openapi: 3.1.0 info: title: InsightAppSec Accounts Credential API description: '

Welcome to the reference documentation for the public APIs available for InsightAppSec.

Here are a few resources to help you learn how to start using our APIs:

After you''ve got the basics down, you can use this API guide to find examples of requests and responses.

Permissions

This API uses the platform role of a user''s API key to inherit a set of permissions.

Notes:

  • Platform Admins do not require explicit access to an App in order to see it, or anything associated with it
  • Organization keys will inherit Product Admin permissions.
  • RolePermissions
    Product Admin
  • Manage Apps
  • Read Attack Templates
  • Manage Targets
  • Manage Scan Configs
  • Manage Scans
  • Manage Vulnerabilities
  • Administer Vulnerability Comments
  • Manage Engines
  • Manage Engine Groups
  • Manage Schedules
  • Manage Blackouts
  • Manage Global Blackouts
  • Manage Files
  • Manage Tags
  • Manage PDF Report
  • Read Write
  • Manage Apps
  • Read Attack Templates
  • Read Targets
  • Manage Scan Configs
  • Manage Scans
  • Manage Vulnerabilities
  • Manage Vulnerability Comments
  • Read Engines
  • Read Engine Groups
  • Manage Schedules
  • Manage Blackouts
  • Manage Files
  • Manage Tags
  • Manage PDF Report
  • Read Only
  • Read Apps
  • Read Attack Templates
  • Read Targets
  • Read Scan Configs
  • Read Scans
  • Read Vulnerabilities
  • Read Vulnerability Comments
  • Read Engines
  • Read Engine Groups
  • Read Schedules
  • Read Blackouts
  • Read Files
  • Read Tags
  • Read PDF Report
  • Pagination Parameters

    The following query parameters can be used to control the order, offset and size of the returned data

    ParameterDescriptionExample
    index

    The 0-based index of the page of data desired (default: 0)

    ?index=2
    size

    The size of the page of data desired (min: 1, max: 1000, default: 50)

    ?size=10
    sort

    The sort terms and (optional) directions for the desired ordering of data (default: specific to each resource)

    ?sort=scan.submit_time,DESC,scan.status
    page-token

    The page token, used as an alternative to index (default: Not provided)

    ?page-token=NDM0NTk0NTIyOjo6X1M6OjpiYW5hbmFz

    Paging using a page token

    When intending to page beyond the 10,000th result, or as an alternative to using the index query parameter, the page-token option may be used instead. After retrieving the first page, the page_token will be present in the metadata section of the response.
    For example, with size=99, index=0 to index=99 may be used. To load the next page, use the page_token value used in the response e.g. ?page-token=NDM0NTk0NTIyO

    Creating resources

    As is generally the accepted practice with REST-ful APIs, creating a resource can be performed by sending an appropriately formatted POST request. Any ID provided for a new resource in a POST request body will simply be ignored (and a new one generated internally and returned as part of the resource in subsequent GET requests), and POST requests to URLs following a format similar to .../resource/ are unsupported and should respond with 415 Method Not Allowed. All requests which successfully create a resource and respond with 201 Created will contain a Location header the value of which is an absolute URI for the resource (the ID of which can be determined as the last section of the path in the given URI). For example:
    Location: https://us.api.insight.rapid7.com/ias/v1/scans/12345678-1234-5678-90AB-1234567890AB

    Date, Time and Timezone Support

    The value of date and date-time type properties are fixed to the common ISO-8601 format. Unless otherwise specified, all date or date-time data in response bodies are expressed in UTC, and it is also expected that data provided in request bodies are also expressed in UTC.

    Schedules and Blackouts

    The first_start and first_end properties of both Blackouts and Schedules, and the last_start property of Blackouts may be specified with a timezone. If the timezone is not specified, it is assumed to be UTC. For example:
    2019-08-12T14:00:00.000000Z[Asia/Tokyo]
    It is also possible to specify the timezone as an offset of either GMT or UTC. For example:
    2019-09-04T15:00:00.000000Z[GMT+03:00]

    ValueFormatNotes
    DateYYYY-MM-DDDefaults to 12 am UTC (if used for a date & time)
    Date & time onlyYYYY-MM-DD''T''hh:mm:ss[.nnn]Defaults to UTC
    Date & time in UTCYYYY-MM-DD''T''hh:mm:ss[.nnn]Z
    Date & time with specific timezoneYYYY-MM-DD''T''hh:mm:ss[.nnn]Z[TimeZoneId]

    Searching and Filtering

    One characteristic of a powerful API is support for complex search and filtering of resources using a flexible query language. It is entirely possible to provide basic search and filtering functionality on standard GET resource collection operations using HTTP query parameters, but this becomes restrictive when attempting to encode boolean logic. Other solutions are also possible but come with equally restrictive compromises. The most effective way to facilitate this complex search and filtering is to provide it as a top-level API with a robust Domain-Specific Language (DSL).

