true x-centrify-anon: false description: '' summary: Add/Upload a config file to Cloud responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentAddConfigFile' operationId: postServerAgentAddConfigFile x-operation-id-source: derived /ServerAgent/ConvertMachineAccount: post: tags: - Resource Management x-centrify-anon: false description: 'The machine can no longer use machine cert to identify/authenticate in new REST calls. This call is designed for use in Linux agent upgrade. This API will return error if the machine account is already an OAuth user.' summary: Convert current agent from using machine cert to using OAuth responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentConvertMachineAccount' operationId: postServerAgentConvertMachineAccount x-operation-id-source: derived /ServerAgent/DeleteConfigFile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: UUID of the config file to be deleted required: - ID type: object required: true x-centrify-anon: false summary: Delete config file from Cloud responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentDeleteConfigFile' operationId: postServerAgentDeleteConfigFile x-operation-id-source: derived /ServerAgent/Enroll: post: tags: - Resource Management x-centrify-anon: false deprecated: true description: Please use EnrollV2 instead. summary: Deprecated -- Enroll responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentEnroll' operationId: postServerAgentEnroll x-operation-id-source: derived /ServerAgent/EnrollV2: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AgentVersion: type: string description: Version of the agent performing the enrollment Owner: type: string description: Name of a user or CIP role to set as the owner of the agent profile. The owner impacts what users can manage or take over the profile FQDN: type: string description: Either the FQDN or IP address of the machine being enrolled Sets: items: type: object default: [] type: array description: 'List of system sets to add the created system to: ' DeviceID: default: '' type: string description: Device ID of the enrolling machine. Should only be provided by Mac agents ResourceName: default: '[value of Name]' type: string description: Name the PAS system corresponding to the enrolled machine should have. If the Suffix argument is supplied, the final name of the system will be in the form '[name]@[suffix]'. Otherwise, the final name will be in the form '[name]' Overwrite: default: false type: boolean description: Whether an agent profile take over attempt is made if the enrollment would result in such a scenario ResourceSetting: type: string description: JSON encoded settings the corresponding system should have. At minimum, the 'ComputerClass' and 'SessionType' values should be provided ResourcePolicy: default: null type: string description: JSON encoded policies the corresponding system should have Suffix: default: '' type: string description: Specific suffix to use for the login and resource names. See the documentation of Name and ResourceName for details CertificatePassword: default: '[default password]' type: string description: 'Password to protect the PKCS #12 ''Cert'' return value. If omitted or empty, a default password is used' OperatingSystem: type: string description: 'Operating system of the enrolling machine. Should start with ''darwin'' for macOS, and ''windows'' for Windows. Can start with anything for Linux. See ' Name: type: string description: Name prefix of the agent / corresponding service user. If the Suffix argument is supplied, said suffix will be used to form the final name. Otherwise, a default suffix will be used required: - AgentVersion - Owner - FQDN - ResourceSetting - OperatingSystem - Name type: object required: true x-centrify-anon: false description: See for enrolling using an enrollment code. summary: Enrolls a machine to the CIP using user credentials responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentEnrollV2' operationId: postServerAgentEnrollV2 x-operation-id-source: derived /ServerAgent/EnrollV3: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AgentVersion: type: string description: Version of the agent performing the enrollment Owner: type: string description: Name of a user or CIP role to set as the owner of the agent profile. The owner impacts what users can manage or take over the profile FQDN: type: string description: Either the FQDN or IP address of the machine being enrolled CreateMachineCert: default: false type: boolean description: Whether Machine Certificate needs to be generated. Sets: items: type: object default: [] type: array description: 'List of system sets to add the created system to: ' DeviceID: default: '' type: string description: Device ID of the enrolling machine. Should only be provided by Mac agents Overwrite: default: false type: boolean description: Whether an agent profile take over attempt is made if the enrollment would result in such a scenario Suffix: default: '' type: string description: Specific suffix to use for the login and resource names. See the documentation of Name and ResourceName for details OperatingSystem: type: string description: 'Operating system of the enrolling machine. Should start with ''darwin'' for macOS, and ''windows'' for Windows. Can start with anything for Linux. See ' Name: type: string description: Name prefix of the agent / corresponding service user. If the Suffix argument is supplied, said suffix will be used to form the final name. Otherwise, a default suffix will be used required: - AgentVersion - Owner - FQDN - OperatingSystem - Name type: object required: true x-centrify-anon: false description: 'For agents that use OAUTH2 for future authentication. See for enrolling using an enrollment code.' summary: Enrolls a machine to the CIP using user credentials responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentEnrollV3' operationId: postServerAgentEnrollV3 x-operation-id-source: derived /ServerAgent/GetAllConfigFiles: post: tags: - Resource Management x-centrify-anon: false summary: Returns a list of all the config files pushed to systems responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentGetAllConfigFiles' operationId: postServerAgentGetAllConfigFiles x-operation-id-source: derived /ServerAgent/GetCertificate: post: tags: - Resource Management requestBody: content: application/json: schema: properties: CertificatePassword: default: '' type: string description: The certificate password. ServerAuthentication: default: false type: boolean description: Is the certificate being used for server authentication. type: object required: true x-centrify-anon: false description: The agent uses the certificate to establish an SslStream with a DirectAudit collector. summary: Returns a machine certificate responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentGetCertificate' operationId: postServerAgentGetCertificate x-operation-id-source: derived /ServerAgent/GetDirectAuditConfiguration: post: tags: - Resource Management requestBody: content: application/json: schema: properties: HostSite: type: string description: Active Directory site of the host in SiteName@ForestName format. HostAddresses: items: type: string type: array description: A set of host addresses to retrieve DirectAudit binding information. type: object required: true x-centrify-anon: false description: Returns a DirectAudit configuration for the agent to establish SslStream with a DirectAudit collector. summary: Gets a DirectAudit configuration responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentGetDirectAuditConfiguration' operationId: postServerAgentGetDirectAuditConfiguration x-operation-id-source: derived /ServerAgent/GetOfflineOtpSettings: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ForceGenSecret: default: false type: boolean description: Whether to force re-generate an OTP secret type: object required: true x-centrify-anon: false summary: Returns offline OTP settings for the enrolled machine responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentGetOfflineOtpSettings' operationId: postServerAgentGetOfflineOtpSettings x-operation-id-source: derived /ServerAgent/PushConfigFile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: FilePath: type: string description: absolute file path of the config file in the linux system SetQuery: type: string description: Set identifier or sql query for resources on which linux agents needs to be pushed this config file Desc: type: string description: description of config file Ids: items: type: string type: array description: UUID of the resource corresponding to the linux system RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. ConfigFile: type: object description: config file to be pushed to the linux system(s) required: - FilePath - Ids - ConfigFile type: object required: true x-centrify-anon: false description: 'Must provide either Ids or SetQuery for request. Returns the JobId for the BulkSystemPushConfigFile job. If RunSync is not provided, or passed as false, this id is valid for use with related Job APIs. If RunSync is passed as true, the operation id cannot be used with Job APIs' summary: Push config files to agent asynchronously responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentPushConfigFile' operationId: postServerAgentPushConfigFile x-operation-id-source: derived /ServerAgent/Register: post: tags: - Resource Management x-centrify-anon: true deprecated: true summary: Register responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentRegister' operationId: postServerAgentRegister x-operation-id-source: derived /ServerAgent/RegisterV2: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AgentVersion: type: string description: Version of the agent performing the enrollment Owner: type: string description: Name of a user or CIP role to set as the owner of the agent profile. The owner impacts what users can manage or take over the profile FQDN: type: string description: Either the FQDN or IP address of the machine being enrolled Sets: items: type: object default: [] type: array description: 'List of system sets to add the created system to: ' DeviceID: default: '' type: string description: Device ID of the enrolling machine. Should only be provided by Mac agents ResourceName: default: '[value of Name]' type: string description: Name the PAS system corresponding to the enrolled machine should have. If the Suffix argument is supplied, the final name of the system will be in the form '[name]@[suffix]'. Otherwise, the final name will be in the form '[name]' Overwrite: default: false type: boolean description: Whether an agent profile take over attempt is made if the enrollment would result in such a scenario EnrollmentCode: type: string description: Enrollment code to enroll with. ResourceSetting: type: string description: JSON encoded settings the corresponding system should have. At minimum, the 'ComputerClass' and 'SessionType' values should be provided ResourcePolicy: default: null type: string description: JSON encoded policies the corresponding system should have Suffix: default: '' type: string description: Specific suffix to use for the login and resource names. See the documentation of Name and ResourceName for details CertificatePassword: default: '[default password]' type: string description: 'Password to protect the PKCS #12 ''Cert'' return value. If omitted or empty, a default password is used' OperatingSystem: type: string description: 'Operating system of the enrolling machine. Should start with ''darwin'' for macOS, and ''windows'' for Windows. Can start with anything for Linux. See ' Name: type: string description: Name prefix of the agent / corresponding service user. If the Suffix argument is supplied, said suffix will be used to form the final name. Otherwise, a default suffix will be used required: - AgentVersion - Owner - FQDN - EnrollmentCode - ResourceSetting - OperatingSystem - Name type: object required: true x-centrify-anon: true description: 'See EnrollV2 for enrolling using user credentials. Use the same arguments as EnrollV2 with the following modifications: Added: EnrollmentCode Disallowed: Owner Owner must be omitted or the empty string since the agent profile will be the owner of the enrollment code.' summary: Enrolls a machine to the CIP using an enrollment code responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentRegisterV2' operationId: postServerAgentRegisterV2 x-operation-id-source: derived /ServerAgent/RegisterV3: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AgentVersion: type: string description: Version of the agent performing the enrollment FQDN: type: string description: Either the FQDN or IP address of the machine being enrolled CreateMachineCert: default: false type: boolean description: Whether Machine Certificate needs to be generated. Overwrite: default: false type: boolean description: Whether an agent profile take over attempt is made if the enrollment would result in such a scenario EnrollmentCode: type: string description: Enrollment code to enroll with. OperatingSystem: type: string description: 'Operating system of the enrolling machine. Should start with ''darwin'' for macOS, and ''windows'' for Windows. Can start with anything for Linux. See ' Name: type: string description: Name prefix of the agent / corresponding service user. If the Suffix argument is supplied, said suffix will be used to form the final name. Otherwise, a default suffix will be used required: - AgentVersion - FQDN - EnrollmentCode - OperatingSystem - Name type: object required: true x-centrify-anon: true description: 'For agents that use OAUTH2 for future authentication. See for enrolling using user credentials.' summary: Enrolls a machine to the CIP using an enrollment code responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentRegisterV3' operationId: postServerAgentRegisterV3 x-operation-id-source: derived /ServerAgent/Unenroll: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Delete: type: boolean description: Remove all reseources, the agent profile, and the service account. Uuid: type: string description: The agent unique identifier. ResourceName: type: string description: The agent resource name. AccountName: type: string description: The agent profile name. required: - Delete - Uuid type: object required: true x-centrify-anon: false summary: Unenroll an enrolled Agent responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentUnenroll' operationId: postServerAgentUnenroll x-operation-id-source: derived /ServerAgent/UnenrollAgents: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SetQuery: type: string description: Set identifier or sql query for resources on which agents need to be unenrolled Ids: items: type: string type: array description: List of Ids for the resources on which agents need to be unenrolled RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. type: object required: true x-centrify-anon: false description: 'You must be a system administrator or have ''Delete'' permission on the resource or have global ''Delete'' permission on resources. Must provide either Ids or SetQuery for request. Returns the JobId for the BulkSystemUnenrollClient job. If RunSync is not provided, or passed as false, this id is valid for use with related Job APIs. If RunSync is passed as true, the operation id cannot be used with Job APIs' summary: Aysnchronous operation for unenrolling agents responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerAgentUnenrollAgents' operationId: postServerAgentUnenrollAgents x-operation-id-source: derived /ServerManage/AddAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: IsManaged: default: false type: boolean description: True to create managed account Password: type: string description: Password for the user SshKeyId: type: string description: Ssh Id for authentication Host: type: string description: ID of the resource mfatokuri: type: string description: 'otpauth uri for setting mfa token, as per spec: https://github.com/google/google-authenticator/wiki/Key-Uri-Format - not used if MfaToken is also set' DomainID: type: string description: ID of the domain CaseSensitiveCheck: type: boolean description: True to allow adding new accounts even if accounts with similar names (only differ by letter cases) already exist. Default is false. UseWheel: default: false type: boolean description: True to use proxy account MfaToken: properties: step: default: '30' type: integer description: Size of time step in seconds digits: default: '6' type: integer description: Number of digits in code issuer: type: string description: Issuer field as per spec counter: type: integer description: hotp counter init value - only required if type is hotp type: default: Totp type: string description: Type of token, Totp or Hotp label: type: string description: Label describing the token secret: type: string description: Base32 encoded shared secret algorithm: default: Sha1 type: string description: 'Algorithm to use, valid values: Sha1, Sha256, Sha512' type: object description: TOTP information to store DatabaseID: type: string description: ID of the database User: type: string description: User name for the account CloudProviderId: type: string description: ID of the cloud provider Description: type: string description: Description for the account required: - Password - SshKeyId - Host - DomainID - DatabaseID - User - CloudProviderId type: object required: true x-centrify-anon: false summary: Add an account for a resource responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddAccount' operationId: postServerManageAddAccount x-operation-id-source: derived /ServerManage/AddAccounts: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Accounts: items: type: object type: array description: A list of accounts to add. required: - Accounts type: object required: true x-centrify-anon: false summary: Add a list of accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddAccounts' operationId: postServerManageAddAccounts x-operation-id-source: derived /ServerManage/AddDatabase: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SslEnabled: type: boolean description: For SAP ASE Database, TRUE if SSL is enabled for the port PasswordProfileID: type: string description: Password profile ID for the database TrustedFile: type: string description: 'For SAP ASE Database, SSL Certificate/TrustedFile: if SslEnabled is true' Port: type: integer description: Port number to access the database FQDN: type: string description: DNS name or IP address to access the database InstanceName: type: string description: The instance name of the database. Applicable to SQL Server only. ServiceName: type: string description: The service name of the database. Applicable to Oracle Database only. DatabaseClass: type: string description: 'Database type: Oracle, SQLServer' Description: type: string description: Description of the database Name: type: string description: Name of the database required: - FQDN - DatabaseClass - Description - Name type: object required: true x-centrify-anon: false summary: Add a database responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddDatabase' operationId: postServerManageAddDatabase x-operation-id-source: derived /ServerManage/AddDatabases: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Databases: items: type: object type: array description: A list of databases to add. required: - Databases type: object required: true x-centrify-anon: false summary: Add a list of databases responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddDatabases' operationId: postServerManageAddDatabases x-operation-id-source: derived /ServerManage/AddDomain: post: tags: - Resource Management requestBody: content: application/json: schema: properties: PasswordProfileID: type: string description: Password profile ID for the domain AllowManualLocalAccountUnlock: default: false type: boolean description: Allow Domain administrative account on the domain to manually unlock local accounts on systems joined to this domain AllowAutomaticAccountMaintenance: type: boolean description: Allow Domain administrative account on the domain to reset domain account passwords AllowManualAccountUnlock: type: boolean description: Allow Domain administrative account on the domain to manually unlock domain accounts Description: type: string description: Description for the domain AllowAutomaticLocalAccountMaintenance: default: false type: boolean description: Allow Domain administrative account on the domain to reset local account passwords on systems joined to this domain Name: type: string description: Name for the domain required: - PasswordProfileID - AllowAutomaticAccountMaintenance - AllowManualAccountUnlock - Description - Name type: object required: true x-centrify-anon: false summary: Add a domain responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddDomain' operationId: postServerManageAddDomain x-operation-id-source: derived /ServerManage/AddDomains: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Domains: items: type: object type: array description: A list of domains to add. required: - Domains type: object required: true x-centrify-anon: false summary: Add a list of domains responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddDomains' operationId: postServerManageAddDomains x-operation-id-source: derived /ServerManage/AddResource: post: tags: - Resource Management requestBody: content: application/json: schema: properties: PasswordProfileID: type: string description: Password profile ID for the system ProxyUser: type: string description: Name for the "proxy" account FQDN: type: string description: Fully-qualified domain name or IP address of the system ComputerClass: type: string description: 'System type: Windows, Unix, CiscoIOS, CiscoNXOS, JuniperJunos, HpNonStopOS, IBMi, CheckPointGaia, PaloAltoNetworksPANOS, F5NetworksBIGIP, CiscoAsyncOS, VMwareVMkernel, GenericSsh, Customssh' ProxyUserIsManaged: default: true type: boolean description: Whether the password for the "proxy" account is managed SessionType: type: string description: 'Session type: Rdp, Ssh' AllowManualLocalAccountUnlock: default: false type: boolean description: Allow local account manual unlock using a privileged account ProxyUserPassword: type: string description: Password for the "proxy" account SystemProfileId: type: string description: The resource profile ID for systems with ComputerClass CustomSsh Description: type: string description: Any descriptive information for the system AllowAutomaticLocalAccountMaintenance: default: false type: boolean description: Allow local account automatic maintenance using a privileged account Name: type: string description: Display name of the system required: - FQDN - ComputerClass - SessionType - Description - Name type: object required: true x-centrify-anon: false summary: Add a system responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddResource' operationId: postServerManageAddResource x-operation-id-source: derived /ServerManage/AddResources: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Resources: items: type: object type: array description: A list of system resources to add. required: - Resources type: object required: true x-centrify-anon: false summary: Add a list of system resources responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddResources' operationId: postServerManageAddResources x-operation-id-source: derived /ServerManage/AddSecret: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SecretFilePath: type: string description: The file path from a call to for file type secrets SecretName: type: string description: The secret name FolderId: type: string description: (optional) The folder to add the secret to WorkflowApprovers: properties: DirectoryServiceUuid: type: string description: Directory service Uuid ServiceInstance: type: string description: Same as ServiceType Status: type: string description: 'Account status. Ex: "Active"' DisplayName: type: string description: User display name ObjectType: type: string description: 'Approver object type ex: "User"' StatusEnum: type: string description: Same as "Status" SystemName: type: string description: Name of account on system EMail: type: string description: Account email DistinguishedName: type: string description: Full login name of Approver. Locked: type: boolean description: Is the user locked. ServiceType: type: string description: Directory service type Guid: type: string description: Internal UUID of account. Same as InternalName Principal: type: string description: Account Name Type: type: string description: 'Account type. ex: "User"' InternalName: type: string description: Internal UUID of account Enabled: type: boolean description: Is account enabled PType: type: string description: 'Account type. ex: "User"' ServiceInstanceLocalized: type: string description: Explicitly written Service Instance. Name: type: string description: Account Name items: type: object type: array description: An array of objects WorkflowDefaultOptions: type: string description: 'Stringified JSON object detailing default options. Example: {"GrantMin":60}' SecretFileSize: type: string description: The file size from a call to for file type secrets SecretText: type: string description: The secret text contents for text type secrets WorkflowSent: type: boolean description: Informs whether or not this is a workflow change. SecretFilePassword: type: string description: The password for a protected secret file Type: type: string description: The secret type (Text or File). WorkflowEnabled: type: boolean description: Determines whether you are removing or adding/updating a workflow Description: type: string description: The secret description required: - SecretName - Type type: object required: true x-centrify-anon: false description: 'The secret name is a slash delimited "path" to the secret, including its parent folder name(s). If no parent path is provided, the secret will be added to the root folder. In addition, if a FolderId is provided, the new secret will be added to that folder instead of the root' summary: AddSecret - Adds a secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddSecret' operationId: postServerManageAddSecret x-operation-id-source: derived /ServerManage/AddSecretsFolder: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DataVaultDefaultProfile: type: object description: The default profile for the folder DataVaultRules: type: object description: The rules for the folder Description: type: string description: The folder description Parent: type: object description: (optional) The id of the folder to add the new folder to Name: type: string description: The folder name required: - Name type: object required: true x-centrify-anon: false description: '' summary: Adds a secret folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddSecretsFolder' operationId: postServerManageAddSecretsFolder x-operation-id-source: derived /ServerManage/AddSshKey: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ImplicitRename: type: boolean description: If true and the key Name given is not unqiue, will rename the key to avoid collision PrivateKey: type: string description: The SSH private key to store Comment: type: string description: The comment for the SSH key Passphrase: type: string description: The passphrase for the SSH key, if encrypted Name: type: string description: The name of the SSH key required: - PrivateKey type: object required: true x-centrify-anon: false description: 'If Name is not specified, a default name will be generated: ''username keytype, timestamp''' summary: Add an SSH key as a JSON string responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddSshKey' operationId: postServerManageAddSshKey x-operation-id-source: derived /ServerManage/AddSshKeyFile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ImplicitRename: type: boolean description: If true and the key Name given is not unqiue, will rename the key to avoid collision Comment: type: string description: The comment for the SSH key Passphrase: type: string description: The passphrase for the SSH key, if encrypted Name: type: string description: The name of the SSH key type: object required: true x-centrify-anon: false description: 'Descriptive properties should all have the same name as those in AddSshKey, i.e. Name, Description, Passphrase, etc. Bodyargs documentation will show JSON format, however it must be multipart/form-data and no PrivateKey field is needed since the key will be read from the "File" key in the request. If Name is not specified, a default name will be generated: ''username keytype, timestamp''' summary: Add an SSH key as a file in multipart/form-data responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageAddSshKeyFile' operationId: postServerManageAddSshKeyFile x-operation-id-source: derived /ServerManage/CanDeleteSshKey: post: tags: - Resource Management parameters: - required: true in: query description: ID of the SSH key to check. name: ID schema: type: string x-centrify-anon: false summary: Checks if an SSH key can be deleted. responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageCanDeleteSshKey' operationId: postServerManageCanDeleteSshKey x-operation-id-source: derived /ServerManage/CheckOfflineOtpExist: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload8' x-centrify-anon: false summary: Check whether offline OTP is available for the computer responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageCheckOfflineOtpExist' operationId: postServerManageCheckOfflineOtpExist x-operation-id-source: derived /ServerManage/CheckinPassword: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload13' x-centrify-anon: false description: You must be a system administrator or have 'Checkout' permission on the account or have global 'Checkout' permission on accounts. summary: Checks in an account password responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageCheckinPassword' operationId: postServerManageCheckinPassword x-operation-id-source: derived /ServerManage/CheckoutPassword: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Lifetime: type: integer description: Duration of the checkout ID: type: string description: ID for the account Description: type: string description: Description for the checkout required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Checkout' permission on the account or have global 'Checkout' permission on accounts. summary: Checks out an account password responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageCheckoutPassword' operationId: postServerManageCheckoutPassword x-operation-id-source: derived /ServerManage/CreateDiscoveryProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ComputerOUs: type: object description: List of computer Organization Unit names ComputerType: type: string description: Type of computer. eg Server, Workstation OSType: type: string description: Operating System type UpdateExistingSystems: type: boolean description: Determines whether existing systems should be updated. DefaultAccountId: type: string description: ID of the default Account Domains: properties: DomainId: type: string description: Domain ID. Enabled: type: boolean description: Is domain enabled. NamingContext: type: string description: OUs Naming context Name: type: string description: Domain name. type: object description: List of domain objects DefaultUserName: type: string description: User Name of the default Account CurrentConnector: type: boolean description: Determines whether to use the current connector. Description: type: string description: Description of the discovery profile. Name: type: string description: Name of the discovery profile. required: - Name type: object required: true x-centrify-anon: false summary: Create a Discovery Profile responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageCreateDiscoveryProfile' operationId: postServerManageCreateDiscoveryProfile x-operation-id-source: derived /ServerManage/DeleteAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: Id of the account to be deleted SkipDeprovision: type: boolean description: If true, skip deprovisioning of service account required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Delete' permission on the account or have global 'Delete' permission on accounts. summary: Delete an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteAccount' operationId: postServerManageDeleteAccount x-operation-id-source: derived /ServerManage/DeleteAccounts: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SecretName: type: string description: Name of secret for account passwords SetQuery: type: string description: Set identifier or sql query for resources to be deleted Ids: items: type: string description: An account id. type: array description: Array of ids of the accounts to be deleted SaveToSecrets: type: boolean description: Choose to save passwords for resource's accounts to a csv secret file RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. SkipDeprovision: type: boolean description: If true, skip deprovisioning of service account type: object required: true x-centrify-anon: false description: Permissions will be handled in job. Failures and successes will be documented in jobs report. Must provide either Ids or SetQuery. summary: Delete multiple accounts in background job responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteAccounts' operationId: postServerManageDeleteAccounts x-operation-id-source: derived /ServerManage/DeleteDatabase: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the database to be deleted required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Delete' permission on the database or have global 'Delete' permission on databases. summary: Delete a database responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteDatabase' operationId: postServerManageDeleteDatabase x-operation-id-source: derived /ServerManage/DeleteDomain: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the domain to be deleted required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Delete' permission on the domain. summary: Delete a domain responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteDomain' operationId: postServerManageDeleteDomain x-operation-id-source: derived /ServerManage/DeleteResource: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource to be deleted required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Delete' permission on the resource or have global 'Delete' permission on resources. summary: Delete a resource responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteResource' operationId: postServerManageDeleteResource x-operation-id-source: derived /ServerManage/DeleteResources: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SecretName: type: string description: Name of secret for account passwords SetQuery: type: string description: Set identifier or sql query for resources to be deleted Ids: items: type: string type: array description: List of Ids for the resources to be deleted SaveToSecrets: type: boolean description: Choose to save passwords for resource's accounts to a csv secret file RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. SkipIfHasAppsOrServices: type: string description: The resource will be skipped if it has apps and services. If this is set to false, then the associated apps and services will also be deleted. Defaults to true. SkipDeprovision: type: boolean description: If true, skip deprovisioning of service account type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Delete' permission on the resource or have global 'Delete' permission on resources. Must provide either Ids or SetQuery for request. summary: Creates a asynchronous operation which will delete all resources and associate… responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteResources' operationId: postServerManageDeleteResources x-operation-id-source: derived /ServerManage/DeleteSecret: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload3' x-centrify-anon: false description: '' summary: DeleteSecret - Deletes a secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteSecret' operationId: postServerManageDeleteSecret x-operation-id-source: derived /ServerManage/DeleteSecretsFolder: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload12' x-centrify-anon: false description: '' summary: Deletes a secret folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteSecretsFolder' operationId: postServerManageDeleteSecretsFolder x-operation-id-source: derived /ServerManage/DeleteSshKey: post: tags: - Resource Management parameters: - required: true in: query description: ID of the SSH key to delete. name: ID schema: type: string x-centrify-anon: false summary: Delete an SSH key responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteSshKey' operationId: postServerManageDeleteSshKey x-operation-id-source: derived /ServerManage/DeleteSshKeys: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SetQuery: type: string description: Set identifier or sql query for resources to be deleted RemovedRelatedAccount: default: false type: boolean description: Will delete the account(s) using the ssh key before the ssh key. If this is unset, or set to false, only ssh keys with no related accounts will be deleted. Ids: items: type: string type: array description: List of Ids for the ssh keys to be deleted RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. type: object required: true x-centrify-anon: false summary: Delete one or more SSH Keys. responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDeleteSshKeys' operationId: postServerManageDeleteSshKeys x-operation-id-source: derived /ServerManage/DownloadSecretFileInChunks: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload15' x-centrify-anon: false description: 'DOES NOT TAKE BODY ARGUMENTS. The following are required query parameters: - FilePath: holds reference to the filename, filesize, actual filepath for the file being uploaded. Information returned from - comp: ''blocklist'' to indicate end-of-list, or ''block'' to continue - blockid: The block id on continuation IMPORTANT: The FilePath can be used only once. Once download is successful, the path is marked as stop_upload. The response body contains file data' summary: Downloads a secret file in data chunks responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageDownloadSecretFileInChunks' operationId: postServerManageDownloadSecretFileInChunks x-operation-id-source: derived /ServerManage/ExtendCheckout: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload13' x-centrify-anon: false description: You must be a system administrator or have 'Checkout' permission on the account or have global 'Checkout' permission on accounts. summary: Extend checkout time for a password responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageExtendCheckout' operationId: postServerManageExtendCheckout x-operation-id-source: derived /ServerManage/GenerateSshKey: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload32' x-centrify-anon: false summary: Generate an SSH key based on given parameters responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGenerateSshKey' operationId: postServerManageGenerateSshKey x-operation-id-source: derived /ServerManage/GenerateSshKeyFile: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload32' x-centrify-anon: false summary: Generate an SSH key based on given parameters responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGenerateSshKeyFile' operationId: postServerManageGenerateSshKeyFile x-operation-id-source: derived /ServerManage/GetAccountCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload33' x-centrify-anon: false summary: Gets list of grants associated with collection of accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetAccountCollectionPermissions' operationId: postServerManageGetAccountCollectionPermissions x-operation-id-source: derived /ServerManage/GetAccountPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the account, set to null to get global account permissions RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets list of permissions associated with an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetAccountPermissions' operationId: postServerManageGetAccountPermissions x-operation-id-source: derived /ServerManage/GetAccountsForLogin: post: tags: - Resource Management requestBody: content: application/json: schema: properties: host: type: string description: Host ID domainOnly: type: boolean description: Specifies domain accounts only. filter: type: string description: Search filter for accounts. Args: properties: Ascending: type: boolean description: True for ascending order, false for descending. SortBy: type: string description: Word or name to sort by. Required, but empty strings are allowed. type: object description: Object with Args about how response should be organized. required: - host - Args type: object required: true x-centrify-anon: false summary: Retrieves Accounts for Login responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetAccountsForLogin' operationId: postServerManageGetAccountsForLogin x-operation-id-source: derived /ServerManage/GetAccountsForResource: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Computer: type: string description: ID of the resource RRFormat: default: false type: boolean description: Return data in database format. required: - Computer type: object required: true x-centrify-anon: false summary: Gets all visible accounts for a resource responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetAccountsForResource' operationId: postServerManageGetAccountsForResource x-operation-id-source: derived /ServerManage/GetAgentProfile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource to lookup required: - ID type: object required: true x-centrify-anon: false description: You must have 'Read' permission on the resource. summary: Get's agent profile (if there is one) for a resource responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetAgentProfile' operationId: postServerManageGetAgentProfile x-operation-id-source: derived /ServerManage/GetAuditInfo: post: tags: - Resource Management x-centrify-anon: false summary: Returns the auditing and monitoring service configuration for the tenant responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetAuditInfo' operationId: postServerManageGetAuditInfo x-operation-id-source: derived /ServerManage/GetComputerChallenges: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload16' x-centrify-anon: false summary: Get Challenges for login to a System responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetComputerChallenges' operationId: postServerManageGetComputerChallenges x-operation-id-source: derived /ServerManage/GetComputerRights: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the remote system, for which rights are to be returned. required: - ID type: object required: true x-centrify-anon: false summary: Get Rights on Computer for current user responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetComputerRights' operationId: postServerManageGetComputerRights x-operation-id-source: derived /ServerManage/GetComputersForSshKeyAccounts: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload11' x-centrify-anon: false description: 'Fetch the systems using a filter than are avaiable for SSH key accounts. Filter will be applied against ''Name'', ''Description'', and ''FQDN'' fields of systems Keys(starts with).' summary: Get computer for ssh key accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetComputersForSshKeyAccounts' operationId: postServerManageGetComputersForSshKeyAccounts x-operation-id-source: derived /ServerManage/GetDatabaseCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload33' x-centrify-anon: false summary: Gets list of grants associated with collection of databases responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetDatabaseCollectionPermissions' operationId: postServerManageGetDatabaseCollectionPermissions x-operation-id-source: derived /ServerManage/GetDatabasePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the database, set to null to get global permissions RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Get list of permissions associated with a database responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetDatabasePermissions' operationId: postServerManageGetDatabasePermissions x-operation-id-source: derived /ServerManage/GetDiscoveryProfiles: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload25' x-centrify-anon: false summary: Gets a list of discovery profiles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetDiscoveryProfiles' operationId: postServerManageGetDiscoveryProfiles x-operation-id-source: derived /ServerManage/GetDomainCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload33' x-centrify-anon: false summary: Gets list of grants associated with collection of domains responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetDomainCollectionPermissions' operationId: postServerManageGetDomainCollectionPermissions x-operation-id-source: derived /ServerManage/GetDomainPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the domain RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets list of grants associated with a domain responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetDomainPermissions' operationId: postServerManageGetDomainPermissions x-operation-id-source: derived /ServerManage/GetMfaTokenCode: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload18' x-centrify-anon: false summary: Retrieve token for an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetMfaTokenCode' operationId: postServerManageGetMfaTokenCode x-operation-id-source: derived /ServerManage/GetMfaTokenSettings: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the account to get the token settings for required: - ID type: object required: true x-centrify-anon: false summary: Retrieve token settings for an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetMfaTokenSettings' operationId: postServerManageGetMfaTokenSettings x-operation-id-source: derived /ServerManage/GetMySessions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: CountOnly: default: false type: boolean description: Is only counts required. RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets any ongoing Rdp or ssh sessions for a given user responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetMySessions' operationId: postServerManageGetMySessions x-operation-id-source: derived /ServerManage/GetMyWorkspaceAccounts: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload25' x-centrify-anon: false summary: Gets a list of accounts that the user has workspace login permission responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetMyWorkspaceAccounts' operationId: postServerManageGetMyWorkspaceAccounts x-operation-id-source: derived /ServerManage/GetOfflineOtp: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload8' x-centrify-anon: false summary: Returns an offline OTP for the computer responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetOfflineOtp' operationId: postServerManageGetOfflineOtp x-operation-id-source: derived /ServerManage/GetResourceCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload33' x-centrify-anon: false summary: Gets list of grants associated with collection of resources responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetResourceCollectionPermissions' operationId: postServerManageGetResourceCollectionPermissions x-operation-id-source: derived /ServerManage/GetResourcePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource, set to null to get global permissions RRFormat: default: false type: boolean description: Return data in database format. type: object required: true x-centrify-anon: false summary: Gets list of grants associated with resource responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetResourcePermissions' operationId: postServerManageGetResourcePermissions x-operation-id-source: derived /ServerManage/GetRetiredPassword: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID for the retired password required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator to get a retired password. summary: Get a retired password of an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetRetiredPassword' operationId: postServerManageGetRetiredPassword x-operation-id-source: derived /ServerManage/GetRsop: post: tags: - Resource Management parameters: - required: true in: query description: The user id. name: PrincipalId schema: type: string - required: true in: query description: Currently must be "User". name: PrincipalType schema: type: string - required: true in: query description: The entity id. name: EntityId schema: type: string - required: true in: query description: The tablename of the entity. name: TableName schema: type: string x-centrify-anon: false summary: Get the rsop policy for the user and entity. responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetRsop' operationId: postServerManageGetRsop x-operation-id-source: derived /ServerManage/GetSShKeyUsage: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload9' x-centrify-anon: false description: Get all accounts and discovery profiles that are using this sshkey. summary: Get ssh key usage responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSShKeyUsage' operationId: postServerManageGetSShKeyUsage x-operation-id-source: derived /ServerManage/GetSecret: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload3' x-centrify-anon: false description: '' summary: GetSecret - Gets secret metadata responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecret' operationId: postServerManageGetSecret x-operation-id-source: derived /ServerManage/GetSecretApprovers: post: tags: - Resource Management parameters: - required: true in: query description: ID of the Secret name: ID schema: type: string x-centrify-anon: false summary: Fetch the workflow settings associated with a secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretApprovers' operationId: postServerManageGetSecretApprovers x-operation-id-source: derived /ServerManage/GetSecretCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The ID for the collection RRFormat: default: false type: boolean description: Return data in database format. required: - ID type: object required: true x-centrify-anon: false description: '' summary: Gets list of grants associated with a collection of secrets responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretCollectionPermissions' operationId: postServerManageGetSecretCollectionPermissions x-operation-id-source: derived /ServerManage/GetSecretFolder: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The folder ID CountOnly: type: boolean description: True to return only the count of items RRFormat: default: true type: boolean description: True to return the data in database format Name: type: string description: The folder name. type: object required: true x-centrify-anon: false description: 'Either ID or Name must be defined. Returns an integer count id CountOnly is true Returns database format data if RRFormat is true Returns an object representing the folder' summary: Gets a secret folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretFolder' operationId: postServerManageGetSecretFolder x-operation-id-source: derived /ServerManage/GetSecretFoldersCanMoveTo: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The ID of the secret or folder that is being moved CountOnly: type: boolean description: True to return only the count of items RRFormat: default: false type: boolean description: True to return the data in database format required: - ID type: object required: true x-centrify-anon: false description: 'Gets a list of secret folders that the user can move secret or folder to. Ability to move to a folder is determined by whether the user has an "Add" permission on that folder. Returns an integer count id CountOnly is true Returns database format data if RRFormat is true Returns an object representing the folder' summary: Get secret folders can move to responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretFoldersCanMoveTo' operationId: postServerManageGetSecretFoldersCanMoveTo x-operation-id-source: derived /ServerManage/GetSecretRightsAndChallenges: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The ID for the secret. required: - ID type: object required: true x-centrify-anon: false description: '' summary: Fetch the rights and authentication challenges associated with a secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretRightsAndChallenges' operationId: postServerManageGetSecretRightsAndChallenges x-operation-id-source: derived /ServerManage/GetSecretToBeReplaced: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload3' x-centrify-anon: false description: 'GetSecretToBeReplaced - Retrieves the secret entity that needs to be replaced with data still encrypted and secure fields removed. This differs from because in this case we know this is for secret replacement, which can be challenged.' summary: Get secret to be replaced responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretToBeReplaced' operationId: postServerManageGetSecretToBeReplaced x-operation-id-source: derived /ServerManage/GetSecretsAndFolders: post: tags: - Resource Management requestBody: content: application/json: schema: properties: CountOnly: default: true type: boolean description: True to return only the count of items RRFormat: default: true type: boolean description: True to return the data in database format Parent: type: string description: The parent folder ID for the contents to get type: object required: true x-centrify-anon: false description: 'Returns an integer count id CountOnly is true Returns database format data if RRFormat is true Returns an array of object representing the contents of the folder Returns the top level folder and contents if no "Parent" parameter is provided' summary: Gets a folder and its contents (secrets, sub-folders) responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretsAndFolders' operationId: postServerManageGetSecretsAndFolders x-operation-id-source: derived /ServerManage/GetSecretsFolderRights: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload12' x-centrify-anon: false description: '' summary: Gets the permissions for a folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretsFolderRights' operationId: postServerManageGetSecretsFolderRights x-operation-id-source: derived /ServerManage/GetSecretsFolderRightsAndChallenges: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload12' x-centrify-anon: false description: The provided ID may be either the folder's unique identifier *or* the folder's full path, *not* both. summary: Gets the rights and challenges for a secret folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSecretsFolderRightsAndChallenges' operationId: postServerManageGetSecretsFolderRightsAndChallenges x-operation-id-source: derived /ServerManage/GetSessions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: EntityType: default: '' type: string description: The entity type. ID: default: '' type: string description: The session id. RRFormat: default: false type: boolean description: Return data in database format. required: - EntityType type: object required: true x-centrify-anon: false summary: Gets all active sessions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSessions' operationId: postServerManageGetSessions x-operation-id-source: derived /ServerManage/GetSshKeyCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload33' x-centrify-anon: false summary: Gets list of grants associated with collection of SSH keys responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSshKeyCollectionPermissions' operationId: postServerManageGetSshKeyCollectionPermissions x-operation-id-source: derived /ServerManage/GetSshKeyInfo: post: tags: - Resource Management parameters: - required: true in: query description: ID of the SSH key. name: ID schema: type: string x-centrify-anon: false summary: Gets an SSH key without any of the sensitive fields (PrivateKey, PublicKey… responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSshKeyInfo' operationId: postServerManageGetSshKeyInfo x-operation-id-source: derived /ServerManage/GetSshKeyPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload9' x-centrify-anon: false summary: Gets list of permissions associated with a SSH key responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSshKeyPermissions' operationId: postServerManageGetSshKeyPermissions x-operation-id-source: derived /ServerManage/GetSshKeyRightsAndChallenges: post: tags: - Resource Management parameters: - required: true in: query description: ID of the SSH Key name: ID schema: type: string x-centrify-anon: false summary: Fetch the rights and authentication challenges associated with an SSH Key responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSshKeyRightsAndChallenges' operationId: postServerManageGetSshKeyRightsAndChallenges x-operation-id-source: derived /ServerManage/GetSshKeysForLogin: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload11' x-centrify-anon: false description: Provided filter will be matched against Name and Comment fields of SSH Keys using 'starts with'. summary: Fetch the SSH keys available for login responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageGetSshKeysForLogin' operationId: postServerManageGetSshKeysForLogin x-operation-id-source: derived /ServerManage/LogJustificationEvent: post: tags: - Resource Management x-centrify-anon: false summary: Log event for entering justification for login and password checkout responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageLogJustificationEvent' operationId: postServerManageLogJustificationEvent x-operation-id-source: derived /ServerManage/ManageAccounts: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SetQuery: type: string description: Set identifier or sql query for accounts to be managed Ids: items: type: string type: array description: List of Ids for the accounts to be managed RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. type: object required: true x-centrify-anon: false description: You must be a system administrator or a PAS Administrator for this operation to succeed. Must provide either Ids or SetQuery for request. summary: Creates a asynchronous operation which will attempt to put all accounts under… responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageManageAccounts' operationId: postServerManageManageAccounts x-operation-id-source: derived /ServerManage/MoveFolder: post: tags: - Resource Management requestBody: content: application/json: schema: properties: targetFolderName: type: string description: The name of the folder to move to ID: type: string description: The folder ID of the folder to move targetFolderId: type: string description: The ID of the folder to move to required: - ID type: object required: true x-centrify-anon: false description: The provided ID may be either the folder's unique identifier *or* the folder's full path, *not* both. summary: Moves a secret folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageMoveFolder' operationId: postServerManageMoveFolder x-operation-id-source: derived /ServerManage/MoveSecret: post: tags: - Resource Management requestBody: content: application/json: schema: properties: targetFolderName: type: string description: The name of the folder to move the secret to ID: type: string description: The secret ID of the secret to move targetFolderId: type: string description: The ID of the folder to move the secret to required: - ID type: object required: true x-centrify-anon: false description: '' summary: Moves a secret (between folders) responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageMoveSecret' operationId: postServerManageMoveSecret x-operation-id-source: derived /ServerManage/MultiAccountDelete: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: items: type: string description: An account id. type: array description: Array of ids of the accounts to be deleted required: - ID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Delete' permission on the account or have global 'Delete' permission on accounts. summary: Delete multiple accounts at once responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageMultiAccountDelete' operationId: postServerManageMultiAccountDelete x-operation-id-source: derived /ServerManage/MultiAccountPasswordRotation: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload34' x-centrify-anon: false description: '' summary: Rotate multiple accounts at once responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageMultiAccountPasswordRotation' operationId: postServerManageMultiAccountPasswordRotation x-operation-id-source: derived /ServerManage/PatchResource: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload35' x-centrify-anon: false summary: Partial update a system. ID is required responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManagePatchResource' operationId: postServerManagePatchResource x-operation-id-source: derived /ServerManage/PreCheckDomain: post: tags: - Resource Management requestBody: content: application/json: schema: properties: name: type: string description: Name for the domain to be checked required: - name type: object required: true x-centrify-anon: false summary: Check a domain exists or not responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManagePreCheckDomain' operationId: postServerManagePreCheckDomain x-operation-id-source: derived /ServerManage/PreCheckout: post: tags: - Resource Management requestBody: content: application/json: schema: properties: PVID: type: string description: ID of the account required: - PVID type: object required: true x-centrify-anon: false summary: Pre Checkout call to get info for Checkout responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManagePreCheckout' operationId: postServerManagePreCheckout x-operation-id-source: derived /ServerManage/ProvisionReconciliationAccounts: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SetQuery: type: string description: Set identifier or sql query for resources to be deleted Ids: items: type: string type: array description: List of Ids for the resources RunSync: type: boolean description: The operation will be executed synchronously if set to true. Defaults to false. type: object required: true x-centrify-anon: false summary: Provision reconciliation service account to resources responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageProvisionReconciliationAccounts' operationId: postServerManageProvisionReconciliationAccounts x-operation-id-source: derived /ServerManage/RemoveMfaToken: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload18' x-centrify-anon: false summary: Retrieve TOTP token for an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRemoveMfaToken' operationId: postServerManageRemoveMfaToken x-operation-id-source: derived /ServerManage/RequestSecretDownloadUrl: post: tags: - Resource Management requestBody: content: application/json: schema: properties: secretID: type: string description: The ID for the secret required: - secretID type: object required: true x-centrify-anon: false summary: Request secret download url responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRequestSecretDownloadUrl' operationId: postServerManageRequestSecretDownloadUrl x-operation-id-source: derived /ServerManage/RequestSecretUploadUrl: post: tags: - Resource