    For simple data retrieval that supports paging and sorting functionality, use the traditional resource-specific GET collection operations; for more complex data retrieval that supports a user-crafted query DSL, use the global Search operation.

    Errors

    Any response from the API with an HTTP Status Code in the 4xx or 5xx range indicates an error. If in the 4xx range it indicates a client-side error, where in the 5xx range it indicates a server-side error. All responses indicating an error should be JSON formatted, and contain both a "status" and a "message" property indicating the cause of the error, a "r7-correlation-id" header should also always be returned in the format of a UUID, which uniquely identifies the HTTP exchange that took place and caused the error (this header is present on every request). On some occasions, an "error_code" property will be included in the response body, which can provide the support team further context into the cause of the error in cases where the message is not explicitly clear.

    When contacting support about error responses received from the API, please attempt to include, at minimum:

    Validation Errors

    Specifically, when a response with an HTTP Status Code of 422 is returned, this indicates a validation error, almost always received in a response from a non-idempotent request (normally PUT, POST or DELETE). In this case, there should be an additional "errors" property included in the JSON response body that should describe the cause of the validation exception; this will almost always require a modification to the request body to resolve.

    ' version: v1 servers: - url: https://[region].api.insight.rapid7.com/ias/v1 tags: - name: Credential description: Resources and operations for managing shared credentials. paths: /api/3/shared_credentials: get: tags: - Credential summary: Shared Credentials description: Retrieves all defined shared credential resources. operationId: getSharedCredentials schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: [] responses: '200': description: OK schema: $ref: '#/definitions/Resources«SharedCredential»' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] post: tags: - Credential summary: Shared Credentials description: Creates a new shared credential. operationId: createSharedCredential schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - in: body name: credential description: The specification of a shared credential. required: false schema: $ref: '#/definitions/SharedCredential' responses: '200': description: OK schema: $ref: '#/definitions/CreatedReference«CredentialID,Link»' examples: {} headers: {} '400': description: Bad Request schema: $ref: '#/definitions/BadRequestError' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] x-code-samples: - lang: A CIFS credential source: "{\n \"name\": \"CIFS Administrator\",\n \"description\": \"This is a cifs credential for an administrator\",\n \"account\": {\n \"service\": \"cifs\",\n \"username\": \"joe_smith@acme.com\",\n \"password\": \"******\",\n \"domain\": \"acme\"\n },\n \"siteAssignment\": \"all-sites\"\n}" - lang: A Microsoft SQL Server credential source: "{\n \"name\": \"MS SQL Administrator\",\n \"description\": \"This is an administrator credential for a Microsoft SQL Server database. Configured to use windows authentication. Credential is not assigned to any sites by default.\",\n \"account\": {\n \"service\": \"ms-sql\",\n \"database\": \"usersdb\",\n \"useWindowsAuthentication\": true,\n \"domain\": \"acme\",\n \"username\": \"admin\",\n \"password\": \"******\"\n },\n \"siteAssignment\": \"specific-sites\",\n \"hostRestriction\": \"machine1.acme.com\"\n}\n" - lang: An Oracle database credential source: "{\n \"name\": \"Oracle DB Administrator\",\n \"description\": \"This is an administrator credential for an Oracle database. Credential is assigned to a single site.\",\n \"account\": {\n \"service\": \"oracle\",\n \"sid\": \"usersdb\",\n \"username\": \"admin\",\n \"password\": \"******\",\n \"enumerateSids\": true,\n \"oracleListenerPassword\": \"******\"\n },\n \"siteAssignment\": \"specific-sites\",\n \"sites\": [1],\n \"hostRestriction\": \"192.168.1.1\"\n}\n" - lang: An SNMPv3 credential source: "{\n \"name\": \"SNMP v3 Administator\",\n \"account\": {\n \"service\": \"snmpv3\",\n \"authenticationType\": \"md5\",\n \"username\": \"admin\",\n \"password\": \"******\",\n \"privacyType\": \"aes-256\",\n \"privacyPassword\": \"******\"\n },\n \"siteAssignment\": \"all-sites\"\n}\n" - lang: An SSH credential source: "{\n \"name\": \"SSH Administrator\",\n \"description\": \"This is an SSH credential for an administrator. Credential is assigned to all sites.