Management requestBody: content: application/json: schema: properties: fileSize: type: integer description: The file size secretID: type: string description: The secretID fileName: type: string description: The file name required: - fileSize - fileName type: object required: true x-centrify-anon: false description: 'Obtains the publicly available (and cloud key-secured) URL for a secret file upload.' summary: Request secret upload url responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRequestSecretUploadUrl' operationId: postServerManageRequestSecretUploadUrl x-operation-id-source: derived /ServerManage/RetrieveSecretContents: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload3' x-centrify-anon: false description: 'with decrypted secret text/password stored in the given data vault item for the respective type. DOC The Secret content field (not always text)' summary: Retrieves the secret entity responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRetrieveSecretContents' operationId: postServerManageRetrieveSecretContents x-operation-id-source: derived /ServerManage/RetrieveSecretMetadata: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload3' x-centrify-anon: false description: 'The decrypted secret text/password is stored in the given data vault item for the respective type.' summary: Retrieves the secret entity responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRetrieveSecretMetadata' operationId: postServerManageRetrieveSecretMetadata x-operation-id-source: derived /ServerManage/RetrieveSshKey: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the SSH Key to retrieve KeyFormat: default: PEM type: string description: KeyFormat to retrieve the key in - only works for PublicKey KeyPairType: type: string description: Which key to retrieve from the pair, must be either PublicKey, PrivateKey, or PPK Passphrase: type: string description: Passphrase to use for encrypting the PrivateKey GetAsFile: default: false type: boolean description: Should the key be retrieved as file? required: - ID - KeyPairType type: object required: true x-centrify-anon: false description: 'The GetAsFile property determines if the return is a JSON strong or a file. Allows retrieval of only private key OR public key - not both. Does not return other SSH key related fields.' summary: Retrieve an SSH key responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRetrieveSshKey' operationId: postServerManageRetrieveSshKey x-operation-id-source: derived /ServerManage/RotatePassword: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ignorecheckouts: default: true type: boolean description: Ignore password checkouts. ID: type: string description: ID of the account required: - ID type: object required: true x-centrify-anon: false summary: Rotate password of a managed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRotatePassword' operationId: postServerManageRotatePassword x-operation-id-source: derived /ServerManage/RotatePasswords: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload34' x-centrify-anon: false description: '' summary: Rotate multiple accounts at once responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageRotatePasswords' operationId: postServerManageRotatePasswords x-operation-id-source: derived /ServerManage/SetAccountCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Grants: properties: Rights: type: string description: 'Permissions: ManageSession, Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: ManageSession, Edit, Delete, Grant' PVID: type: string description: PVID of the account, Set to null for global permissions required: - Grants - PVID type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the resource or have global 'Grant' permission on resources. summary: Grant permissions on account collections responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetAccountCollectionPermissions' operationId: postServerManageSetAccountCollectionPermissions x-operation-id-source: derived /ServerManage/SetAccountPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Grants: properties: Rights: type: string description: 'Permissions: Owner, Naked, Login, Manage, Delete, UpdatePassword, UserPortalLogin, RotatePassword' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Owner, Naked, Login, Manage, Delete, UpdatePassword, UserPortalLogin, RotatePassword' PVID: type: string description: ID of an account or set to null to set global account permissions required: - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the account or have global 'Grant' permission on accounts. summary: Grants permissions on accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetAccountPermissions' operationId: postServerManageSetAccountPermissions x-operation-id-source: derived /ServerManage/SetConnectorSystem: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SystemId: type: string description: ID of the system, or null to clear association ConnectorId: type: string description: ID of the connector required: - SystemId - ConnectorId type: object required: true x-centrify-anon: false summary: Sets the system association for a connector responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetConnectorSystem' operationId: postServerManageSetConnectorSystem x-operation-id-source: derived /ServerManage/SetDatabasePermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload36' x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the database or have global 'Grant' permission on databases. summary: Grant permissions on a database responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetDatabasePermissions' operationId: postServerManageSetDatabasePermissions x-operation-id-source: derived /ServerManage/SetDomainCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the domain set Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Edit, Delete, Grant' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the domain collection. summary: Grant permissions on a domain collection responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetDomainCollectionPermissions' operationId: postServerManageSetDomainCollectionPermissions x-operation-id-source: derived /ServerManage/SetDomainPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the domain Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Edit, Delete, Grant' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the domain. summary: Grant permissions on domains responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetDomainPermissions' operationId: postServerManageSetDomainPermissions x-operation-id-source: derived /ServerManage/SetEscrowKeyFromFile: post: tags: - Resource Management requestBody: content: application/json: schema: properties: File: type: object description: A file containing the escrow key. (Not as a parameter.) required: - File type: object required: true x-centrify-anon: false description: 'If there is no UI powershell can call: "-InFile $filePath".' summary: Set escrow key from file responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetEscrowKeyFromFile' operationId: postServerManageSetEscrowKeyFromFile x-operation-id-source: derived /ServerManage/SetMfaToken: post: tags: - Resource Management requestBody: content: application/json: schema: properties: uri: type: string description: https://github.com/google/google-authenticator/wiki/Key-Uri-Format compliant uri - required if tokendata not provided ID: type: string description: ID of the account to set the token on force: type: boolean description: Forces overwrite if a token secret is already stored on this account tokendata: properties: step: default: '30' type: integer description: Size of time step in seconds digits: default: '6' type: integer description: Number of digits in code issuer: type: string description: Issuer field as per spec counter: type: integer description: hotp counter init value - only required if type is hotp type: default: Totp type: string description: Type of token, Totp or Hotp options label: type: string description: Label describing the token secret: type: string description: Base32 encoded shared secret algorithm: default: Sha1 type: string description: 'Algorithm to use, valid values: Sha1, Sha256, Sha512' type: object description: TOTP information to store, required if uri not provided, ignored if uri is provided required: - ID type: object required: true x-centrify-anon: false summary: Sets an mfa token on an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetMfaToken' operationId: postServerManageSetMfaToken x-operation-id-source: derived /ServerManage/SetResourceCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource, Set to null for global permissions Grants: properties: Rights: type: string description: 'Permissions: ManageSession, Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: ManageSession, Edit, Delete, Grant' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the resource or have global 'Grant' permission on resources. summary: Grant permissions on resource collections responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetResourceCollectionPermissions' operationId: postServerManageSetResourceCollectionPermissions x-operation-id-source: derived /ServerManage/SetResourcePermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the resource, Set to null for global permissions Grants: properties: Rights: type: string description: 'Permissions: ManageSession, Edit, Delete, Grant, AgentAuth' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: ManageSession, Edit, Delete, Grant, AgentAuth' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the resource or have global 'Grant' permission on resources. summary: Grant permissions on resources responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetResourcePermissions' operationId: postServerManageSetResourcePermissions x-operation-id-source: derived /ServerManage/SetSecretCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The secret collection ID. Grants: items: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: A collection permission. type: array description: A list of permissions on a collection/set of type secrets. required: - ID - Grants type: object required: true x-centrify-anon: false description: '- There is no return value, only a successful html result code (200) - You must be a system administrator or have ''Grant'' permission on the secrets collection.' summary: Sets a list of grants associated with a collection of secrets responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetSecretCollectionPermissions' operationId: postServerManageSetSecretCollectionPermissions x-operation-id-source: derived /ServerManage/SetSecretPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Grants: items: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: A permission. type: array description: A list of permissions for the secret. required: - Grants type: object required: true x-centrify-anon: false description: '- There is no return value, only a successful html result code (200) - You must be a system administrator or have ''Grant'' permission on the secret or have global ''Grant'' permission on secrets.' summary: Sets permissions on a secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetSecretPermissions' operationId: postServerManageSetSecretPermissions x-operation-id-source: derived /ServerManage/SetSecretsFolderPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The folder ID Grants: type: string description: The folder permissions required: - ID - Grants type: object required: true x-centrify-anon: false description: No meaningful result. HTTP code 200 indicates success summary: Sets the permissions on a folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetSecretsFolderPermissions' operationId: postServerManageSetSecretsFolderPermissions x-operation-id-source: derived /ServerManage/SetSshKeyCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the domain set Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant, View, Retrieve' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Edit, Delete, Grant, View, Retrieve' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the SSH Key collection. summary: Grant permissions on SSH keys collection responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetSshKeyCollectionPermissions' operationId: postServerManageSetSshKeyCollectionPermissions x-operation-id-source: derived /ServerManage/SetSshKeyPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of an SSH key or set to null Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant, View, Retrieve' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.. ' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Edit, Delete, Grant, View, Retrieve' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the SSH key. summary: Grants permissions on SSH keys responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageSetSshKeyPermissions' operationId: postServerManageSetSshKeyPermissions x-operation-id-source: derived /ServerManage/TerminateSession: post: tags: - Resource Management requestBody: content: application/json: schema: properties: connectionID: type: string description: ID for the connection made between cloud connector and cloud required: - connectionID type: object required: true x-centrify-anon: false summary: Terminate an active session responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageTerminateSession' operationId: postServerManageTerminateSession x-operation-id-source: derived /ServerManage/UpdateAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: IsManaged: type: boolean description: True to create a managed account Host: type: string description: ID of the resource DomainID: type: string description: ID of the domain WorkflowApprovers: items: type: object type: array description: An array of WorkflowApprover objects. Refer to WorkflowApprover. Not necessary when removing workflow. BackupApprover: type: object description: Determines approver if user has no manager. Refer to WorkflowApprover. Use WorkflowApprover object. Only required when NoManagerAction=useBackup WorkflowApprover: properties: DirectoryServiceUuid: type: string description: Directory service Uuid ServiceInstance: type: string description: Same as ServiceType Status: type: string description: 'Account status. Ex: "Active"' DisplayName: type: string description: User display name ObjectType: type: string description: 'Approver object type ex: "User"' BackupApprover: type: object description: Backup Approver object. Same schema as WorkflowApprover. StatusEnum: type: string description: Same as "Status" SystemName: type: string description: Name of account on system EMail: type: string description: Account email DistinguishedName: type: string description: Full login name of Approver. Locked: type: boolean description: Is the user locked. ServiceType: type: string description: Directory service type Guid: type: string description: Internal UUID of account. Same as InternalName Principal: type: string description: Account Name Type: type: string description: 'Account type. ex: "User"' InternalName: type: string description: Internal UUID of account Enabled: type: boolean description: Is account enabled PType: type: string description: 'Account type. ex: "User"' ServiceInstanceLocalized: type: string description: Explicitly written Service Instance. Name: type: string description: Account Name type: object description: For when there is just one workflow approver. WorkflowDefaultOptions: type: string description: 'Stringified JSON object detailing default options. Example: {"GrantMin":60}' ID: type: string description: ID of the account to be updated UseWheel: type: boolean description: True to use proxy account WorkflowSent: type: boolean description: Informs whether or not this is a workflow change. NoManagerAction: type: string description: Determines what to do when account/system does not have manager. Not required. "useBackup", "approve" or "deny" DatabaseID: type: string description: ID of the database User: type: string description: User name for the account WorkflowEnabled: type: boolean description: Determines whether you are removing or adding/updating a workflow WorkflowApproversList: items: type: object type: array description: Identical to WorkflowApprovers. Refer to WorkflowApprover. Stored in database, but not used in code. Description: type: string description: Description for the account type: object required: true x-centrify-anon: false description: Either "Host" or "DomainID" or "DatabaseID" should be provided. summary: Update an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateAccount' operationId: postServerManageUpdateAccount x-operation-id-source: derived /ServerManage/UpdateDatabase: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SslEnabled: type: boolean description: For SAP ASE Database, TRUE if SSL is enabled for the port PasswordProfileID: type: string description: Password profile ID for the database TrustedFile: type: string description: 'For SAP ASE Database, SSL Certificate/TrustedFile: if SslEnabled is true' Port: type: integer description: Port number to access the database FQDN: type: string description: DNS name or IP address to access the database InstanceName: type: string description: The instance name of the database. Applicable to SQL Server only. ID: type: string description: ID of the database ServiceName: type: string description: The service name of the database. Applicable to Oracle Database only. MinimumPasswordAge: default: '0' type: integer description: Minimum password age DatabaseClass: type: string description: 'Database type: Oracle, SQLServer' ProxyCollectionList: type: string description: List of proxy IDs Description: type: string description: Description of the database Name: type: string description: Name of the database required: - PasswordProfileID - Port - FQDN - InstanceName - ID - ServiceName - DatabaseClass - ProxyCollectionList - Description type: object required: true x-centrify-anon: false summary: Update a database responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateDatabase' operationId: postServerManageUpdateDatabase x-operation-id-source: derived /ServerManage/UpdateDomain: post: tags: - Resource Management requestBody: content: application/json: schema: properties: AllowManualAccountUnlock: type: boolean description: Allow Domain administrative account on the domain to manually unlock domain accounts AllowHealthCheck: type: boolean description: 'Allow periodic health check ' HealthCheckInterval: default: '1' type: integer description: Health check interval Description: type: string description: Description for the domain Name: type: string description: Name for the domain ProxyCollectionList: type: string description: List of cloud connector IDs DefaultCheckoutTime: default: '60' type: integer description: Checkout lifetime PasswordHistoryCleanUpDuration: default: '365' type: integer description: Password history cleanup interval AllowAutomaticAccountMaintenance: type: boolean description: Allow Domain administrative account on the domain to reset domain account passwords PasswordRotateDuration: default: '90' type: integer description: Password rotation interval AllowMultipleCheckouts: type: boolean description: Allow multiple password checkouts AllowPasswordHistoryCleanUp: type: boolean description: Enable periodic password history cleanup AllowAutomaticLocalAccountMaintenance: default: false type: boolean description: Allow Domain administrative account on the domain to reset local account passwords on systems joined to this domain ID: type: string description: ID of the domain to be updated AllowManualLocalAccountUnlock: default: false type: boolean description: Allow Domain administrative account on the domain to manually unlock local accounts on systems joined to this domain MinimumPasswordAge: default: '0' type: integer description: Minimum password age AllowPasswordRotation: default: false type: boolean description: Allow to rotate password periodically PasswordProfileID: type: string description: Password profile ID for the domain required: - AllowManualAccountUnlock - AllowAutomaticAccountMaintenance - ID type: object required: true x-centrify-anon: false summary: Updates a domain responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateDomain' operationId: postServerManageUpdateDomain x-operation-id-source: derived /ServerManage/UpdatePassword: post: tags: - Resource Management requestBody: content: application/json: schema: properties: Password: type: string description: New password ID: type: string description: ID of the account required: - Password - ID type: object required: true x-centrify-anon: false description: Account password on the target resource is not changed. summary: Updates password of an account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdatePassword' operationId: postServerManageUpdatePassword x-operation-id-source: derived /ServerManage/UpdateResource: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload35' x-centrify-anon: false summary: Update a system responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateResource' operationId: postServerManageUpdateResource x-operation-id-source: derived /ServerManage/UpdateSecret: post: tags: - Resource Management requestBody: content: application/json: schema: properties: SecretFilePath: type: string description: The file path from a call to for file type secrets SecretName: type: string description: The secret name WorkflowApprovers: properties: DirectoryServiceUuid: type: string description: Directory service Uuid ServiceInstance: type: string description: Same as ServiceType Status: type: string description: 'Account status. Ex: "Active"' DisplayName: type: string description: User display name ObjectType: type: string description: 'Approver object type ex: "User"' StatusEnum: type: string description: Same as "Status" SystemName: type: string description: Name of account on system EMail: type: string description: Account email DistinguishedName: type: string description: Full login name of Approver. Locked: type: boolean description: Is the user locked. ServiceType: type: string description: Directory service type Guid: type: string description: Internal UUID of account. Same as InternalName Principal: type: string description: Account Name Type: type: string description: 'Account type. ex: "User"' InternalName: type: string description: Internal UUID of account Enabled: type: boolean description: Is account enabled PType: type: string description: 'Account type. ex: "User"' ServiceInstanceLocalized: type: string description: Explicitly written Service Instance. Name: type: string description: Account Name items: type: object type: array description: An array of objects WorkflowDefaultOptions: type: string description: 'Stringified JSON object detailing default options. Example: {"GrantMin":60}' ID: type: string description: The ID for the secret SecretFileSize: type: string description: The file size from a call to for file type secrets SecretText: type: string description: The secret text contents for text type secrets WorkflowSent: type: boolean description: Informs whether or not this is a workflow change. SecretFilePassword: type: string description: The password for a protected secret file WorkflowEnabled: type: boolean description: Determines whether you are removing or adding/updating a workflow Description: type: string description: The secret description required: - SecretName type: object required: true x-centrify-anon: false description: '' summary: UpdateSecret - Updates a secret responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateSecret' operationId: postServerManageUpdateSecret x-operation-id-source: derived /ServerManage/UpdateSecretsFolder: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DataVaultDefaultProfile: type: object description: The default profile for the folder DataVaultRules: type: object description: The rules for the folder Description: type: string description: The folder description Name: type: string description: The folder name required: - Name type: object required: true x-centrify-anon: false description: '' summary: Updates a secret folder responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateSecretsFolder' operationId: postServerManageUpdateSecretsFolder x-operation-id-source: derived /ServerManage/UpdateSettings: post: tags: - Resource Management requestBody: content: application/json: schema: properties: settings: properties: AllowHealthCheck: type: boolean description: Used only for key:Policy. Determines whether Health Check is allowed. HealthCheckInterval: type: integer description: 'Used only for key:Policy. Assigns health check interval. Minimum value: 1' AllowRemote: type: boolean description: Used only for key:Policy. Policy that determines whether this system will allow remote connections. AllowPermanentLoginWorkflow: type: boolean description: Used only for key:Policy. Determines whether Permanent Login Workflow is allowed. DefaultOptions: type: string description: Used only for key:wf. Stringified JSON object detailing default options. DefaultCheckoutTime: type: integer description: 'Used only for key:Policy. Sets the Default Account Checkout time on this system in minutes. Minimum Value: 15' SSHGatewayCustomBannerEnabled: type: boolean description: Used only for key:Policy. Determines whether SSH Gateway Custom Banner is enabled. PasswordHistoryCleanUpDuration: type: integer description: 'Used only for key:Policy. Assigns Password History Cleanup Duration. Minimum Value: 90.' SSHGatewayBanner: type: string description: Used only for key:Policy. Banner for Custom SSH Gateway banner. Enabled: type: boolean description: Used only for key:wf. Determines whether you are removing or adding/updating a workflow AllowPermanentCheckoutWorkflow: type: boolean description: Used only for key:Policy. Determines whether Permanent Checkout Workflow is allowed. PasswordRotateDuration: type: integer description: 'Used only for key:Policy. Assigns Password Rotation Duration. Minimum Value: 1.' AllowMultipleCheckouts: type: boolean description: Used only for key:Policy. Determines whether multiple checkouts are allowed. AllowPasswordHistoryCleanUp: type: boolean description: Used only for key:Policy. Determines whether Password History Cleanup is allowed. BackupApprover: type: object description: Used only for key:wf. Workflow approver object, see "Approvers". Determines approver if user has no manager. Only required when NoManagerAction=useBackup Approvers: items: properties: DirectoryServiceUuid: type: string description: Directory service Uuid ServiceInstance: type: string description: Same as ServiceType Status: type: string description: 'Account status. Ex: "Active"' DisplayName: type: string description: User display name ObjectType: type: string description: 'Approver object type ex: "User"' BackupApprover: type: object description: Backup Approver object. Same schema as Approvers. StatusEnum: type: string description: Same as "Status" SystemName: type: string description: Name of account on system EMail: type: string description: Account email DistinguishedName: type: string description: Full login name of Approver. Locked: type: boolean description: Is the user locked. ServiceType: type: string description: Directory service type Guid: type: string description: Internal UUID of account. Same as InternalName Principal: type: string description: Account Name Type: type: string description: 'Account type. ex: "User"' InternalName: type: string description: Internal UUID of account Enabled: type: boolean description: Is account enabled PType: type: string description: 'Account type. ex: "User"' ServiceInstanceLocalized: type: string description: Explicitly written Service Instance. Name: type: string description: Account Name type: object description: Workflow Approver objects. type: array description: Used only for key:wf. An array of WorkflowApprover objects. Not necessary when removing workflow. MinimumPasswordAge: type: integer description: Used only for key:Policy. Assigns Minimum Password Age. AllowPasswordRotation: type: boolean description: Used only for key:Policy. Determines whether Password Rotation is allowed. NoManagerAction: type: string description: Used only for key:wf. Determines what to do when account/system does not have manager. Not required. "useBackup", "approve" or "deny" type: object description: Array of settings that can be set key: type: string description: Type of the settings being updated. Either "wf" or "policy". required: - settings - key type: object required: true x-centrify-anon: false summary: Update server settings responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateSettings' operationId: postServerManageUpdateSettings x-operation-id-source: derived /ServerManage/UpdateSshKey: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the SSH Key to update Comment: type: string description: Description of the the SSH key Name: type: string description: Name of the SSH key to update required: - ID type: object required: true x-centrify-anon: false description: This endpoint is meant to be used with the info obtained from GetSshKeyInfo. summary: Update fields on an SSH key responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUpdateSshKey' operationId: postServerManageUpdateSshKey x-operation-id-source: derived /ServerManage/UploadSecretFileInChunks: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload15' x-centrify-anon: false description: Uploads a secret file in data chunks. Each chunk is encrypted on its way to storage. summary: Upload secret file in chunks responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageUploadSecretFileInChunks' operationId: postServerManageUploadSecretFileInChunks x-operation-id-source: derived /ServerManage/VerifyAccountPasswordManagementSettings: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DomainId: type: string description: Optionally the ID of the domain ID: type: string description: ID of the system AllowManualLocalAccountUnlock: default: false type: boolean description: Allow local account manual unlock using a privileged account AdministrativeAccountID: type: string description: ID for the local administrator VerifyReconciliationSettingsType: default: Default type: string description: 'Configuration settings to be verifed. Types: Local, Domain, Default' AllowAutomaticLocalAccountMaintenance: default: false type: boolean description: Allow local account automatic maintenance using a privileged account required: - ID type: object required: true x-centrify-anon: false description: In the response the Reason and ReasonId are empty when IsValid is false. When IsValid is true they are filled with the reason why it is not valid summary: Walks thru a checklist of items to verify a domain administrative account can… responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerManageVerifyAccountPasswordManagementSettings' operationId: postServerManageVerifyAccountPasswordManagementSettings x-operation-id-source: derived /ServerSession/GetLoginUrl: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ResourceId: type: string description: The resource unique identifier. This argument is required when AccessType is Login. AccountId: type: string description: The account unique identifier. AccessType: type: string description: The type of access being requested (Checkout, Login). required: - AccountId - AccessType type: object required: true x-centrify-anon: false summary: Get login url responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ServerSessionGetLoginUrl' operationId: postServerSessionGetLoginUrl x-operation-id-source: derived /Subscriptions/AddSubscription: post: tags: - Resource Management requestBody: content: application/json: schema: properties: RestartService: default: false type: boolean description: Restart the service. RestartEndTime: type: string description: When to end the service start. ComputerID: type: string description: The subscription computer id. WindowsServiceName: type: string description: The windows service name. RestartTimeRestriction: default: false type: boolean description: Restrict the service restart time. AccountID: type: string description: The subscription account id. Required when IsActive is true. RestartTimeInUtc: type: string description: When to restart the service utc time. IsActive: default: true type: boolean description: Is the subscription active. Type: type: string description: Is the subscription type. DaysOfWeek: type: string description: Days of the week to restart the service. Mode: type: string description: Is the subscription mode. PushCreds: type: string description: The subscription push credentials. Required when IsActive is true. Description: type: string description: The subscription description. RestartStartTime: type: string description: When to start the service restart. required: - ComputerID - WindowsServiceName - Type type: object required: true x-centrify-anon: false summary: Add a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsAddSubscription' operationId: postSubscriptionsAddSubscription x-operation-id-source: derived /Subscriptions/CreateMPAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: RealAccounts: items: type: string type: array description: A list of real accounts. Description: type: string description: The multiplexed account description. Name: type: string description: The multiplexed account name. required: - RealAccounts - Name type: object required: true x-centrify-anon: false summary: Create a multiplexed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsCreateMPAccount' operationId: postSubscriptionsCreateMPAccount x-operation-id-source: derived /Subscriptions/DeleteMPAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The multiplexed account to delete. required: - ID type: object required: true x-centrify-anon: false summary: Delete a multiplexed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsDeleteMPAccount' operationId: postSubscriptionsDeleteMPAccount x-operation-id-source: derived /Subscriptions/DeleteSubscription: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The subscription id to delete. required: - ID type: object required: true x-centrify-anon: false summary: Delete a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsDeleteSubscription' operationId: postSubscriptionsDeleteSubscription x-operation-id-source: derived /Subscriptions/GetAllLaggers: post: tags: - Resource Management x-centrify-anon: false summary: Get all delayed multiplexed accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetAllLaggers' operationId: postSubscriptionsGetAllLaggers x-operation-id-source: derived /Subscriptions/GetMultiplexedAccount: post: tags: - Resource Management parameters: - required: true in: query description: The multiplexed account id. name: id schema: type: string x-centrify-anon: false summary: Get multiplexed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetMultiplexedAccount' operationId: postSubscriptionsGetMultiplexedAccount x-operation-id-source: derived /Subscriptions/GetMultiplexedAccountPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the multiplexed account, set to null to get global permissions RRFormat: default: false type: boolean description: Return data in database format. required: - ID type: object required: true x-centrify-anon: false summary: Get list of permissions associated with a multiplexed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetMultiplexedAccountPermissions' operationId: postSubscriptionsGetMultiplexedAccountPermissions x-operation-id-source: derived /Subscriptions/GetMultiplexedAccountRights: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The multiplexed account id. required: - ID type: object required: true x-centrify-anon: false summary: Get multiplexed account rights responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetMultiplexedAccountRights' operationId: postSubscriptionsGetMultiplexedAccountRights x-operation-id-source: derived /Subscriptions/GetMultiplexedAccounts: post: tags: - Resource Management x-centrify-anon: false summary: Get all multiplexed accounts responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetMultiplexedAccounts' operationId: postSubscriptionsGetMultiplexedAccounts x-operation-id-source: derived /Subscriptions/GetSubscription: post: tags: - Resource Management parameters: - required: true in: query description: The subscription id. name: id schema: type: string x-centrify-anon: false summary: Get a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetSubscription' operationId: postSubscriptionsGetSubscription x-operation-id-source: derived /Subscriptions/GetSubscriptionCollectionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload33' x-centrify-anon: false summary: Gets list of grants associated with collection of subscriptions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetSubscriptionCollectionPermissions' operationId: postSubscriptionsGetSubscriptionCollectionPermissions x-operation-id-source: derived /Subscriptions/GetSubscriptionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the subscription, set to null to get global permissions RRFormat: default: false type: boolean description: Return data in database format. required: - ID type: object required: true x-centrify-anon: false summary: Get list of permissions associated with a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetSubscriptionPermissions' operationId: postSubscriptionsGetSubscriptionPermissions x-operation-id-source: derived /Subscriptions/GetSubscriptionRights: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The subscription id. required: - ID type: object required: true x-centrify-anon: false summary: Get subscription rights responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsGetSubscriptionRights' operationId: postSubscriptionsGetSubscriptionRights x-operation-id-source: derived /Subscriptions/PushSubscription: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The subscription id to push. EnforceTimeRestriction: default: true type: boolean description: Enforce the time restriction on the subscription. required: - ID type: object required: true x-centrify-anon: false summary: Push a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsPushSubscription' operationId: postSubscriptionsPushSubscription x-operation-id-source: derived /Subscriptions/SetMultiplexedAccountPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload37' x-centrify-anon: false summary: Grant permissions on a multiplexed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsSetMultiplexedAccountPermissions' operationId: postSubscriptionsSetMultiplexedAccountPermissions x-operation-id-source: derived /Subscriptions/SetSubscriptionCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the subscription, Set to null for global permissions Grants: properties: Granter: type: string description: Who is granting the permissions. Rights: type: string description: 'Permissions: Edit, Delete, Grant.' Principal: type: string description: User name or role name. PrincipalId: type: string description: Uuid of the principal. PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Grant, Edit.. ' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the subscription collection or have global 'Grant' permission on subscription collection. summary: Grant permissions on a subscription collection responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsSetSubscriptionCollectionPermissions' operationId: postSubscriptionsSetSubscriptionCollectionPermissions x-operation-id-source: derived /Subscriptions/SetSubscriptionPermissions: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload37' x-centrify-anon: false description: You must be a system administrator or have 'Grant' permission on the subscription or have global 'Grant' permission on subscriptions. summary: Grant permissions on a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsSetSubscriptionPermissions' operationId: postSubscriptionsSetSubscriptionPermissions x-operation-id-source: derived /Subscriptions/Sync: post: tags: - Resource Management requestBody: content: application/json: schema: properties: MySubscriptions: items: properties: RestartService: type: boolean description: Restart the service. RestartEndTime: type: string description: When to end the service start. ComputerID: type: string description: The subscription computer id. WindowsServiceName: type: string description: The windows service name. RestartTimeRestriction: type: boolean description: Restrict the service restart time. AccountID: type: string description: The subscription account id. Required when IsActive is true. RestartTimeInUtc: type: string description: When to restart the service utc time. IsActive: default: true type: boolean description: Is the subscription active. Type: type: string description: Is the subscription type. DaysOfWeek: type: string description: Days of the week to restart the service. Mode: type: string description: Is the subscription mode. PushCreds: type: string description: The subscription push credentials. Required when IsActive is true. Description: type: string description: The subscription description. RestartStartTime: type: string description: When to start the service restart. type: object description: A subscription. type: array description: A list of subscriptions to sync. required: - MySubscriptions type: object required: true x-centrify-anon: false summary: Sync my subscriptions responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsSync' operationId: postSubscriptionsSync x-operation-id-source: derived /Subscriptions/UpdateMPAccount: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: The multiplexed account to update. RealAccounts: items: type: string type: array description: A list of real accounts. Description: type: string description: The multiplexed account description. Name: type: string description: The multiplexed account name. required: - ID - RealAccounts - Name type: object required: true x-centrify-anon: false summary: Update a multiplexed account responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsUpdateMPAccount' operationId: postSubscriptionsUpdateMPAccount x-operation-id-source: derived /Subscriptions/UpdateSubscription: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: properties: RestartService: type: boolean description: Restart the service. RestartEndTime: type: string description: When to end the service start. ComputerID: type: string description: The subscription computer id. WindowsServiceName: type: string description: The windows service name. RestartTimeRestriction: type: boolean description: Restrict the service restart time. AccountID: type: string description: The subscription account id. Required when IsActive is true. RestartTimeInUtc: type: string description: When to restart the service utc time. IsActive: default: true type: boolean description: Is the subscription active. Type: type: string description: Is the subscription type. DaysOfWeek: type: string description: Days of the week to restart the service. Mode: type: string description: Is the subscription mode. PushCreds: type: string description: The subscription push credentials. Required when IsActive is true. Description: type: string description: The subscription description. RestartStartTime: type: string description: When to start the service restart. type: object description: The subscription id to update. required: - ID type: object required: true x-centrify-anon: false summary: Update a subscription responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/SubscriptionsUpdateSubscription' operationId: postSubscriptionsUpdateSubscription x-operation-id-source: derived /Vault/AddVault: post: tags: - Resource Management x-centrify-anon: false summary: Add a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultAddVault' operationId: postVaultAddVault x-operation-id-source: derived /Vault/DeleteVault: post: tags: - Resource Management x-centrify-anon: false summary: Delete a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultDeleteVault' operationId: postVaultDeleteVault x-operation-id-source: derived /Vault/GetAllVaultSites: post: tags: - Resource Management x-centrify-anon: false summary: Get all sites in a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetAllVaultSites' operationId: postVaultGetAllVaultSites x-operation-id-source: derived /Vault/GetAllVaultTemplates: post: tags: - Resource Management x-centrify-anon: false summary: Get all templates in a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetAllVaultTemplates' operationId: postVaultGetAllVaultTemplates x-operation-id-source: derived /Vault/GetAllVaults: post: tags: - Resource Management x-centrify-anon: false summary: Get all vaults responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetAllVaults' operationId: postVaultGetAllVaults x-operation-id-source: derived /Vault/GetHistory: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DaysCount: default: 30 type: integer description: How many days of history to get. VaultId: type: string description: ID of the vault to get history of. RRFormat: default: false type: boolean description: Return data in database format. required: - VaultId type: object required: true x-centrify-anon: false summary: Get vault sync job history responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetHistory' operationId: postVaultGetHistory x-operation-id-source: derived /Vault/GetJobHistory: post: tags: - Resource Management requestBody: content: application/json: schema: properties: JobId: type: string description: ID of the vualt sync job. required: - JobId type: object required: true x-centrify-anon: false summary: Get information of a specific vault sync job responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetJobHistory' operationId: postVaultGetJobHistory x-operation-id-source: derived /Vault/GetVault: post: tags: - Resource Management x-centrify-anon: false summary: Get a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetVault' operationId: postVaultGetVault x-operation-id-source: derived /Vault/GetVaultSite: post: tags: - Resource Management x-centrify-anon: false summary: Get a site in a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultGetVaultSite' operationId: postVaultGetVaultSite x-operation-id-source: derived /Vault/SetVaultCollectionPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the vault collection Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, Retrieve, None' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, Retrieve, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the vault. summary: Grant permissions on vault collection responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultSetVaultCollectionPermissions' operationId: postVaultSetVaultCollectionPermissions x-operation-id-source: derived /Vault/SetVaultPermissions: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ID: type: string description: ID of the vault Grants: properties: Rights: type: string description: 'Comma separated list of permissions: Grant, View, Edit, Delete, Retrieve, None' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc.' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role, Rights: Grant, View, Edit, Delete, Retrieve, or None' required: - ID - Grants type: object required: true x-centrify-anon: false description: You must have 'Grant' permission on the vault. summary: Grant permissions on vaults responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultSetVaultPermissions' operationId: postVaultSetVaultPermissions x-operation-id-source: derived /Vault/SyncVault: post: tags: - Resource Management x-centrify-anon: false summary: Sync systems and accounts from a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultSyncVault' operationId: postVaultSyncVault x-operation-id-source: derived /Vault/UpdateVault: post: tags: - Resource Management x-centrify-anon: false summary: Update vault information responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultUpdateVault' operationId: postVaultUpdateVault x-operation-id-source: derived /Vault/VerifyVault: post: tags: - Resource Management x-centrify-anon: false summary: Verify connectivity to a vault responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/VaultVerifyVault' operationId: postVaultVerifyVault x-operation-id-source: derived /ZoneRoleWorkflow/CreateAssignment: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ScopeType: type: string description: The assignment scope type. RoleName: type: string description: The role name. EndTime: type: string description: The assignment end time. RoleZoneDn: type: string description: The zone distinguished name for the role. ResourceId: type: string description: The assignment resource id. StartTime: type: string description: The assignment start time. UserName: type: string description: The assignment user name. AssignedZoneId: type: string description: The resource assigned zone id. required: - ScopeType - RoleName - RoleZoneDn - ResourceId - UserName - AssignedZoneId type: object required: true x-centrify-anon: false summary: Create assignment responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowCreateAssignment' operationId: postZoneRoleWorkflowCreateAssignment x-operation-id-source: derived /ZoneRoleWorkflow/DeleteExpiredAssignments: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload39' x-centrify-anon: false summary: Delete expired assignments responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowDeleteExpiredAssignments' operationId: postZoneRoleWorkflowDeleteExpiredAssignments x-operation-id-source: derived /ZoneRoleWorkflow/GetAllRoles: post: tags: - Resource Management requestBody: content: application/json: schema: properties: DomainId: type: string description: The domain id. ResourceId: type: string description: The resource id. type: object required: true x-centrify-anon: false description: Define either DomainId or ResourceId. summary: Get all roles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowGetAllRoles' operationId: postZoneRoleWorkflowGetAllRoles x-operation-id-source: derived /ZoneRoleWorkflow/GetApprovers: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ScopeType: type: string description: The scope type set to Computer. ResourceId: type: string description: The resource unique identifier. AssignedZoneId: type: string description: The resource assigned zone unique identifier. required: - ScopeType - ResourceId - AssignedZoneId type: object required: true x-centrify-anon: false summary: Get workflow approvers responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowGetApprovers' operationId: postZoneRoleWorkflowGetApprovers x-operation-id-source: derived /ZoneRoleWorkflow/GetDomainConfiguration: post: tags: - Resource Management requestBody: $ref: '#/components/requestBodies/Payload39' x-centrify-anon: false summary: Get the domain configuration responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowGetDomainConfiguration' operationId: postZoneRoleWorkflowGetDomainConfiguration x-operation-id-source: derived /ZoneRoleWorkflow/GetRoles: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ResourceId: type: string description: The resource unique identifier. required: - ResourceId type: object required: true x-centrify-anon: false summary: Get resource roles responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowGetRoles' operationId: postZoneRoleWorkflowGetRoles x-operation-id-source: derived /ZoneRoleWorkflow/RefreshResourceZoneJoined: post: tags: - Resource Management requestBody: content: application/json: schema: properties: ResourceId: type: string description: The resource id. required: - ResourceId type: object required: true x-centrify-anon: false summary: Refresh the resource's "zone joined" status responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowRefreshResourceZoneJoined' operationId: postZoneRoleWorkflowRefreshResourceZoneJoined x-operation-id-source: derived /ZoneRoleWorkflow/ValidateRoleRequest: post: tags: - Resource Management requestBody: content: application/json: schema: properties: RoleName: type: string description: The role name. ScopeType: type: string description: The scope type set to Computer. RoleZoneDn: type: string description: The zone distinguished name for the role. ResourceId: type: string description: The resource unique identifier. required: - RoleName - ScopeType - RoleZoneDn - ResourceId type: object required: true x-centrify-anon: false summary: Validate user role request responses: '200': description: API-Result content: '*/*': schema: $ref: '#/components/schemas/ZoneRoleWorkflowValidateRoleRequest' operationId: postZoneRoleWorkflowValidateRoleRequest x-operation-id-source: derived components: schemas: ServerManageSetResourceCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetDatabaseCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountSetDiscoveryProfilePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderDeleteCloudProviders: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns the JobId for the BulkCloudProviderDelete job. If RunSync is not provided, or passed as false, this id is valid for use with related Job APIs. If RunSync is passed as true, the operation id cannot be used with Job APIs. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetRegionNames: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentGetDirectAuditConfiguration: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A DirectAudit configuration type: object properties: LegacyEndpoints: items: type: string type: array description: All legacy endpoints serving the Audit Store InstallationId: type: string description: Unique ID of the DirectAudit installation SitesInScope: items: type: string type: array description: Scope of the Audit Store (AD sites) AuditStoreName: type: string description: Name of the Audit Store in scope SubnetsInScope: items: type: string type: array description: Scope of the Audit Store (Subnets) InstallationName: type: string description: Name of the DirectAudit installation SslEndpoints: items: type: string type: array description: All SSL endpoints serving the Audit Store Enabled: type: boolean description: Is DirectAudit enabled for the tenant VideoAuditEnabled: type: boolean description: Is video audit enabled for the DirectAudit installation Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentGetAllConfigFiles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of config files type: object properties: UploadDate: type: string description: Date the config file was pushed Desc: type: string description: Description of the config file FileName: type: string description: Name of the configfile in linux system Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUploadSecretFileInChunks: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsSync: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of synced subscriptions. type: array items: type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageMultiAccountDelete: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , If the resource is deleted successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretApprovers: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: name of the secret type: object properties: WorkflowApprovers: items: type: object type: array description: List of approving users WorkflowDefaultOptions: type: object description: Workflow options WorkflowEnabled: type: boolean description: Is workflow enabled? Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetAllLaggers: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of multiplexed accounts. type: array items: description: A multiplexed account. type: object properties: RealAccounts: description: A list of real accounts. type: array items: type: string Name: description: The multiplexed account name. type: string Description: description: The multiplexed account description. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsSetSubscriptionCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object QuickStartGetState: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The current quick start state. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddSshKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The newly added SSH key UUID. If ImplicitRename is true, returns an object of {ID:"foo", Name:"bar"} type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsDeployConnector: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileAddResourceProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the resource profile type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the newly added account type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetMySessions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of ongoing Rdp or ssh sessions for a given user type: object properties: AccountType: type: string description: Type of the account - Domain or Local AccountID: type: string description: ID of the account SessionType: type: string description: 'Session type: Rdp, Ssh' OperationMode: type: string description: Session mode - Web/Native SessionID: type: string description: ID for the session Height: type: integer description: Height of the session window HostID: type: string description: ID of the resource HostName: type: string description: Name of the resource DesktopAppId: type: string description: Desktop App Id Host: type: string description: DNS name or IP address of resource Started: type: string description: Session starts timestamp User: type: string description: Logged-in Cloud or AD Username LoggedUser: type: string description: Name of the Account ProxyUUID: type: string description: Connector Id SessionIdentity: type: string description: Session identity ConnectionID: type: string description: ID for the connection made between cloud connector and cloud Width: type: integer description: Width of the session window ProxyVersion: type: string description: Cloud connector version ProxyIdentity: type: string description: ID for the cloud connector JumpType: type: string description: Type of the Session - RDP/SSH Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetMyWorkspaceAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of accounts type: object properties: DiscoveredTime: type: string description: Time account discovered if the account is imported using discover PasswordResetLastError: type: string description: Error in last Reset Run Healthy: type: string description: Health Status of the account e.g. "OK" or Failed etc. Description: type: string description: Description of the account Name: type: string description: Name of the parent object e.g. System/Domain/Database DefaultCheckoutTime: type: string description: Default checkout time WorkflowApprovers: type: object description: An array of WorkflowApprover objects. Refer to WorkflowApprover. IsManaged: type: boolean description: Determines if the account is managed or unmanaged DatabaseID: type: string description: Id of the database if the account is database account DeviceID: type: string description: Id of the device if the account is device account IsRootAccount: type: boolean description: Determines if this is a root account. LastChange: type: string description: Last updated time of the account MPParent: type: string description: Id of the parent multiplex account if the account is part CloudProviderId: type: string description: Cloud Provider Id CredentialId: type: string description: Id of the account used IsServiceAccount: type: boolean description: Determine if this is service account. IsQuickStartAccount: type: string description: Determines if this is a quickstart account DueBack: type: string description: Due time of the checkout if the account is checked out UseWheel: type: boolean description: True to use proxy account PasswordResetRetryCount: type: string description: Count of password reset retry done. DomainID: type: string description: Id of the domain if the account is domain account HealthError: type: string description: Health status details Host: type: string description: Id of the system if the account is local account WorkflowEnabled: type: string description: Determines if the workflow is enabled User: type: string description: User name for the account ID: type: string description: Id of the account LastHealthCheck: type: string description: Last update health check of the account Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentGetCertificate: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: PKCS12 Certificate type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetJobHistory: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A vault sync job. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddSecretsFolder: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the new folder type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetAgentProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Agent profile associated with the provided computer type: object properties: AgentVersion: type: string description: Agent Version JoinedByID: type: string description: ID of user who enrolled the agent FQDN: type: string description: Configured FQDN of agent machine FeatureDMC: type: boolean description: State of the DMC feature FeatureAAPM: type: boolean description: State of the AAPM feature FeatureAgentAuth: type: boolean description: State of the Agent Auth feature OperatingSystem: type: string description: Operating System Joined: type: boolean description: Status of enrollment Name: type: string description: Name of the agent identity Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentDeleteConfigFile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns true if the operation is successful type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetAccountCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRetrieveSecretContents: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The secret entity. type: object properties: SecretFilePath: type: string description: The file path to a call to for file type secrets SecretName: type: string description: The secret name SecretFileSize: type: string description: The file size to a call to for file type secrets SecretText: type: string description: The secret text for text type secrets WhenCreated: type: string description: When the secret was created SecretFilePassword: type: string description: The password for a protected secret file Type: type: string description: The secret type Description: type: string description: The secret description Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileGetResourceProfilePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandDelete: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetConnectorsForRegions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountUpdateDiscoveryProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsVerifyAccessKeyForUserAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateSecretsFolder: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Indication of success type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSshKeyInfo: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response with key info type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsPushSubscription: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The pushed subscription unique identifier. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultSetVaultPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretFolder: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Various returns depending on parameters type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretRightsAndChallenges: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Rights and authentication challenges associated with the secret. type: object properties: Challenges: type: object description: The challenges for the secret Rights: type: string description: The rights for the secret Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentGetOfflineOtpSettings: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The result of get offline OTP settings type: object properties: Period: type: integer description: The period of the OTP Digits: type: integer description: The number of digits of the OTP Algorithm: type: string description: The HMAC algorithm of the OTP Secret: type: string description: The secret of the OTP Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretsFolderRightsAndChallenges: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The rights and challenges on a secret folder. type: object properties: Challenges: type: object description: The folder challenges Rights: type: string description: The folder rights Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretFoldersCanMoveTo: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Various returns depending on parameters type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteSecretsFolder: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Indication of success type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageMultiAccountPasswordRotation: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , If the resource is deleted successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsRetrieveAccessKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetDomainPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsSetMultiplexedAccountPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRetrieveSecretMetadata: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The secret entity. type: object properties: SecretName: type: string description: The secret name WhenCreated: type: string description: When the secret was created Type: type: string description: The secret type Description: type: string description: The secret description Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageLogJustificationEvent: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetVaultSite: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsVerifyAccessKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of grants for a given collection/set. type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentEnroll: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountDeleteDiscoveredAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsVerifyAssumeRoleConfiguration: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileExportResourceProfilePackage: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Information about the newly created package Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandAddAssignment: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the assignment type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsSetSubscriptionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdatePassword: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , If the password is changed successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetSecretsFolderPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileOpenResourceProfilePackage: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Unpacked JSON formatted resource profile package type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetAllVaultSites: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsVerifySqsQueueConfiguration: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultSyncVault: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentAddConfigFile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns row ID if the operation is successful type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetSshKeyPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultAddVault: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderSetCloudProviderPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsAddAccessKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryGetVpcName: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetAccountPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationGetAssignmentsByScope: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of privilege elevation assignments that met the search criteria type: array items: type: object properties: ID: description: ID of the privilege elevation assignment object type: string PrivilegeElevationCommand: description: Name privilege elevation command collection (if IsPrivilegeElevationCollection is true) or privilege elevation command (if IsPrivilegeElevationCollection is false) type: string PrivilegeElevationCommandID: description: UUID of privilege elevation command/collection type: string IsPrivilegeElevationCollection: description: whether this is a privilege elevation command or a privilege elevation command collection type: boolean PrincipalType: description: 'Principal type. Supported values: "User", "Group", "Role"' type: string PrincipalId: description: UUID of user/role/group in assignment. type: string Principal: description: Name of user/role/group in assignment. type: string ScopeType: description: whether the assignment is for a system or a system set. Must be Collection, or System type: string Scope: description: scope of rule. Must be specified if scope is Collection or System. type: string ScopeName: description: Name of system/system set or global type: string BypassChallenge: description: Whether user can execute the privilege elevation command without challenge type: boolean Starts: description: 'Start time for temporary grant specified in UTC using ISO 8601 format. Example: 2020-10-21T15:09:10Z' type: string Expires: description: 'Expiration time for temporary grant specified in UTC using ISO 8601 format. Example: 2020-10-21T15:09:10Z ' type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandGetAssignments: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: all privilege elevation assignments for the specified principal and scope type: array items: type: object properties: ID: description: unique ID for the privilege elevation assignment type: string BypassChallenge: description: Whether user can execute the privilege elevation command without challenge type: boolean Starts: description: 'Start time for temporary grant specified in UTC using ISO 8601 format. Example: 2020-10-21T15:09:10Z' type: string Expires: description: 'Expiration time for temporary grant specified in UTC using ISO 8601 format. Example: 2020-10-21T15:09:10Z ' type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetRetiredPassword: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Retrieved password Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountCommitDiscoveredAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetRsop: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The rsop policy. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsAddSubscription: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The new subscription's unique identifier. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultSetVaultCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetSubscription: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The subscription. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSshKeyPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateDatabase: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the updated database Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageVerifyAccountPasswordManagementSettings: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Verification result type: object properties: ReasonId: type: string description: ID representing the reason why the system is not qualified for account management IsValid: type: boolean description: Whether the system is qualified for account management Reason: type: string description: The reason why the system is not qualified for account management Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandAdd: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: newly created privilege elevation command ID type: object properties: ID: type: string description: ID of the created privilege elevation command Warnings: items: type: string type: array description: warnings Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteSshKeys: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: StandardJsonResult type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderGetAllCloudProviders: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: cloud providers type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetCentrifyAwsAccountInfo: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Information about the Centrify Account used to assume roles type: object properties: ExternalId: type: string description: The External ID which will be used when assuming role AccountId: type: string description: Account ID of the account used to assume roles Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetSubscriptionCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object QuickStartRunDiscovery: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The unique identifier for the quick start discovery job. type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandListAssignments: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of privilege elevation assignments type: array items: type: object properties: ID: description: ID of the privilege elevation assignment object type: string PrivilegeElevationCommand: description: Nmae privilege elevation command collection (if IsPrivilegeElevationCollection is true) or privilege elevation command (if IsPrivilegeElevationCollection is false) type: string PrivilegeElevationCommandID: description: UUID of privilege elevation command/collection type: string IsPrivilegeElevationCollection: description: whether this is a privilege elevation command or a privilege elevation command collection type: boolean PrincipalType: description: 'Principal type. Supported values: "User", "Group", "Role"' type: string PrincipalId: description: UUID of user/role/group in assignment. type: string Principal: description: Name of user/role/group in assignment. type: string ScopeType: description: whether the assignment is for a system or a system set. Must be Collection, or System type: string Scope: description: scope of rule. Must be specified if scope is Collection or System. type: string ScopeName: description: Name of system/system set or global type: string BypassChallenge: description: Whether user can execute the privilege elevation command without challenge type: boolean Starts: description: 'Start time for temporary grant specified in UTC using ISO 8601 format. Example: 2020-10-21T15:09:10Z' type: string Expires: description: 'Expiration time for temporary grant specified in UTC using ISO 8601 format. Example: 2020-10-21T15:09:10Z ' type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentUnenrollAgents: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns the JobId for the BulkSystemUnenrollClient job. See Notes. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandUpdate: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsDeleteSubscription: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsUpdateMPAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The updated multiplexed account unique identifier. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetMfaTokenCode: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: object with next code and time step length type: object properties: step: type: integer description: Time step in seconds code: type: string description: Current code Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandSetPrivilegeElevationCommandCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddDomain: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of newly added domain type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoverySetDiscoveryProfilePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetDiscoveryProfiles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of all active sessions type: object properties: CurrentConnector: type: boolean description: Determines whether to use the current connector. Description: type: string description: Description of the discovery profile. DefaultUserName: type: string description: User Name of the default Account Name: type: string description: Name of the discovery profile. AddDiscoveryLocalAccount: type: boolean description: Determines if the discovery account needs to be added as the local account. Domains: properties: DomainId: type: string description: Domain ID. Enabled: type: boolean description: Is domain enabled. NamingContext: type: string description: OUs Naming context Name: type: string description: Domain name. type: object description: List of domain objects PortScanScope: type: object description: Scope of ports to discover UpdateExistingSystems: type: boolean description: Determines whether existing systems should be updated. OSType: type: string description: Operating System type DiscoverLocalAccounts: type: boolean description: Determines if local accounts needs to be discovered. DefaultAccountId: type: string description: ID of the default Account ImportSystemsWithoutCredentials: type: boolean description: Determines if the systems needs to be imported without credentials NextRun: type: string description: Next scheduled time of the discovery Status: type: string description: Status of the profile AddAccountToSet: type: string description: Id of the Set to add the discovered accounts to. ApplicationType: type: string description: Types of applications to discover eg. WindowsService/Windows Tasks/IIS Application Pools LastRun: type: string description: Lastrun time of the disovery IsSchedulable: type: boolean description: Determines if the discovery is scheduled or not AddSystemsToSet: type: string description: Id of the Set to add the discovered systems to. Schedule: type: string description: Discovery schedule IsScheduleRunning: type: boolean description: Determines if the scheduled discovery is running DiscoveryType: type: string description: Type of the Discovery. eg AD / PortScan ScheduleOwnerId: type: string description: Id of the User created the schedule ElapsedTime: type: string description: Elapsed time the discovery ran ID: type: string description: Id of the discovery profile ComputerOUs: type: object description: List of computer Organization Unit names ComputerType: type: string description: Type of computer. eg Server, Workstation Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretsAndFolders: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Various returns depending on parameters type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageCheckinPassword: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: if the operation is successful type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object QuickStartManageAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The results from putting the systems under management. type: object properties: SystemResults: items: type: object type: array description: A list of results. FailureCount: type: string description: The count of failures. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetSecretCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: undefined type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateResource: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the updated system Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetDomainPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetMultiplexedAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of multiplexed accounts. type: array items: description: A multiplexed account. type: object properties: RealAccounts: description: A list of real accounts. type: array items: type: string Name: description: The multiplexed account name. type: string Description: description: The multiplexed account description. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddSecret: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the secret type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageTerminateSession: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationSubmitWorkFlowRequest: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of newly added resource type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowGetRoles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of roles. type: array items: type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRemoveMfaToken: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Success or failure type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetComputerChallenges: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Challenges for system login and related information type: object properties: LoginDefaultProfile: type: string description: ID of the default login profile. LoginRules: properties: _Value: items: properties: ProfileId: type: string description: ID of Default Login Profile for this Condition. Conditions: properties: Op: type: string description: Condition Operation. Sets the operation that will be used to evaluate the condition. Prop: type: string description: Condition Property, sets the condition type. Val: type: string description: Value. Sets the value that the condition is filtering for. type: object description: Conditions that must be satisfied for sucessful login to the system. type: object description: Object containing Conditions and Default Profile ID type: array description: Array of Conditions. Enabled: type: boolean description: Sets whether Login Rules are enabled _UniqueKey: type: string description: Rule Type Key for table storage. _Type: type: string description: Type of Login Rule. type: object description: List of Rules and Conditions that must be satisfied for successful login to the system. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandGetPrivilegeElevationCommandCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CollectionSetCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: This function returns nothing. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of results from adding the accounts. type: array items: description: An add account result. type: object properties: InputRowIndex: description: The index from the input list. type: string Output: description: The results from adding this account. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCanManagePrivilegeElevation: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Whether the user can Manage Assignment on the requested scope type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileGetResourceProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The resource profile type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderGetCloudProvider: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The cloud provider type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSshKeyRightsAndChallenges: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: DataEntity with SSH Key rights and challenges type: object properties: rights: type: string description: SSH key rights challenges: type: object description: SSH key challenge data Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CollectionGetCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGenerateSshKeyFile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n ZIP file with PublicKey and PrivateKey\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryDeleteDiscoveryAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Did the discovery account get deleted. type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetAllVaults: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetMultiplexedAccountPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryGetHistory: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of discovery jobs. type: array items: description: A discovery job. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGenerateSshKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n JSON string with PublicKey and PrivateKey\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetKeyPairs: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CssIntegrationDzdoExecute: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetDomainCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns the JobId for the BulkAccountDelete job. If RunSync is not provided, or passed as false, this id is valid for use with related Job APIs. If RunSync is passed as true, the operation id cannot be used with Job APIs. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowGetDomainConfiguration: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A domain configuration. type: object properties: RefreshZoneJoinedIntervalMinutes: type: integer description: How many hours between zone joined refreshes. ZoneRoleCleanupIntervalHours: type: integer description: How many hours between zone role cleanups. AllowRefreshZoneJoined: type: boolean description: Does this domain allow refresh zones joined. AllowZoneRoleCleanup: type: boolean description: Does this domain allow zone role cleanup. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateSettings: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddSshKeyFile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The newly added SSH key UUID. If ImplicitRename is true, returns an object of {ID:"foo", Name:"bar"} type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddDatabase: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of newly added database type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentEnrollV2: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The machine enrollment result. type: object properties: TenantId: type: string description: ID of the tenant the machine was enrolled to Owner: items: type: object type: array description: 'Resolved owner of the agent profile: See the Principal, PrincipalId, and PType fields of ' Cert: type: string description: 'Base64 encoded string representing a PKCS #12 file containing a certificate (and private key) used to authenticate as the service user' ResourceID: type: string description: ID of the PAS system corresponding to the enrolled machine Uuid: type: string description: UUID of the agent profile ResourceUpdateResults: items: type: object type: array description: 'The results of updating certain aspects of the PAS system: ' ResourceName: type: string description: Name of the PAS system corresponding to the enrolled machine SetResults: items: type: object type: array description: 'Result of adding the system to the sets specified by the Sets argument: ' AccountName: type: string description: Final name of the agent Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetResourceCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteSecret: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Did the secret get deleted. type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteSshKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: StandardJsonResult type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the updated account Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetMfaToken: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Success or failure type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageMoveSecret: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Indication of success type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountCommitDiscoveredAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryGetExcludedAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of hosts. type: array items: description: A host. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderGetCloudProviderCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSshKeysForLogin: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of DataEntity with containing the Name, Comment, and whether workflow is required. type: object properties: RequestRequired: type: boolean description: Is workflow enabled? Comment: type: string description: SSH Key comment Name: type: string description: SSH key Name Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountGetMyDashAAccountsWithCheckout: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Array of Account objects type: array items: description: Account object type: object properties: AccountId: description: Unique ID for Account type: string Name: description: Account Name type: string DomainName: description: Domain Name type: string SamAccountName: description: SamAccountName of the account type: string UserPrincipalName: description: UserPrincipalName of the account type: string IsManaged: description: Whether the account is managed or not type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetResourcePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetSecurityGroups: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateSshKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: StandardJsonResult type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageMoveFolder: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Indication of success type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsDeleteAccessKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationGetChallenges: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: 'Challenges for privilege elevation ' type: object properties: PrivilegeElevationDefaultProfile: type: string description: ID of the default authentication profile. PrivilegeElevationRules: properties: _Value: items: properties: ProfileId: type: string description: ID of Default challenge Profile for this Condition. Conditions: properties: Op: type: string description: Condition Operation. Sets the operation that will be used to evaluate the condition. Prop: type: string description: Condition Property, sets the condition type. Val: type: string description: Value. Sets the value that the condition is filtering for. type: object description: Conditions that must be satisfied to run privilege elevation commands on the system. type: object description: Object containing Conditions and Default Profile ID type: array description: Array of Conditions. Enabled: type: boolean description: Sets whether challenge Rules are enabled _UniqueKey: type: string description: Rule Type Key for table storage. _Type: type: string description: Type of challenge Rule. type: object description: List of Rules and Conditions that must be satisfied for executing privilege elevation commands in client system. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsImportAccessKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSessions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of all active sessions type: object properties: ProxyIdentity: type: string description: ID for the cloud connector Host: type: string description: DNS name or IP address of resource Height: type: integer description: Height of the session window LoggedUser: type: string description: Account name HostID: type: string description: ID of the resource SessionType: type: string description: 'Session type: Rdp, Ssh' ConnectionID: type: string description: ID for the connection made between cloud connector and cloud SessionID: type: string description: ID for the session AccountID: type: string description: ID of the account User: type: string description: The user who started the session Width: type: integer description: Width of the session window Started: type: string description: Session starts timestamp HostName: type: string description: Name of the resource Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetRegions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetAccountPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountRunDiscovery: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageCheckOfflineOtpExist: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Whether Offline OTP is available for the computer type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileGetResourceProfileCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsCreateMPAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The new multiplexed account unique identifier. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True, if the account was deleted successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetVault: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentUnenroll: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Unenrollment Status Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountClearOwnerAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Updated alternate account with owner account removed. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerSessionGetLoginUrl: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The login url. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetSubscriptionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretsFolderRights: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The folder permissions type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultUpdateVault: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountGetDiscoveryProfiles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of discovery profiles. type: array items: description: A discovery profile. type: object properties: Name: description: The discovery profile name. type: string Description: description: The discovery profile description. type: string DashAccountGroups: description: The discovery profile account groups. type: object DashAccountOUs: description: The discovery profile account organizational units. type: array items: type: string Domains: description: The discovery profile list of domains. type: array items: type: object NameMapping: description: A pipe delimited list of discovery account name mappings. type: string Status: description: The status of the discovery profile. (Starting, RunningDiscoverDashAccount, RunningMatchingOwnerAccount, RunningSaving, Finished, // Finished is the history status. When the job is finished, the history status is finished Ready) type: string LastRun: description: The last time this discovery job ran. type: string ElapsedTime: description: How long this discovery job ran last time. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetAccountsForLogin: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Array of Account objects type: array items: description: Account object type: object properties: accountId: description: Unique ID for Account type: string name: description: Account Name type: string authority: description: Location of authority to log into system (system or domain name) type: string requestRequired: description: Is Request required type: boolean credentialType: description: Credential account uses for login type: string credentialId: description: Credential ID type: string credentialName: description: Credential Name type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetAccountCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryGetReferencedVpcs: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetOfflineOtp: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The result of get offline OTP type: object properties: TTLInSeconds: type: integer description: The TTL in seconds Code: type: string description: The offline OTP Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecret: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The secret metadata. type: object properties: SecretName: type: string description: The secret name WhenCreated: type: string description: When the secret was created Type: type: string description: The secret type Description: type: string description: The secret description Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderDeleteCloudProvider: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CssIntegrationSetChallengeProfiles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetSubnetsForRegions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSShKeyUsage: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Two list, one for the accounts and another for the discovery profiles type: object properties: _RowKey: type: string description: ID for the account or discovery profile LastHealthCheck: type: string description: Empty for discovery profiles, time of last healyh check for accounnts Status: type: string description: For accounts the account status, for dicovery profile blank Target: type: string description: For accounts it is accountname(hostname), for dicscovery profile the name Type: type: string description: VaultAccount or DiscoveryProfile Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddResources: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of results from adding the resources. type: array items: description: An add resource result. type: object properties: InputRowIndex: description: The index from the input list. type: string Output: description: The results from adding this resource. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetEscrowKeyFromFile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageCreateDiscoveryProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Discovery profile ID type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManagePreCheckout: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Pre Checkout Info object type: object properties: ReportId: type: string description: Report ID Status: type: string description: Accounts password status Life: type: integer description: Age in minutes Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryDeleteBlacklistedComputer: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowGetApprovers: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of workflow approvers. type: array items: type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetDomainCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetDatabasePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowRefreshResourceZoneJoined: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The resource's zone status. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountAddDiscoveryProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The unique identifier for the discovery profile. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentEnrollV3: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The machine enrollment result. type: object properties: TenantId: type: string description: ID of the tenant the machine was enrolled to Owner: items: type: object type: array description: 'Resolved owner of the agent profile: See the Principal, PrincipalId, and PType fields of ' AgentName: type: string description: Final name of the agent OfflineOtpPeriod: type: integer description: The period of the offline OTP ResourceID: type: string description: ID of the PAS system corresponding to the enrolled machine Uuid: type: string description: UUID of the agent profile ResourceUpdateResults: items: type: object type: array description: 'The results of updating certain aspects of the PAS system: ' AppID: type: string description: Application ID ResourceName: type: string description: Name of the PAS system corresponding to the enrolled machine OfflineOtpSecret: type: string description: The secret of the offline OTP OfflineOtpAlgorithm: type: string description: The HMAC algorithm of the offline OTP SetResults: items: type: object type: array description: 'Result of adding the system to the sets specified by the Sets argument: ' AgentSecret: type: string description: Secret of the service user OfflineOtpDigits: type: integer description: The number of digits of the offline OTP Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageExtendCheckout: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True, if the operation is successfull type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRotatePasswords: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: JobId for BulkPasswordRotation job. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetAccessKeys: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CssIntegrationMfaLogin: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetSubnets: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetAllVaultTemplates: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteResources: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns the JobId for the BulkSystemDelete job. If RunSync is not provided, or passed as false, this id is valid for use with related Job APIs. If RunSync is passed as true, the operation id cannot be used with Job APIs. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowValidateRoleRequest: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Is the user permitted to use the requested role. type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteDatabase: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , if the database is deleted successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderGetCloudProviderPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDownloadSecretFileInChunks: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountDeleteDiscoveryProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetAvailabilityZones: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetSecretPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRetrieveSshKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n The chosen SSH Key PrivateKey, PublicKey, or PPK in the chosen format\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryGetDiscoveryProfilePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of rights. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileUpdateResourceProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the resource profile type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultVerifyVault: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileGetAllResourceProfiles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resource profiles type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentRegisterV2: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n The same return values as .\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowCreateAssignment: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryAddDiscoveryAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The id of the added discovery account. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentConvertMachineAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The results from agent conversion to OAuth. type: object properties: AgentName: type: string description: Service account name Uuid: type: string description: UUID of account AppID: type: string description: Application ID AgentSecret: type: string description: Secret of the service account Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddDatabases: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of results from adding the databases. type: array items: description: An add database result. type: object properties: InputRowIndex: description: The index from the input list. type: string Output: description: The results from adding this database. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryUpdateDiscoveryAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The id of the updated discovery account. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageCheckoutPassword: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID for for the checkout and the password text type: object properties: Password: type: string description: Password in plain text format COID: type: string description: ID for the checkout Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowGetAllRoles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of roles. type: array items: type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetSubscriptionRights: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The rights on the subscription. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetResourcePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentPushConfigFile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns the JobId for the BulkSystemPushConfigFile job. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetAccountsForResource: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of accounts type: object properties: IsManaged: default: false type: boolean description: True to create managed account _RowKey: type: string description: ID for the account Healthy: type: string description: 'Health status of the account: OK, Failed etc..' HealthError: type: string description: Health status details UseWheel: default: false type: boolean description: True to use proxy account Rights: type: string description: An array of Rights User: type: string description: User name for the account Description: type: string description: Description for the account Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRequestSecretDownloadUrl: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: the publicly available URL for the uploaded secret file. type: object properties: FilePath: type: string description: 'A unique identifier for calls to ' Location: type: string description: The location for downloading from online storage AppKey: type: string description: The app key used to download from online storage Method: type: string description: The method to use to download download from online storage Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentRegisterV3: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The machine enrollment result. type: object properties: TenantId: type: string description: ID of the tenant the machine was enrolled to Owner: items: type: object type: array description: 'Resolved owner of the agent profile: See the Principal, PrincipalId, and PType fields of ' AgentName: type: string description: Final name of the agent OfflineOtpPeriod: type: integer description: The period of the offline OTP ResourceID: type: string description: ID of the PAS system corresponding to the enrolled machine Uuid: type: string description: UUID of the agent profile ResourceUpdateResults: items: type: object type: array description: 'The results of updating certain aspects of the PAS system: ' AppID: type: string description: Application ID ResourceName: type: string description: Name of the PAS system corresponding to the enrolled machine OfflineOtpSecret: type: string description: The secret of the offline OTP OfflineOtpAlgorithm: type: string description: The HMAC algorithm of the offline OTP SetResults: items: type: object type: array description: 'Result of adding the system to the sets specified by the Sets argument: ' AgentSecret: type: string description: Secret of the service user OfflineOtpDigits: type: integer description: The number of digits of the offline OTP Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerAgentRegister: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileSetResourceProfilePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountCancelDiscovery: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileDeleteResourceProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRotatePassword: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A DataEntity containing RotatePasswordOutputFields members type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderSetCloudProviderCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ResourceProfileSetResourceProfileCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSecretToBeReplaced: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The secret to be replaced. type: object properties: SecretName: type: string description: The secret name WhenCreated: type: string description: When the secret was created Type: type: string description: The secret type Description: type: string description: The secret description Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetSshKeyCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: this function returns nothing Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetMultiplexedAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The the multiplexed account. type: object properties: RealAccounts: items: type: string type: array description: A list of real accounts. Description: type: string description: The multiplexed account description. Name: type: string description: The multiplexed account name. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultGetHistory: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of vault sync jobs. type: array items: description: A vault sync job. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderUpdateCloudProvider: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the cloud provider type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageManageAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns the id of the asynchronous operation type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountUpdateDiscoveredAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetDatabasePermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManagePreCheckDomain: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , if the name is of a valid domain type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetSshKeyCollectionPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role,.. ' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddResource: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of newly added system type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountGetProfileRights: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The current user rights on the alternate account discovery profile. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CssIntegrationGetChallengeProfiles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The profile ids for Dzdo and Mfa challenges. type: object properties: MfaChallenge: type: string description: The Mfa challenge profile id. DzdoChallenge: type: string description: The Dzdo challenge profile id. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object CloudProviderAddCloudProvider: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the cloud provider type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateSecret: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The ID for the secret type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetVpcs: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationGetCommands: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Privilege elevation command list Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandSetPrivilegeElevationCommandPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: "\n Standard JSON response.\n " type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object VaultDeleteVault: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManagePatchResource: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the updated system Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DashAccountGetDiscoveryProfile: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The discovery profile. type: object properties: NameMapping: type: string description: A pipe delimited list of discovery account name mappings. Status: type: string description: The status of the discovery profile. (Starting, RunningDiscoverDashAccount, RunningMatchingOwnerAccount, RunningSaving, Finished, // Finished is the history status. When the job is finished, the history status is finished Ready) DashAccountOUs: items: type: string type: array description: The discovery profile account organizational units. LastRun: type: string description: The last time this discovery job ran. DashAccountGroups: type: object description: The discovery profile account groups. ElapsedTime: type: string description: How long this discovery job ran last time. Domains: items: type: object type: array description: The discovery profile list of domains. Description: type: string description: The discovery profile description. Name: type: string description: The discovery profile name. Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsGetMultiplexedAccountRights: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The rights on the multiplexed account. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandUpdateAssignment: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object QuickStartVerifyAdminAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageAddDomains: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: A list of results from adding the domains. type: array items: description: An add domain result. type: object properties: InputRowIndex: description: The index from the input list. type: string Output: description: The results from adding this domain. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryAnyDiscoveryAccountsReferenced: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Did an id refer to a discovery account. type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteResource: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , if the resource is deleted successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetComputersForSshKeyAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of DataEntity with containg the summary of matching systems type: object properties: FQDN: type: string description: System FQDN ComputerClass: type: string description: System class Description: type: string description: System description Name: type: string description: System Name Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageUpdateDomain: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: ID of the updated account type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageDeleteDomain: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: True , if the domain is deleted successfully type: boolean Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetComputerRights: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns list of rights. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsUpdateSubscription: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: The subscription unique identifier. type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetMfaTokenSettings: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: object describing the current totp settings type: object properties: step: default: '30' type: integer description: Size of time step in seconds digits: default: '6' type: integer description: Number of digits in code issuer: type: string description: Issuer field as per spec counter: type: integer description: hotp counter init value - only required if type is hotp type: type: string description: Type of token, Totp is only valid value at the moment label: type: string description: Label describing the token algorithm: default: Sha1 type: string description: 'Algorithm to use, valid values: Sha1, Sha256, Sha512' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageGetAuditInfo: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: An object representing the auditing and monitoring service configuration for the tenant. type: object properties: AuditInstallationProxyAffinity: type: object description: An optional map of DirectAudit installation and cloud connectors that is used to send audited data to a custom DirectAudit installation Enabled: type: boolean description: Current state of the auditing and monitoring service for the tenant Name: type: string description: Name of the Centrify DirectAudit installation Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandGetPrivilegeElevationCommandPermissions: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: List of permissions type: object properties: Rights: type: string description: list of permissions Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role' Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageCanDeleteSshKey: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Bool if the key can be deleted. If false, gives the reason why. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object DiscoveryDeleteExcludedAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object AwsGetEc2IamRoles: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object PrivilegeElevationCommandDeleteAssignment: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageRequestSecretUploadUrl: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: the publicly available URL for the uploaded secret file. type: object properties: FilePath: type: string description: 'A unique identifier for calls to ' Location: type: string description: The location for uploading to online storage AppKey: type: string description: The app key used to upload to online storage Method: type: string description: The method to use to upload to online storage Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageProvisionReconciliationAccounts: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Returns ID of the asynchronous job type: string Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ServerManageSetConnectorSystem: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Resulting object, if any, of the call Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object ZoneRoleWorkflowDeleteExpiredAssignments: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: How many expired assignments were deleted. type: integer Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object SubscriptionsDeleteMPAccount: properties: ErrorID: type: string description: Unique support identifier for this occurrence of an error Result: description: Standard JSON response. type: object Message: type: string description: Error message text on failure, may be null success: type: boolean description: Indicates API success or failure type: object requestBodies: Payload24: content: application/json: schema: properties: IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - CloudProviderId type: object required: true Payload9: content: application/json: schema: properties: ID: type: string description: ID of the SSH key RRFormat: default: false type: boolean description: Return data in database format. required: - ID type: object required: true Payload25: content: application/json: schema: properties: RRFormat: default: false type: boolean description: Return data in database format. type: object required: true Payload36: content: application/json: schema: properties: ID: type: string description: ID of the database Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc..' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Edit, Delete, Grant' required: - ID - Grants type: object required: true Payload16: content: application/json: schema: properties: ID: type: string description: ID of the system required: - ID type: object required: true Payload33: content: application/json: schema: properties: ID: type: string description: ID of the collection RRFormat: default: false type: boolean description: Return data in database format. required: - ID type: object required: true Payload37: content: application/json: schema: properties: ID: type: string description: ID of the subscription, Set to null for global permissions Grants: properties: Rights: type: string description: 'Permissions: Edit, Delete, Grant' Principal: type: string description: User name or role name PrincipalId: type: string description: Uuid of the principal PType: type: string description: 'Principal type: User, Role etc..' type: object description: 'Array of permissions to be set. Each item must include Principal: User name or role name, PType: User, Role.., Rights: Grant, Edit.. ' required: - ID - Grants type: object required: true Payload15: content: application/json: schema: properties: {} type: object required: true Payload39: content: application/json: schema: properties: DomainId: type: string description: The domain id. required: - DomainId type: object required: true Payload32: content: application/json: schema: properties: KeyType: type: string description: The key type to generate, i.e. RSA KeyFormat: type: string description: KeyFormat to retrieve the key in BitStrength: type: integer description: Number of bits to use for key generation Curve: type: string description: Edwards curve to use - only applicable when KeyType = EdDSA. Legal values are Ed25519 or Ed448 Passphrase: type: string description: Passphrase to use for encrypting the PrivateKey required: - KeyType - KeyFormat type: object required: true Payload26: content: application/json: schema: properties: ID: type: string description: ID of the set RRFormat: default: false type: boolean description: Return data in database format. required: - ID type: object required: true Payload8: content: application/json: schema: properties: ID: type: string description: Resource ID of the computer required: - ID type: object required: true Payload35: content: application/json: schema: properties: CertAuthEnable: default: false type: boolean description: Whether "Use My Account" is configured on this system LoginDefaultProfile: type: string description: ID of the Default System Login Profile, which is used if no policy conditions match. AllowRemote: default: false type: boolean description: 'System Security: Whether remote connections from a public network are allowed for this system' ProxyUserPassword: type: string description: Password for the "proxy" account Description: type: string description: Any descriptive information for the system Name: type: string description: Display name of the system ProxyCollectionList: type: string description: List of connector IDs for the system. Centrify agent for Linux provides another option to specify the connectors. DefaultCheckoutTime: default: '60' type: integer description: 'Account Security: The number of minutes a checked out password is valid on this system. The default is 60 minutes' ManagementPort: type: integer description: Account mangagement port (for Windows Remote Management (WinRM) or HTTPS) SessionType: type: string description: 'Session type: Rdp, Ssh' PasswordHistoryCleanUpDuration: default: '365' type: integer description: 'Maintenance option: The number of days after which retired passwords should be deleted if the "AllowPasswordHistoryCleanUp" policy is set to true. Retired passwords that were last modified either equal to or greater than the number of days specified here will be deleted automatically. The minimum value is 90 days' Port: type: integer description: Port number for remote sessions DomainId: type: string description: ID of the domain to which the system is joined SystemProfileId: type: string description: The resource profile ID for systems with ComputerClass CustomSsh ComputerClass: type: string description: 'Computer classes: Windows, Unix, CiscoIOS, CiscoNXOS, JuniperJunos, GenericSsh, WebSite, HpNonStopOS, IBMi, CheckPointGaia, PaloAltoNetworksPANOS, F5NetworksBIGIP, CiscoAsyncOS, VMwareVMkernel, CustomSsh' PasswordRotateDuration: default: '90' type: integer description: 'Security option: The maximum number of days between password changes for managed accounts if the "AllowPasswordRotation" policy is set to true. The default is 90 days' LoginRules: properties: _Value: items: properties: ProfileId: type: string description: ID of Default Login Profile for this Condition. Conditions: properties: Op: type: string description: Condition Operation. Sets the operation that will be used to evaluate the condition. Prop: type: string description: Condition Property, sets the condition type. Val: type: string description: Value. Sets the value that the condition is filtering for. type: object description: Conditions that must be satisfied for sucessful login to the system. type: object description: Object containing Conditions and Default Profile ID type: array description: Array of Conditions. Enabled: type: boolean description: Sets whether Login Rules are enabled _UniqueKey: type: string description: Unique key for table storage. Use "Condition". _Type: type: string description: Type of Login Rule. Use "RowSet" for this call. type: object description: List of Rules and Conditions that must be satisfied for successful login to the system. ProxyUser: type: string description: Name for the "proxy" account PrivilegeElevationRules: properties: _Value: items: properties: ProfileId: type: string description: ID of Default challenge Profile for this Condition. Conditions: properties: Op: type: string description: Condition Operation. Sets the operation that will be used to evaluate the condition. Prop: type: string description: Condition Property, sets the condition type. Val: type: string description: Value. Sets the value that the condition is filtering for. type: object description: Conditions that must be satisfied to run privilege elevation commands on the system. type: object description: Object containing Conditions and Default Profile ID type: array description: Array of Conditions. Enabled: type: boolean description: Sets whether challenge Rules are enabled _UniqueKey: type: string description: Rule Type Key for table storage. _Type: type: string description: Type of challenge Rule. type: object description: List of Rules and Conditions that must be satisfied for executing privilege elevation commands in client system. FQDN: type: string description: Fully-qualified domain name or IP address of the system PrivilegeElevationDefaultProfile: type: string description: ID of the default authentication profile. AllowMultipleCheckouts: type: boolean description: 'Security option: Whether multiple users can have the same account password checked out at the same time' TimeZoneID: type: string description: Time zone ID for the system. Valid time zone values can be found for a Windows system in the registry under the "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Time Zones" registry branch ManagementMode: type: string description: 'Account mangagement type (for Windows Remote Management (WinRM) or HTTPS): Unknown, Smb, WinRMOverHttp, WinRMOverHttps, HTTPS' AllowPasswordHistoryCleanUp: type: boolean description: 'Maintenance option: Whether retired passwords should be deleted periodically' DmcScopes: type: string description: List of scopes limiting which APIs are allowed to be invoked by this machine credential. Scope is defined by name and contains a list of regular expressions AllowAutomaticLocalAccountMaintenance: default: false type: boolean description: Allow local account automatic maintenance using a privileged account ID: type: string description: ID of the system DomainOperationsEnabled: default: false type: boolean description: Whether to allow using the domain administrative account to enable zone role workflow requests for the system. If true, a valid "DomainId" setting must be set or specified AllowManualLocalAccountUnlock: default: false type: boolean description: Allow local account manual unlock using a privileged account ZoneRoleWorkflowEnabled: type: boolean description: Whether to enable zone role workflow requests for the system. The default setting is to use the zone role workflow settings defined for the domain. If true, the "DomainOperationsEnabled" setting must be set to true. MinimumPasswordAge: default: '0' type: integer description: 'Security option: Minimum number of days that a managed password must have been in use before it can be rotated' AllowPasswordRotation: default: false type: boolean description: 'Security option: Whether managed passwords should be changed periodically' PasswordProfileID: type: string description: 'Security option: ID of the password complexity profile for this system' ProxyUserIsManaged: default: false type: boolean description: Whether the password for the "proxy" account is managed required: - Name - ComputerClass - FQDN - ID type: object required: true Payload13: content: application/json: schema: properties: ID: type: string description: ID for the checkout required: - ID type: object required: true Payload34: content: application/json: schema: properties: SetQuery: type: string description: Set identifier or sql query for resources to be deleted Ids: items: type: string description: An account id. type: array description: Array of ids of the accounts to be deleted type: object required: true Payload23: content: application/json: schema: properties: AccessKeyRowKey: type: string description: The database ID for the access key. required: - AccessKeyRowKey type: object required: true Payload12: content: application/json: schema: properties: ID: type: string description: The folder ID required: - ID type: object required: true Payload18: content: application/json: schema: properties: ID: type: string description: ID of the account to get the token for required: - ID type: object required: true Payload2: content: application/json: schema: properties: Regions: items: type: string type: array description: The AWS region. IamAccountId: type: string description: The database ID of the IAM account. If not supplied an AWS assumed role is used. RRFormat: type: string description: 'Should response by in the redrock format (default: false) .' CloudProviderId: type: string description: The database ID of the cloud provider. required: - Regions - CloudProviderId type: object required: true Payload6: content: application/json: schema: properties: ID: type: string description: The ID of the resource profile. required: - ID type: object required: true Payload19: content: application/json: schema: properties: ID: type: string description: A discovery profile id. required: - ID type: object required: true Payload22: content: application/json: schema: properties: ID: type: string description: The ID of the cloud provider. required: - ID type: object required: true Payload17: content: application/json: schema: properties: AccessKeyId: type: string description: The AWS access key. SecretAccessKey: type: string description: The AWS access secret. required: - AccessKeyId - SecretAccessKey type: object required: true Payload11: content: application/json: schema: properties: filter: type: string description: Matching pattern required: - filter type: object required: true Payload27: content: application/json: schema: properties: IDs: items: type: string type: array description: A list of discovery profile ids. required: - IDs type: object required: true Payload3: content: application/json: schema: properties: ID: type: string description: The ID for the secret required: - ID type: object required: true x-explorer-enabled: false x-provenance: method: searched source: https://developer.delinea.com/reference harvested: '2026-10-14' tool: harvest-readme-openapi.py note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored. assembled_from: - https://developer.delinea.com/reference/post_acl-checkrowright.md - https://developer.delinea.com/reference/post_acl-getace.md - https://developer.delinea.com/reference/post_acl-getcollectionaces.md - https://developer.delinea.com/reference/post_acl-getdiraces.md - https://developer.delinea.com/reference/post_acl-geteffectivedirrights.md - https://developer.delinea.com/reference/post_acl-geteffectivefilerights.md - https://developer.delinea.com/reference/post_acl-geteffectiverowrights.md - https://developer.delinea.com/reference/post_acl-getfileaces.md - https://developer.delinea.com/reference/post_acl-getrowaces.md - https://developer.delinea.com/reference/post_authprofile-deleteprofile.md - https://developer.delinea.com/reference/post_authprofile-getprofile.md - https://developer.delinea.com/reference/post_authprofile-getprofilelist.md - https://developer.delinea.com/reference/post_authprofile-saveprofile.md - https://developer.delinea.com/reference/post_aws-addaccesskey.md - https://developer.delinea.com/reference/post_aws-deleteaccesskey.md - https://developer.delinea.com/reference/post_aws-deployconnector.md - https://developer.delinea.com/reference/post_aws-getaccesskeys.md - https://developer.delinea.com/reference/post_aws-getavailabilityzones.md - https://developer.delinea.com/reference/post_aws-getcentrifyawsaccountinfo.md - https://developer.delinea.com/reference/post_aws-getconnectorsforregions.md - https://developer.delinea.com/reference/post_aws-getec2iamroles.md - https://developer.delinea.com/reference/post_aws-getkeypairs.md - https://developer.delinea.com/reference/post_aws-getregionnames.md - https://developer.delinea.com/reference/post_aws-getregions.md - https://developer.delinea.com/reference/post_aws-getsecuritygroups.md - https://developer.delinea.com/reference/post_aws-getsubnets.md - https://developer.delinea.com/reference/post_aws-getsubnetsforregions.md - https://developer.delinea.com/reference/post_aws-getvpcs.md - https://developer.delinea.com/reference/post_aws-importaccesskey.md - https://developer.delinea.com/reference/post_aws-retrieveaccesskey.md - https://developer.delinea.com/reference/post_aws-verifyaccesskey.md - https://developer.delinea.com/reference/post_aws-verifyaccesskeyforuseraccount.md - https://developer.delinea.com/reference/post_aws-verifyassumeroleconfiguration.md - https://developer.delinea.com/reference/post_aws-verifysqsqueueconfiguration.md - https://developer.delinea.com/reference/post_brand-info.md - https://developer.delinea.com/reference/post_brand-mybrand.md - https://developer.delinea.com/reference/post_cdirectoryservice-bulkdeleteusers.md - https://developer.delinea.com/reference/post_cdirectoryservice-changeuser.md - https://developer.delinea.com/reference/post_cdirectoryservice-createuser.md - https://developer.delinea.com/reference/post_cdirectoryservice-createuserbulk.md - https://developer.delinea.com/reference/post_cdirectoryservice-createuserquick.md - https://developer.delinea.com/reference/post_cdirectoryservice-createusers.md - https://developer.delinea.com/reference/post_cdirectoryservice-delete.md - https://developer.delinea.com/reference/post_cdirectoryservice-deleteuser.md - https://developer.delinea.com/reference/post_cdirectoryservice-exemptuserfrommfa.md - https://developer.delinea.com/reference/post_cdirectoryservice-getbulkimportwithextatt.md - https://developer.delinea.com/reference/post_cdirectoryservice-gettechsupportuser.md - https://developer.delinea.com/reference/post_cdirectoryservice-getuser.md - https://developer.delinea.com/reference/post_cdirectoryservice-getuserattributes.md - https://developer.delinea.com/reference/post_cdirectoryservice-getuserbyname.md - https://developer.delinea.com/reference/post_cdirectoryservice-getusers.md - https://developer.delinea.com/reference/post_cdirectoryservice-getusersfromcsvfile.md - https://developer.delinea.com/reference/post_cdirectoryservice-grantaccess.md - https://developer.delinea.com/reference/post_cdirectoryservice-refreshtoken.md - https://developer.delinea.com/reference/post_cdirectoryservice-removeauthsource.md - https://developer.delinea.com/reference/post_cdirectoryservice-removefederationauthsource.md - https://developer.delinea.com/reference/post_cdirectoryservice-setuserpicture.md - https://developer.delinea.com/reference/post_cdirectoryservice-setuserstate.md - https://developer.delinea.com/reference/post_cdirectoryservice-standardjsonresultwithpermissioncheck.md - https://developer.delinea.com/reference/post_cdirectoryservice-submituploadedfile.md - https://developer.delinea.com/reference/post_cloudprovider-addcloudprovider.md - https://developer.delinea.com/reference/post_cloudprovider-deletecloudprovider.md - https://developer.delinea.com/reference/post_cloudprovider-deletecloudproviders.md - https://developer.delinea.com/reference/post_cloudprovider-getallcloudproviders.md - https://developer.delinea.com/reference/post_cloudprovider-getcloudprovider.md - https://developer.delinea.com/reference/post_cloudprovider-getcloudprovidercollectionpermissions.md - https://developer.delinea.com/reference/post_cloudprovider-getcloudproviderpermissions.md - https://developer.delinea.com/reference/post_cloudprovider-setcloudprovidercollectionpermissions.md - https://developer.delinea.com/reference/post_cloudprovider-setcloudproviderpermissions.md - https://developer.delinea.com/reference/post_cloudprovider-updatecloudprovider.md - https://developer.delinea.com/reference/post_collection-createdynamiccollection.md - https://developer.delinea.com/reference/post_collection-createmanualcollection.md - https://developer.delinea.com/reference/post_collection-deletecollection.md - https://developer.delinea.com/reference/post_collection-getbucketcontents.md - https://developer.delinea.com/reference/post_collection-getcollection.md - https://developer.delinea.com/reference/post_collection-getcollectionpermissions.md - https://developer.delinea.com/reference/post_collection-getcollectionreferences.md - https://developer.delinea.com/reference/post_collection-getcollectionrights.md - https://developer.delinea.com/reference/post_collection-getcollectiontemplate.md - https://developer.delinea.com/reference/post_collection-getmembers.md - https://developer.delinea.com/reference/post_collection-getobjectcollections.md - https://developer.delinea.com/reference/post_collection-getobjectcollectionsandfilters.md - https://developer.delinea.com/reference/post_collection-ismember.md - https://developer.delinea.com/reference/post_collection-setcollectionpermissions.md - https://developer.delinea.com/reference/post_collection-updatecollection.md - https://developer.delinea.com/reference/post_collection-updatememberscollection.md - https://developer.delinea.com/reference/post_core-addblockediprange.md - https://developer.delinea.com/reference/post_core-addpremdetectrange.md - https://developer.delinea.com/reference/post_core-assigndirectoryfilerightstoroles.md - https://developer.delinea.com/reference/post_core-assigndirectoryrightstoroles.md - https://developer.delinea.com/reference/post_core-assignfilerightstoroles.md - https://developer.delinea.com/reference/post_core-checkproxyhealth-1.md - https://developer.delinea.com/reference/post_core-createdirectory.md - https://developer.delinea.com/reference/post_core-createtenantreportsdirectory.md - https://developer.delinea.com/reference/post_core-createuserhomereportsdirectory.md - https://developer.delinea.com/reference/post_core-delblockediprange.md - https://developer.delinea.com/reference/post_core-deletealias.md - https://developer.delinea.com/reference/post_core-deletealiases.md - https://developer.delinea.com/reference/post_core-deletecertificate.md - https://developer.delinea.com/reference/post_core-deletedirectory.md - https://developer.delinea.com/reference/post_core-deletefile.md - https://developer.delinea.com/reference/post_core-deletefiles.md - https://developer.delinea.com/reference/post_core-deleteproxies.md - https://developer.delinea.com/reference/post_core-deleteproxy.md - https://developer.delinea.com/reference/post_core-deleteproxycode.md - https://developer.delinea.com/reference/post_core-deleteproxycodes.md - https://developer.delinea.com/reference/post_core-deletetenantconfig.md - https://developer.delinea.com/reference/post_core-delpremdetectrange.md - https://developer.delinea.com/reference/post_core-directoryexists.md - https://developer.delinea.com/reference/post_core-downloadcertificate.md - https://developer.delinea.com/reference/post_core-downloadfile.md - https://developer.delinea.com/reference/post_core-fileexists.md - https://developer.delinea.com/reference/post_core-generatenewproxycode.md - https://developer.delinea.com/reference/post_core-generatepassword.md - https://developer.delinea.com/reference/post_core-getadloginsuffixesbyforest.md - https://developer.delinea.com/reference/post_core-getadtopology.md - https://developer.delinea.com/reference/post_core-getaliasesfortenant.md - https://developer.delinea.com/reference/post_core-getassignedadministrativerights.md - https://developer.delinea.com/reference/post_core-getblockedipranges.md - https://developer.delinea.com/reference/post_core-getcacertchain.md - https://developer.delinea.com/reference/post_core-getcdsaliasesfortenant.md - https://developer.delinea.com/reference/post_core-getcloudcacert.md - https://developer.delinea.com/reference/post_core-getconnectorlog4netconfig.md - https://developer.delinea.com/reference/post_core-getcurrentiwajsonpurl.md - https://developer.delinea.com/reference/post_core-getcurrentiwaurl.md - https://developer.delinea.com/reference/post_core-getdefaultglobalappsigningcert.md - https://developer.delinea.com/reference/post_core-getdirectories.md - https://developer.delinea.com/reference/post_core-getdirectorycontents.md - https://developer.delinea.com/reference/post_core-getdirectoryfilerolesandrights.md - https://developer.delinea.com/reference/post_core-getdirectoryinfo.md - https://developer.delinea.com/reference/post_core-getdirectoryrolesandrights.md - https://developer.delinea.com/reference/post_core-getdirectoryservices.md - https://developer.delinea.com/reference/post_core-getdomaincontrollersfordomain.md - https://developer.delinea.com/reference/post_core-getdownloadurls.md - https://developer.delinea.com/reference/post_core-getfileinfo.md - https://developer.delinea.com/reference/post_core-getfilerolesandrights.md - https://developer.delinea.com/reference/post_core-getiwatrustrootcert.md - https://developer.delinea.com/reference/post_core-getloctag.md - https://developer.delinea.com/reference/post_core-getoutreecontents.md - https://developer.delinea.com/reference/post_core-getpremdetectranges.md - https://developer.delinea.com/reference/post_core-getproxies.md - https://developer.delinea.com/reference/post_core-getproxycode.md - https://developer.delinea.com/reference/post_core-getproxycodes.md - https://developer.delinea.com/reference/post_core-getproxyiwahostcertificatefile.md - https://developer.delinea.com/reference/post_core-getproxyiwasettings.md - https://developer.delinea.com/reference/post_core-getpurchasedlicenses.md - https://developer.delinea.com/reference/post_core-getreportsdirectorycontents.md - https://developer.delinea.com/reference/post_core-getsupportedcultures-1.md - https://developer.delinea.com/reference/post_core-gettenantcacert.md - https://developer.delinea.com/reference/post_core-gettenantconfig.md - https://developer.delinea.com/reference/post_core-getuniquefilename.md - https://developer.delinea.com/reference/post_core-getusersettings.md - https://developer.delinea.com/reference/post_core-getzsocertauthority.md - https://developer.delinea.com/reference/post_core-getzsohostinfo.md - https://developer.delinea.com/reference/post_core-handletwiliosmsreceipt.md - https://developer.delinea.com/reference/post_core-issueusercert.md - https://developer.delinea.com/reference/post_core-issuezsousercert.md - https://developer.delinea.com/reference/post_core-listdirectory.md - https://developer.delinea.com/reference/post_core-makefile.md - https://developer.delinea.com/reference/post_core-movedirectory.md - https://developer.delinea.com/reference/post_core-notifyenvironment.md - https://developer.delinea.com/reference/post_core-processproxyiwacloudredirect.md - https://developer.delinea.com/reference/post_core-readfile.md - https://developer.delinea.com/reference/post_core-reissueiwahostcertificate.md - https://developer.delinea.com/reference/post_core-renamecertificate.md - https://developer.delinea.com/reference/post_core-setconnectorlog4netconfig.md - https://developer.delinea.com/reference/post_core-setdefaultcertificate.md - https://developer.delinea.com/reference/post_core-setproxyiwahostcertificatefile.md - https://developer.delinea.com/reference/post_core-setproxyiwasettings.md - https://developer.delinea.com/reference/post_core-settenantconfig.md - https://developer.delinea.com/reference/post_core-startservice.md - https://developer.delinea.com/reference/post_core-stopservice.md - https://developer.delinea.com/reference/post_core-storealias.md - https://developer.delinea.com/reference/post_core-storeuser.md - https://developer.delinea.com/reference/post_core-storeusersetting.md - https://developer.delinea.com/reference/post_core-updatedirectoryservicesprecedence.md - https://developer.delinea.com/reference/post_core-updateproxycode.md - https://developer.delinea.com/reference/post_core-updateproxyiwasettings.md - https://developer.delinea.com/reference/post_core-uploadcertificate.md - https://developer.delinea.com/reference/post_core-writefile.md - https://developer.delinea.com/reference/post_cssintegration-dzdoexecute.md - https://developer.delinea.com/reference/post_cssintegration-getchallengeprofiles.md - https://developer.delinea.com/reference/post_cssintegration-mfalogin.md - https://developer.delinea.com/reference/post_cssintegration-setchallengeprofiles.md - https://developer.delinea.com/reference/post_dashaccount-adddiscoveryprofile.md - https://developer.delinea.com/reference/post_dashaccount-canceldiscovery.md - https://developer.delinea.com/reference/post_dashaccount-clearowneraccount.md - https://developer.delinea.com/reference/post_dashaccount-commitdiscoveredaccount.md - https://developer.delinea.com/reference/post_dashaccount-commitdiscoveredaccounts.md - https://developer.delinea.com/reference/post_dashaccount-deletediscoveredaccounts.md - https://developer.delinea.com/reference/post_dashaccount-deletediscoveryprofile.md - https://developer.delinea.com/reference/post_dashaccount-getdiscoveryprofile.md - https://developer.delinea.com/reference/post_dashaccount-getdiscoveryprofiles.md - https://developer.delinea.com/reference/post_dashaccount-getmydashaaccountswithcheckout.md - https://developer.delinea.com/reference/post_dashaccount-getprofilerights.md - https://developer.delinea.com/reference/post_dashaccount-rundiscovery.md - https://developer.delinea.com/reference/post_dashaccount-setdiscoveryprofilepermissions.md - https://developer.delinea.com/reference/post_dashaccount-updatediscoveredaccount.md - https://developer.delinea.com/reference/post_dashaccount-updatediscoveryprofile.md - https://developer.delinea.com/reference/post_discovery-adddiscoveryaccount.md - https://developer.delinea.com/reference/post_discovery-anydiscoveryaccountsreferenced.md - https://developer.delinea.com/reference/post_discovery-deleteblacklistedcomputer.md - https://developer.delinea.com/reference/post_discovery-deletediscoveryaccount.md - https://developer.delinea.com/reference/post_discovery-deleteexcludedaccount.md - https://developer.delinea.com/reference/post_discovery-getdiscoveryprofilepermissions.md - https://developer.delinea.com/reference/post_discovery-getexcludedaccounts.md - https://developer.delinea.com/reference/post_discovery-gethistory.md - https://developer.delinea.com/reference/post_discovery-getreferencedvpcs.md - https://developer.delinea.com/reference/post_discovery-getvpcname.md - https://developer.delinea.com/reference/post_discovery-setdiscoveryprofilepermissions.md - https://developer.delinea.com/reference/post_discovery-updatediscoveryaccount.md - https://developer.delinea.com/reference/post_extdata-getcolumn.md - https://developer.delinea.com/reference/post_extdata-getcolumns.md - https://developer.delinea.com/reference/post_extdata-getschema.md - https://developer.delinea.com/reference/post_extdata-setcolumn.md - https://developer.delinea.com/reference/post_extdata-setcolumns.md - https://developer.delinea.com/reference/post_extdata-updateschema.md - https://developer.delinea.com/reference/post_externalcamgmt-addcertauthority.md - https://developer.delinea.com/reference/post_externalcamgmt-downloadcertauthority.md - https://developer.delinea.com/reference/post_externalcamgmt-getcertauthorities.md - https://developer.delinea.com/reference/post_externalcamgmt-removecertauthority.md - https://developer.delinea.com/reference/post_externalcamgmt-updatecertauthority.md - https://developer.delinea.com/reference/post_federation-addglobalgroupassertionmapping.md - https://developer.delinea.com/reference/post_federation-createfederation.md - https://developer.delinea.com/reference/post_federation-deletefederation.md - https://developer.delinea.com/reference/post_federation-deleteglobalgroupassertionmapping.md - https://developer.delinea.com/reference/post_federation-federationmetadata.md - https://developer.delinea.com/reference/post_federation-getfederatedgroupmembers.md - https://developer.delinea.com/reference/post_federation-getfederatedgroupsforuser.md - https://developer.delinea.com/reference/post_federation-getfederation.md - https://developer.delinea.com/reference/post_federation-getfederationgroupassertionmappings.md - https://developer.delinea.com/reference/post_federation-getfederations.md - https://developer.delinea.com/reference/post_federation-getfederationsignaturetypes.md - https://developer.delinea.com/reference/post_federation-getfederationtypes.md - https://developer.delinea.com/reference/post_federation-getglobalfederationsettings.md - https://developer.delinea.com/reference/post_federation-getglobalgroupassertionmappings.md - https://developer.delinea.com/reference/post_federation-getgroups.md - https://developer.delinea.com/reference/post_federation-removeuserfromfederatedgroup.md - https://developer.delinea.com/reference/post_federation-spsigningcertificate.md - https://developer.delinea.com/reference/post_federation-spsigningcertificateauthority.md - https://developer.delinea.com/reference/post_federation-updatefederation.md - https://developer.delinea.com/reference/post_federation-updatefederationgroupassertionmappings.md - https://developer.delinea.com/reference/post_federation-updateglobalgroupassertionmappings.md - https://developer.delinea.com/reference/post_googledirectory-authcallback.md - https://developer.delinea.com/reference/post_googledirectory-getauthtokenstate.md - https://developer.delinea.com/reference/post_googledirectory-getdirectoryserviceconfig.md - https://developer.delinea.com/reference/post_googledirectory-getserviceloginurlinfo.md - https://developer.delinea.com/reference/post_googledirectory-removedirectoryservice.md - https://developer.delinea.com/reference/post_googledirectory-updatedirectoryserviceconfig.md - https://developer.delinea.com/reference/post_health-check.md - https://developer.delinea.com/reference/post_health-supportinfo.md - https://developer.delinea.com/reference/post_health-supportinfofile.md - https://developer.delinea.com/reference/post_home-getlogindata.md - https://developer.delinea.com/reference/post_jobflow-deletejob.md - https://developer.delinea.com/reference/post_jobflow-event.md - https://developer.delinea.com/reference/post_jobflow-getjob.md - https://developer.delinea.com/reference/post_jobflow-getjobs.md - https://developer.delinea.com/reference/post_jobflow-getmyjobs.md - https://developer.delinea.com/reference/post_jobflow-startjob.md - https://developer.delinea.com/reference/post_jsmanage-getdashboardrolesandrights.md - https://developer.delinea.com/reference/post_jsmanage-getreportrolesandrights.md - https://developer.delinea.com/reference/post_kmip-configure.md - https://developer.delinea.com/reference/post_kmip-deleteconfig.md - https://developer.delinea.com/reference/post_kmip-getconfig.md - https://developer.delinea.com/reference/post_kmip-passwordstoredremotely.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-addldapdirectoryserviceconfig.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-deleteldapdirectoryserviceconfig.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getcloudconnectors.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getdirectoryserviceversion.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getldapdirectoryserviceconfig.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getldapdirectoryserviceuuidbyname.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getmappableattributelist.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getpropertytoattributemappings.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-getscriptingpropertytoattributemappings.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-modifyldapdirectoryserviceconfig.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-setpropertytoattributemappings.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-setscriptingpropertytoattributemappings.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-testuserlookup.md - https://developer.delinea.com/reference/post_ldapdirectoryservice-verifyldapdirectoryserviceconfig.md - https://developer.delinea.com/reference/post_libonlyvfs-getfile.md - https://developer.delinea.com/reference/post_mobilepas-deletedevice.md - https://developer.delinea.com/reference/post_mobilepas-disablesso.md - https://developer.delinea.com/reference/post_mobilepas-enablesso.md - https://developer.delinea.com/reference/post_mobilepas-lockclientapp.md - https://developer.delinea.com/reference/post_mobilepas-pingdevice.md - https://developer.delinea.com/reference/post_mobilepas-reapplydevicepolicy.md - https://developer.delinea.com/reference/post_mobilepas-resetclientapplockpin.md - https://developer.delinea.com/reference/post_mobilepas-setdevicepermissions.md - https://developer.delinea.com/reference/post_mobilepas-setprimarydevice.md - https://developer.delinea.com/reference/post_mobilepas-updatedevicepolicy.md - https://developer.delinea.com/reference/post_oath-addorupdateprofile.md - https://developer.delinea.com/reference/post_oath-deleteprofiles.md - https://developer.delinea.com/reference/post_oath-getdatafromcsvfile.md - https://developer.delinea.com/reference/post_oath-getimportprofilelist.md - https://developer.delinea.com/reference/post_oath-getprofilelist.md - https://developer.delinea.com/reference/post_oath-getprofilelistfordevice.md - https://developer.delinea.com/reference/post_oath-resetcentrifyoathprofile.md - https://developer.delinea.com/reference/post_oath-resynchronizeoathtoken.md - https://developer.delinea.com/reference/post_oath-saveprofile.md - https://developer.delinea.com/reference/post_oath-submituploadedfile.md - https://developer.delinea.com/reference/post_oath-updateoathprofilecounter.md - https://developer.delinea.com/reference/post_oath-validateotpcode.md - https://developer.delinea.com/reference/post_oauth2-authorize.md - https://developer.delinea.com/reference/post_oauth2-confirm.md - https://developer.delinea.com/reference/post_oauth2-endsession.md - https://developer.delinea.com/reference/post_oauth2-getmeta.md - https://developer.delinea.com/reference/post_oauth2-introspect.md - https://developer.delinea.com/reference/post_oauth2-keys.md - https://developer.delinea.com/reference/post_oauth2-revoke.md - https://developer.delinea.com/reference/post_oauth2-token.md - https://developer.delinea.com/reference/post_oauth2-userinfo.md - https://developer.delinea.com/reference/post_oauth2man-createclienttoken.md - https://developer.delinea.com/reference/post_pki-login.md - https://developer.delinea.com/reference/post_policy-addauthpolicymodifier.md - https://developer.delinea.com/reference/post_policy-deleteauthpolicymodifier.md - https://developer.delinea.com/reference/post_policy-deletepolicyblock.md - https://developer.delinea.com/reference/post_policy-getauthpolicymodifiers.md - https://developer.delinea.com/reference/post_policy-getniceplinks.md - https://developer.delinea.com/reference/post_policy-getnicepolicyblock.md - https://developer.delinea.com/reference/post_policy-getoathotpclientname.md - https://developer.delinea.com/reference/post_policy-getpasswordcomplexityrequirements.md - https://developer.delinea.com/reference/post_policy-getplinks.md - https://developer.delinea.com/reference/post_policy-getpolicyblock.md - https://developer.delinea.com/reference/post_policy-getpolicybool.md - https://developer.delinea.com/reference/post_policy-getpolicyint.md - https://developer.delinea.com/reference/post_policy-getpolicymetadata.md - https://developer.delinea.com/reference/post_policy-getpolicystring.md - https://developer.delinea.com/reference/post_policy-getrsop.md - https://developer.delinea.com/reference/post_policy-getu2fclientname.md - https://developer.delinea.com/reference/post_policy-getusingcloudmobilegp.md - https://developer.delinea.com/reference/post_policy-policychecks.md - https://developer.delinea.com/reference/post_policy-savepolicyblock2.md - https://developer.delinea.com/reference/post_policy-savepolicyblock3.md - https://developer.delinea.com/reference/post_policy-setplinks.md - https://developer.delinea.com/reference/post_policy-setplinksv2.md - https://developer.delinea.com/reference/post_policy-setusingcloudmobilegp.md - https://developer.delinea.com/reference/post_privilegeelevation-canmanageprivilegeelevation.md - https://developer.delinea.com/reference/post_privilegeelevation-getassignmentsbyscope.md - https://developer.delinea.com/reference/post_privilegeelevation-getchallenges.md - https://developer.delinea.com/reference/post_privilegeelevation-getcommands.md - https://developer.delinea.com/reference/post_privilegeelevation-submitworkflowrequest.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-add.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-addassignment.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-delete.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-deleteassignment.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-getassignments.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-getprivilegeelevationcommandcollectionpermissions.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-getprivilegeelevationcommandpermissions.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-listassignments.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-setprivilegeelevationcommandcollectionpermissions.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-setprivilegeelevationcommandpermissions.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-update.md - https://developer.delinea.com/reference/post_privilegeelevationcommand-updateassignment.md - https://developer.delinea.com/reference/post_quickstart-getstate.md - https://developer.delinea.com/reference/post_quickstart-manageaccounts.md - https://developer.delinea.com/reference/post_quickstart-rundiscovery.md - https://developer.delinea.com/reference/post_quickstart-verifyadminaccount.md - https://developer.delinea.com/reference/post_radius-getclients.md - https://developer.delinea.com/reference/post_radius-getconfig.md - https://developer.delinea.com/reference/post_radius-getservers.md - https://developer.delinea.com/reference/post_radius-getuseridentifierattributes.md - https://developer.delinea.com/reference/post_radius-removeclients.md - https://developer.delinea.com/reference/post_radius-removeservers.md - https://developer.delinea.com/reference/post_radius-setclient.md - https://developer.delinea.com/reference/post_radius-setconfig.md - https://developer.delinea.com/reference/post_radius-setserver.md - https://developer.delinea.com/reference/post_registration-customerinfo.md - https://developer.delinea.com/reference/post_registration-registernewtenant.md - https://developer.delinea.com/reference/post_report-addreport.md - https://developer.delinea.com/reference/post_report-addreports.md - https://developer.delinea.com/reference/post_report-copyreport.md - https://developer.delinea.com/reference/post_report-deletereport.md - https://developer.delinea.com/reference/post_report-deletereports.md - https://developer.delinea.com/reference/post_report-emailreport.md - https://developer.delinea.com/reference/post_report-getdefaultreportcategories.md - https://developer.delinea.com/reference/post_report-getreport.md - https://developer.delinea.com/reference/post_report-getreportcollectionpermissions.md - https://developer.delinea.com/reference/post_report-getreportpermissions.md - https://developer.delinea.com/reference/post_report-getreportrights.md - https://developer.delinea.com/reference/post_report-getreports.md - https://developer.delinea.com/reference/post_report-setreportcollectionpermissions.md - https://developer.delinea.com/reference/post_report-setreportpermissions.md - https://developer.delinea.com/reference/post_report-updatereport.md - https://developer.delinea.com/reference/post_resourceprofile-addresourceprofile.md - https://developer.delinea.com/reference/post_resourceprofile-deleteresourceprofile.md - https://developer.delinea.com/reference/post_resourceprofile-exportresourceprofilepackage.md - https://developer.delinea.com/reference/post_resourceprofile-getallresourceprofiles.md - https://developer.delinea.com/reference/post_resourceprofile-getresourceprofile.md - https://developer.delinea.com/reference/post_resourceprofile-getresourceprofilecollectionpermissions.md - https://developer.delinea.com/reference/post_resourceprofile-getresourceprofilepermissions.md - https://developer.delinea.com/reference/post_resourceprofile-openresourceprofilepackage.md - https://developer.delinea.com/reference/post_resourceprofile-setresourceprofilecollectionpermissions.md - https://developer.delinea.com/reference/post_resourceprofile-setresourceprofilepermissions.md - https://developer.delinea.com/reference/post_resourceprofile-updateresourceprofile.md - https://developer.delinea.com/reference/post_roles-getpagedrolemembers.md - https://developer.delinea.com/reference/post_roles-updaterole-1.md - https://developer.delinea.com/reference/post_saasmanage-addusersandgroupstorole.md - https://developer.delinea.com/reference/post_saasmanage-assignsuperrights.md - https://developer.delinea.com/reference/post_saasmanage-checkifappshaveupdates.md - https://developer.delinea.com/reference/post_saasmanage-deleteapplication.md - https://developer.delinea.com/reference/post_saasmanage-deleterole.md - https://developer.delinea.com/reference/post_saasmanage-deleteroles.md - https://developer.delinea.com/reference/post_saasmanage-getallupdatableapps.md - https://developer.delinea.com/reference/post_saasmanage-getappcreds.md - https://developer.delinea.com/reference/post_saasmanage-getappidbyservicename.md - https://developer.delinea.com/reference/post_saasmanage-getapplication.md - https://developer.delinea.com/reference/post_saasmanage-getappunsupportedlist.md - https://developer.delinea.com/reference/post_saasmanage-getrole.md - https://developer.delinea.com/reference/post_saasmanage-getrolemembers.md - https://developer.delinea.com/reference/post_saasmanage-gettemplatesandcategories.md - https://developer.delinea.com/reference/post_saasmanage-importappfromtemplate.md - https://developer.delinea.com/reference/post_saasmanage-isapplicationavailableincatalog-1.md - https://developer.delinea.com/reference/post_saasmanage-refreshapplicationbinaryfilemetadata.md - https://developer.delinea.com/reference/post_saasmanage-removeusersandgroupsfromrole.md - https://developer.delinea.com/reference/post_saasmanage-requestappuploadurl.md - https://developer.delinea.com/reference/post_saasmanage-setapplicationpermissions.md - https://developer.delinea.com/reference/post_saasmanage-setrolepolicy.md - https://developer.delinea.com/reference/post_saasmanage-storerole.md - https://developer.delinea.com/reference/post_saasmanage-unassignsuperrights.md - https://developer.delinea.com/reference/post_saasmanage-updateapplicationde.md - https://developer.delinea.com/reference/post_saasmanage-updaterole.md - https://developer.delinea.com/reference/post_schedulerhistory-deletejobhistory.md - https://developer.delinea.com/reference/post_schedulerhistory-getjobreport.md - https://developer.delinea.com/reference/post_security-advanceauthentication.md - https://developer.delinea.com/reference/post_security-advanceforgotusername-1.md - https://developer.delinea.com/reference/post_security-amiauthenticated.md - https://developer.delinea.com/reference/post_security-answeroobchallenge.md - https://developer.delinea.com/reference/post_security-challengeuser.md - https://developer.delinea.com/reference/post_security-cleanupauthentication.md - https://developer.delinea.com/reference/post_security-doihaveright.md - https://developer.delinea.com/reference/post_security-forgotusername-1.md - https://developer.delinea.com/reference/post_security-getonetimepassword.md - https://developer.delinea.com/reference/post_security-getriskanalysislevels.md - https://developer.delinea.com/reference/post_security-login.md - https://developer.delinea.com/reference/post_security-logout.md - https://developer.delinea.com/reference/post_security-multiauthlogin.md - https://developer.delinea.com/reference/post_security-ondemandchallenge.md - https://developer.delinea.com/reference/post_security-refreshtoken.md - https://developer.delinea.com/reference/post_security-resumefromextidpauth.md - https://developer.delinea.com/reference/post_security-startauthentication.md - https://developer.delinea.com/reference/post_security-startchallenge.md - https://developer.delinea.com/reference/post_security-startforgotusername-1.md - https://developer.delinea.com/reference/post_security-startsocialauthentication.md - https://developer.delinea.com/reference/post_security-submitoathotpcode.md - https://developer.delinea.com/reference/post_security-taskcheck.md - https://developer.delinea.com/reference/post_security-taskchecks.md - https://developer.delinea.com/reference/post_security-twiliophonechallengecompleted.md - https://developer.delinea.com/reference/post_security-twiliophonechallengenotanswered.md - https://developer.delinea.com/reference/post_security-whoami.md - https://developer.delinea.com/reference/post_serveragent-addconfigfile.md - https://developer.delinea.com/reference/post_serveragent-addenrollmentcode.md - https://developer.delinea.com/reference/post_serveragent-convertmachineaccount.md - https://developer.delinea.com/reference/post_serveragent-cssextension.md - https://developer.delinea.com/reference/post_serveragent-deleteconfigfile-2.md - https://developer.delinea.com/reference/post_serveragent-deleteenrollmentcode.md - https://developer.delinea.com/reference/post_serveragent-disablefeatures.md - https://developer.delinea.com/reference/post_serveragent-enablefeatures.md - https://developer.delinea.com/reference/post_serveragent-enablefeaturesv2.md - https://developer.delinea.com/reference/post_serveragent-enroll.md - https://developer.delinea.com/reference/post_serveragent-enrollv2.md - https://developer.delinea.com/reference/post_serveragent-enrollv3.md - https://developer.delinea.com/reference/post_serveragent-getallconfigfiles-2.md - https://developer.delinea.com/reference/post_serveragent-getallenrollmentcodes.md - https://developer.delinea.com/reference/post_serveragent-getcertificate.md - https://developer.delinea.com/reference/post_serveragent-getconfigsettings.md - https://developer.delinea.com/reference/post_serveragent-getdirectauditconfiguration.md - https://developer.delinea.com/reference/post_serveragent-geteffectivelocalgroups.md - https://developer.delinea.com/reference/post_serveragent-getgroupbyid.md - https://developer.delinea.com/reference/post_serveragent-getgroupbyname.md - https://developer.delinea.com/reference/post_serveragent-getgroupmembers.md - https://developer.delinea.com/reference/post_serveragent-getgroupscopeallowedroles.md - https://developer.delinea.com/reference/post_serveragent-getgroupscopenamesforrole-2.md - https://developer.delinea.com/reference/post_serveragent-getgroupscopesforrole.md - https://developer.delinea.com/reference/post_serveragent-getgroupscopesfortype.md - https://developer.delinea.com/reference/post_serveragent-getofflineotpsettings.md - https://developer.delinea.com/reference/post_serveragent-getsettings.md - https://developer.delinea.com/reference/post_serveragent-getuserbyid.md - https://developer.delinea.com/reference/post_serveragent-getuserbyname.md - https://developer.delinea.com/reference/post_serveragent-getusergroups.md - https://developer.delinea.com/reference/post_serveragent-pushconfigfile.md - https://developer.delinea.com/reference/post_serveragent-register.md - https://developer.delinea.com/reference/post_serveragent-registerv2.md - https://developer.delinea.com/reference/post_serveragent-registerv3.md - https://developer.delinea.com/reference/post_serveragent-setfeaturestate-3.md - https://developer.delinea.com/reference/post_serveragent-unenroll.md - https://developer.delinea.com/reference/post_serveragent-unenrollagents.md - https://developer.delinea.com/reference/post_serveragent-updategroupscopes.md - https://developer.delinea.com/reference/post_serveragent-updateinformation.md - https://developer.delinea.com/reference/post_serveragent-updatesettings.md - https://developer.delinea.com/reference/post_serveragent-validateagent.md - https://developer.delinea.com/reference/post_serveragent-verifypassword.md - https://developer.delinea.com/reference/post_serveragent-verifypasswordv2.md - https://developer.delinea.com/reference/post_serveragent-verifyusercanlogin.md - https://developer.delinea.com/reference/post_servermanage-addaccount.md - https://developer.delinea.com/reference/post_servermanage-addaccounts.md - https://developer.delinea.com/reference/post_servermanage-addcomputer.md - https://developer.delinea.com/reference/post_servermanage-adddatabase.md - https://developer.delinea.com/reference/post_servermanage-adddatabases.md - https://developer.delinea.com/reference/post_servermanage-adddomain.md - https://developer.delinea.com/reference/post_servermanage-adddomains.md - https://developer.delinea.com/reference/post_servermanage-addresource.md - https://developer.delinea.com/reference/post_servermanage-addresources.md - https://developer.delinea.com/reference/post_servermanage-addsecret.md - https://developer.delinea.com/reference/post_servermanage-addsecretsfolder.md - https://developer.delinea.com/reference/post_servermanage-addsshkey.md - https://developer.delinea.com/reference/post_servermanage-addsshkeyfile.md - https://developer.delinea.com/reference/post_servermanage-candeletesshkey.md - https://developer.delinea.com/reference/post_servermanage-checkinpassword.md - https://developer.delinea.com/reference/post_servermanage-checkofflineotpexist.md - https://developer.delinea.com/reference/post_servermanage-checkoutpassword.md - https://developer.delinea.com/reference/post_servermanage-creatediscoveryprofile.md - https://developer.delinea.com/reference/post_servermanage-deleteaccount.md - https://developer.delinea.com/reference/post_servermanage-deleteaccounts.md - https://developer.delinea.com/reference/post_servermanage-deletedatabase.md - https://developer.delinea.com/reference/post_servermanage-deletedomain.md - https://developer.delinea.com/reference/post_servermanage-deleteresource.md - https://developer.delinea.com/reference/post_servermanage-deleteresources.md - https://developer.delinea.com/reference/post_servermanage-deletesecret.md - https://developer.delinea.com/reference/post_servermanage-deletesecretsfolder.md - https://developer.delinea.com/reference/post_servermanage-deletesshkey.md - https://developer.delinea.com/reference/post_servermanage-deletesshkeys.md - https://developer.delinea.com/reference/post_servermanage-downloadsecretfileinchunks.md - https://developer.delinea.com/reference/post_servermanage-extendcheckout.md - https://developer.delinea.com/reference/post_servermanage-generatesshkey.md - https://developer.delinea.com/reference/post_servermanage-generatesshkeyfile.md - https://developer.delinea.com/reference/post_servermanage-getaccountcollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-getaccountpermissions.md - https://developer.delinea.com/reference/post_servermanage-getaccountsfordatabase.md - https://developer.delinea.com/reference/post_servermanage-getaccountsforlogin.md - https://developer.delinea.com/reference/post_servermanage-getaccountsforresource.md - https://developer.delinea.com/reference/post_servermanage-getagentprofile.md - https://developer.delinea.com/reference/post_servermanage-getauditinfo.md - https://developer.delinea.com/reference/post_servermanage-getcomputerchallenges.md - https://developer.delinea.com/reference/post_servermanage-getcomputerrights.md - https://developer.delinea.com/reference/post_servermanage-getcomputersforsshkeyaccounts.md - https://developer.delinea.com/reference/post_servermanage-getdatabasecollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-getdatabasepermissions.md - https://developer.delinea.com/reference/post_servermanage-getdiscoveryprofiles.md - https://developer.delinea.com/reference/post_servermanage-getdomaincollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-getdomainpermissions.md - https://developer.delinea.com/reference/post_servermanage-getmfatokencode.md - https://developer.delinea.com/reference/post_servermanage-getmfatokensettings.md - https://developer.delinea.com/reference/post_servermanage-getmysessions.md - https://developer.delinea.com/reference/post_servermanage-getmyworkspaceaccounts.md - https://developer.delinea.com/reference/post_servermanage-getofflineotp.md - https://developer.delinea.com/reference/post_servermanage-getresourcecollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-getresourcepermissions.md - https://developer.delinea.com/reference/post_servermanage-getretiredpassword.md - https://developer.delinea.com/reference/post_servermanage-getrsop.md - https://developer.delinea.com/reference/post_servermanage-getsecret.md - https://developer.delinea.com/reference/post_servermanage-getsecretapprovers.md - https://developer.delinea.com/reference/post_servermanage-getsecretcollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-getsecretfolder.md - https://developer.delinea.com/reference/post_servermanage-getsecretfolderscanmoveto.md - https://developer.delinea.com/reference/post_servermanage-getsecretrightsandchallenges.md - https://developer.delinea.com/reference/post_servermanage-getsecretsandfolders.md - https://developer.delinea.com/reference/post_servermanage-getsecretsfolderrights.md - https://developer.delinea.com/reference/post_servermanage-getsecretsfolderrightsandchallenges.md - https://developer.delinea.com/reference/post_servermanage-getsecrettobereplaced.md - https://developer.delinea.com/reference/post_servermanage-getsessions.md - https://developer.delinea.com/reference/post_servermanage-getsshkeycollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-getsshkeyinfo.md - https://developer.delinea.com/reference/post_servermanage-getsshkeypermissions.md - https://developer.delinea.com/reference/post_servermanage-getsshkeyrightsandchallenges.md - https://developer.delinea.com/reference/post_servermanage-getsshkeysforlogin.md - https://developer.delinea.com/reference/post_servermanage-getsshkeyusage.md - https://developer.delinea.com/reference/post_servermanage-logjustificationevent-2.md - https://developer.delinea.com/reference/post_servermanage-manageaccounts.md - https://developer.delinea.com/reference/post_servermanage-movefolder.md - https://developer.delinea.com/reference/post_servermanage-movesecret.md - https://developer.delinea.com/reference/post_servermanage-multiaccountdelete-1.md - https://developer.delinea.com/reference/post_servermanage-multiaccountpasswordrotation-1.md - https://developer.delinea.com/reference/post_servermanage-patchresource.md - https://developer.delinea.com/reference/post_servermanage-precheckdatabase.md - https://developer.delinea.com/reference/post_servermanage-precheckdomain.md - https://developer.delinea.com/reference/post_servermanage-precheckout.md - https://developer.delinea.com/reference/post_servermanage-provisionreconciliationaccounts.md - https://developer.delinea.com/reference/post_servermanage-refreshhealthstatus.md - https://developer.delinea.com/reference/post_servermanage-removemfatoken.md - https://developer.delinea.com/reference/post_servermanage-requestsecretdownloadurl.md - https://developer.delinea.com/reference/post_servermanage-requestsecretuploadurl.md - https://developer.delinea.com/reference/post_servermanage-retrievesecretcontents.md - https://developer.delinea.com/reference/post_servermanage-retrievesecretmetadata.md - https://developer.delinea.com/reference/post_servermanage-retrievesshkey.md - https://developer.delinea.com/reference/post_servermanage-rotatepassword.md - https://developer.delinea.com/reference/post_servermanage-rotatepasswords.md - https://developer.delinea.com/reference/post_servermanage-setaccountcollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-setaccountpermissions.md - https://developer.delinea.com/reference/post_servermanage-setconnectorsystem.md - https://developer.delinea.com/reference/post_servermanage-setdatabasecollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-setdatabasepermissions.md - https://developer.delinea.com/reference/post_servermanage-setdomaincollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-setdomainpermissions.md - https://developer.delinea.com/reference/post_servermanage-setescrowkeyfromfile.md - https://developer.delinea.com/reference/post_servermanage-setmfatoken.md - https://developer.delinea.com/reference/post_servermanage-setresourcecollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-setresourcepermissions.md - https://developer.delinea.com/reference/post_servermanage-setsecretcollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-setsecretpermissions.md - https://developer.delinea.com/reference/post_servermanage-setsecretsfolderpermissions.md - https://developer.delinea.com/reference/post_servermanage-setsshkeycollectionpermissions.md - https://developer.delinea.com/reference/post_servermanage-setsshkeypermissions.md - https://developer.delinea.com/reference/post_servermanage-terminatesession.md - https://developer.delinea.com/reference/post_servermanage-updateaccount.md - https://developer.delinea.com/reference/post_servermanage-updatedatabase.md - https://developer.delinea.com/reference/post_servermanage-updatedomain.md - https://developer.delinea.com/reference/post_servermanage-updatepassword.md - https://developer.delinea.com/reference/post_servermanage-updateresource.md - https://developer.delinea.com/reference/post_servermanage-updatesecret.md - https://developer.delinea.com/reference/post_servermanage-updatesecretsfolder.md - https://developer.delinea.com/reference/post_servermanage-updatesettings.md - https://developer.delinea.com/reference/post_servermanage-updatesshkey.md - https://developer.delinea.com/reference/post_servermanage-uploadsecretfileinchunks.md - https://developer.delinea.com/reference/post_servermanage-verifyaccountpasswordmanagementsettings.md - https://developer.delinea.com/reference/post_serversession-getloginurl.md - https://developer.delinea.com/reference/post_socialauth-facebookauthcallback.md - https://developer.delinea.com/reference/post_socialauth-googleauthcallback.md - https://developer.delinea.com/reference/post_socialauth-linkedinauthcallback.md - https://developer.delinea.com/reference/post_socialauth-microsoftactauthcallback.md - https://developer.delinea.com/reference/post_socialauth-twitterauthcallback.md - https://developer.delinea.com/reference/post_socialauthmgmt-getallcustomconfig.md - https://developer.delinea.com/reference/post_socialauthmgmt-getapplicationclientsecret.md - https://developer.delinea.com/reference/post_socialauthmgmt-getauthconfig.md - https://developer.delinea.com/reference/post_socialauthmgmt-getcustomconfig.md - https://developer.delinea.com/reference/post_socialauthmgmt-resetauthconfig.md - https://developer.delinea.com/reference/post_socialauthmgmt-setauthconfig.md - https://developer.delinea.com/reference/post_socialauthmgmt-setcustomconfig.md - https://developer.delinea.com/reference/post_subscriptions-addsubscription.md - https://developer.delinea.com/reference/post_subscriptions-creatempaccount.md - https://developer.delinea.com/reference/post_subscriptions-deletempaccount.md - https://developer.delinea.com/reference/post_subscriptions-deletesubscription.md - https://developer.delinea.com/reference/post_subscriptions-getalllaggers.md - https://developer.delinea.com/reference/post_subscriptions-getmultiplexedaccount.md - https://developer.delinea.com/reference/post_subscriptions-getmultiplexedaccountpermissions.md - https://developer.delinea.com/reference/post_subscriptions-getmultiplexedaccountrights.md - https://developer.delinea.com/reference/post_subscriptions-getmultiplexedaccounts.md - https://developer.delinea.com/reference/post_subscriptions-getsubscription.md - https://developer.delinea.com/reference/post_subscriptions-getsubscriptioncollectionpermissions.md - https://developer.delinea.com/reference/post_subscriptions-getsubscriptionpermissions.md - https://developer.delinea.com/reference/post_subscriptions-getsubscriptionrights.md - https://developer.delinea.com/reference/post_subscriptions-pushsubscription.md - https://developer.delinea.com/reference/post_subscriptions-setmultiplexedaccountpermissions.md - https://developer.delinea.com/reference/post_subscriptions-setsubscriptioncollectionpermissions.md - https://developer.delinea.com/reference/post_subscriptions-setsubscriptionpermissions.md - https://developer.delinea.com/reference/post_subscriptions-sync.md - https://developer.delinea.com/reference/post_subscriptions-updatempaccount.md - https://developer.delinea.com/reference/post_subscriptions-updatesubscription.md - https://developer.delinea.com/reference/post_sysinfo-about.md - https://developer.delinea.com/reference/post_sysinfo-dummy.md - https://developer.delinea.com/reference/post_sysinfo-getmysession.md - https://developer.delinea.com/reference/post_sysinfo-version.md - https://developer.delinea.com/reference/post_task-canceljob.md - https://developer.delinea.com/reference/post_task-createonetimejob.md - https://developer.delinea.com/reference/post_task-emailreport.md - https://developer.delinea.com/reference/post_task-getjobhistory.md - https://developer.delinea.com/reference/post_task-getsinglejobhistory.md - https://developer.delinea.com/reference/post_task-jobreport.md - https://developer.delinea.com/reference/post_tenantcnames-get.md - https://developer.delinea.com/reference/post_tenantcnames-getdomaininfo.md - https://developer.delinea.com/reference/post_tenantcnames-register.md - https://developer.delinea.com/reference/post_tenantcnames-setpreferred.md - https://developer.delinea.com/reference/post_tenantcnames-uiget.md - https://developer.delinea.com/reference/post_tenantcnames-unregister.md - https://developer.delinea.com/reference/post_tenantconfig-deleteadminsecurityquestion.md - https://developer.delinea.com/reference/post_tenantconfig-deleteadvancedconfig.md - https://developer.delinea.com/reference/post_tenantconfig-getadminsecurityquestion.md - https://developer.delinea.com/reference/post_tenantconfig-getadminsecurityquestions.md - https://developer.delinea.com/reference/post_tenantconfig-getadvancedconfig.md - https://developer.delinea.com/reference/post_tenantconfig-getcustomerconfig.md - https://developer.delinea.com/reference/post_tenantconfig-geteditablemailtemplates.md - https://developer.delinea.com/reference/post_tenantconfig-geteditablemessagetemplate.md - https://developer.delinea.com/reference/post_tenantconfig-geteditablemessagetemplates.md - https://developer.delinea.com/reference/post_tenantconfig-getgooglekey.md - https://developer.delinea.com/reference/post_tenantconfig-getmobileconfig.md - https://developer.delinea.com/reference/post_tenantconfig-getsmtpconfig.md - https://developer.delinea.com/reference/post_tenantconfig-gettwilioconfig.md - https://developer.delinea.com/reference/post_tenantconfig-resetportalconfig.md - https://developer.delinea.com/reference/post_tenantconfig-sendtestmessagetemplate.md - https://developer.delinea.com/reference/post_tenantconfig-setadminsecurityquestion.md - https://developer.delinea.com/reference/post_tenantconfig-setadvancedconfig.md - https://developer.delinea.com/reference/post_tenantconfig-setcustomerconfig.md - https://developer.delinea.com/reference/post_tenantconfig-setgooglekey.md - https://developer.delinea.com/reference/post_tenantconfig-setmobileconfig.md - https://developer.delinea.com/reference/post_tenantconfig-setpasswordpersistance.md - https://developer.delinea.com/reference/post_tenantconfig-setsmtpconfig.md - https://developer.delinea.com/reference/post_tenantconfig-settwilioconfig.md - https://developer.delinea.com/reference/post_tenantconfig-testsmtpconfig.md - https://developer.delinea.com/reference/post_tenantconfig-testtwilioconfig.md - https://developer.delinea.com/reference/post_u-evaluate.md - https://developer.delinea.com/reference/post_u2f-answerregistrationchallenge.md - https://developer.delinea.com/reference/post_u2f-deleteu2fdevice.md - https://developer.delinea.com/reference/post_u2f-deleteu2fdevices.md - https://developer.delinea.com/reference/post_u2f-facets.md - https://developer.delinea.com/reference/post_u2f-getregistrationchallenge.md - https://developer.delinea.com/reference/post_u2f-getu2fdevices.md - https://developer.delinea.com/reference/post_u2f-getu2fdevicesforuser.md - https://developer.delinea.com/reference/post_unixprofile-getgroupprofile.md - https://developer.delinea.com/reference/post_unixprofile-getuserprofile.md - https://developer.delinea.com/reference/post_unixprofile-getuserprofilesfromcsvfile.md - https://developer.delinea.com/reference/post_unixprofile-setgroupprofile.md - https://developer.delinea.com/reference/post_unixprofile-setuserprofile.md - https://developer.delinea.com/reference/post_unixprofile-submituploadedfile.md - https://developer.delinea.com/reference/post_uprest-getappbykey.md - https://developer.delinea.com/reference/post_uprest-getresultantappsforuser.md - https://developer.delinea.com/reference/post_uprest-gettagsforapp.md - https://developer.delinea.com/reference/post_uprest-getupdata.md - https://developer.delinea.com/reference/post_uprest-setusercredsforapp.md - https://developer.delinea.com/reference/post_uprest-upserttagsforapp.md - https://developer.delinea.com/reference/post_usermgmt-addfavorite.md - https://developer.delinea.com/reference/post_usermgmt-analyzeadaptivemfarisk.md - https://developer.delinea.com/reference/post_usermgmt-canedituserattributes.md - https://developer.delinea.com/reference/post_usermgmt-changeuserattributes-1.md - https://developer.delinea.com/reference/post_usermgmt-changeuserpassword.md - https://developer.delinea.com/reference/post_usermgmt-checkuserprofilechallenge.md - https://developer.delinea.com/reference/post_usermgmt-directoryservicequery.md - https://developer.delinea.com/reference/post_usermgmt-getcachedentity.md - https://developer.delinea.com/reference/post_usermgmt-getcacheduser.md - https://developer.delinea.com/reference/post_usermgmt-getfavorites.md - https://developer.delinea.com/reference/post_usermgmt-getsecurityquestions.md - https://developer.delinea.com/reference/post_usermgmt-getuserattributes.md - https://developer.delinea.com/reference/post_usermgmt-getusercertificateinfo.md - https://developer.delinea.com/reference/post_usermgmt-getuserhierarchy.md - https://developer.delinea.com/reference/post_usermgmt-getuserinfo.md - https://developer.delinea.com/reference/post_usermgmt-getuserpicture.md - https://developer.delinea.com/reference/post_usermgmt-getuserpreferences.md - https://developer.delinea.com/reference/post_usermgmt-getusersrolesandadministrativerights.md - https://developer.delinea.com/reference/post_usermgmt-inviteusers.md - https://developer.delinea.com/reference/post_usermgmt-isusercloudlocked.md - https://developer.delinea.com/reference/post_usermgmt-isuserlockedoutbypolicy.md - https://developer.delinea.com/reference/post_usermgmt-isusersubjecttocloudlocks.md - https://developer.delinea.com/reference/post_usermgmt-removefavorite.md - https://developer.delinea.com/reference/post_usermgmt-removeuser.md - https://developer.delinea.com/reference/post_usermgmt-removeusercertificate.md - https://developer.delinea.com/reference/post_usermgmt-removeusers.md - https://developer.delinea.com/reference/post_usermgmt-resetsecurityquestions.md - https://developer.delinea.com/reference/post_usermgmt-resetuserpassword.md - https://developer.delinea.com/reference/post_usermgmt-sendloginemail.md - https://developer.delinea.com/reference/post_usermgmt-sendloginemails.md - https://developer.delinea.com/reference/post_usermgmt-sendsmsinvite.md - https://developer.delinea.com/reference/post_usermgmt-setcloudlock.md - https://developer.delinea.com/reference/post_usermgmt-setphonepin.md - https://developer.delinea.com/reference/post_usermgmt-setsecurityquestion.md - https://developer.delinea.com/reference/post_usermgmt-uncacheuserpreferences.md - https://developer.delinea.com/reference/post_usermgmt-updatesecurityquestions.md - https://developer.delinea.com/reference/post_usermgmt-updateuserpreferences.md - https://developer.delinea.com/reference/post_vault-addvault.md - https://developer.delinea.com/reference/post_vault-deletevault.md - https://developer.delinea.com/reference/post_vault-getallvaults.md - https://developer.delinea.com/reference/post_vault-getallvaultsites.md - https://developer.delinea.com/reference/post_vault-getallvaulttemplates.md - https://developer.delinea.com/reference/post_vault-gethistory.md - https://developer.delinea.com/reference/post_vault-getjobhistory.md - https://developer.delinea.com/reference/post_vault-getvault.md - https://developer.delinea.com/reference/post_vault-getvaultsite.md - https://developer.delinea.com/reference/post_vault-setvaultcollectionpermissions.md - https://developer.delinea.com/reference/post_vault-setvaultpermissions.md - https://developer.delinea.com/reference/post_vault-syncvault.md - https://developer.delinea.com/reference/post_vault-updatevault.md - https://developer.delinea.com/reference/post_vault-verifyvault.md - https://developer.delinea.com/reference/post_vfs-getfile.md - https://developer.delinea.com/reference/post_vfs-getfilelower.md - https://developer.delinea.com/reference/post_zoneroleworkflow-createassignment.md - https://developer.delinea.com/reference/post_zoneroleworkflow-deleteexpiredassignments.md - https://developer.delinea.com/reference/post_zoneroleworkflow-getallroles.md - https://developer.delinea.com/reference/post_zoneroleworkflow-getapprovers.md - https://developer.delinea.com/reference/post_zoneroleworkflow-getdomainconfiguration.md - https://developer.delinea.com/reference/post_zoneroleworkflow-getroles.md - https://developer.delinea.com/reference/post_zoneroleworkflow-refreshresourcezonejoined.md - https://developer.delinea.com/reference/post_zoneroleworkflow-validaterolerequest.md - https://developer.delinea.com/reference/post_zso-authenticatesession.md - https://developer.delinea.com/reference/post_zso-certlogin.md - https://developer.delinea.com/reference/post_zso-clearmacsafarizsocookie.md - https://developer.delinea.com/reference/post_zso-ismacsafarizsocookieset.md - https://developer.delinea.com/reference/post_zso-issessionauthenticated.md - https://developer.delinea.com/reference/post_zso-setmacsafarizsocookie.md merge: pages: 775 deduped: 70 conflicts_kept_first: 0