\",\n \"account\": {\n \"service\": \"ssh\",\n \"username\": \"admin\",\n \"password\": \"******\"\n },\n \"siteAssignment\": \"all-sites\"\n}\n" - lang: An SSH credential using sudo+su permission elevation source: "{\n \"name\": \"SSH User (permission elevation with sudo+su)\",\n \"description\": \"This is an SSH credential for an non-administrative user. Credential is configured to perform permission elevation using sudo+su for additional access.\",\n \"account\": {\n \"service\": \"ssh\",\n \"username\": \"jsmith\",\n \"password\": \"******\",\n \"permissionElevation\": \"sudosu\",\n \"permissionElevationUsername\": \"root\",\n \"permissionElevationPassword\": \"******\"\n },\n \"siteAssignment\": \"all-sites\"\n}\n" - lang: An SSH public key credential source: "{\n \"name\": \"SSH Public Key credential (permission elevation with sudo)\",\n \"description\": \"This is an SSH credential for a non-administrative user using a PEM-format private key. Credential is also configured to elevate permissions using sudo.\",\n \"account\": {\n \"service\": \"ssh-key\",\n \"username\": \"admin\",\n \"privateKeyPassword\": \"*******\",\n \"pemKey\": \"-----BEGIN RSA PRIVATE KEY-----\\nProc-Type: 4,ENCRYPTED\\nDEK-Info: AES-128-CBC,0D364155CB54D4B485BDB3B11B76BF59\\n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\\n-----END RSA PRIVATE KEY-----\",\n \"permissionElevation\": \"sudo\",\n \"permissionElevationUsername\": \"root\",\n \"permissionElevationPassword\": \"*******\"\n },\n \"siteAssignment\": \"all-sites\"\n}\n" delete: tags: - Credential summary: Shared Credentials description: Deletes all shared credentials. operationId: deleteAllSharedCredentials schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: [] responses: '200': description: OK schema: $ref: '#/definitions/Links' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] /api/3/shared_credentials/{id}: get: tags: - Credential summary: Shared Credential description: Retrieves the specified shared credential. operationId: getSharedCredential schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the credential. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/SharedCredential' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] put: tags: - Credential summary: Shared Credential description: Updates the specified shared credential. operationId: updateSharedCredential schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the credential. required: true type: integer format: int32 - in: body name: credential description: The specification of the shared credential to update. required: false schema: $ref: '#/definitions/SharedCredential' responses: '200': description: OK schema: $ref: '#/definitions/Links' examples: {} headers: {} '400': description: Bad Request schema: $ref: '#/definitions/BadRequestError' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] delete: tags: - Credential summary: Shared Credential description: Deletes the specified shared scan credential. operationId: deleteSharedCredential schemes: [] consumes: - application/json produces: - application/json;charset=UTF-8 parameters: - name: id in: path description: The identifier of the credential. required: true type: integer format: int32 responses: '200': description: OK schema: $ref: '#/definitions/Links' examples: {} headers: {} '401': description: Unauthorized schema: $ref: '#/definitions/UnauthorizedError' examples: {} headers: {} '404': description: Not Found schema: $ref: '#/definitions/NotFoundError' examples: {} headers: {} '500': description: Internal Server Error schema: $ref: '#/definitions/InternalServerError' examples: {} headers: {} '503': description: Service Unavailable schema: $ref: '#/definitions/ServiceUnavailableError' examples: {} headers: {} security: [] definitions: BadRequestError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '400' description: The HTTP status code for the error (same as in the HTTP response). enum: - '400' description: '' SharedCredentialAccount: type: object properties: authenticationType: type: string communityName: type: string database: type: string domain: type: string enumerateSids: type: boolean notesIDPassword: type: string ntlmHash: type: string oracleListenerPassword: type: string password: type: string pemKey: type: string permissionElevation: type: string permissionElevationPassword: type: string permissionElevationUsername: type: string privacyPassword: type: string privacyType: type: string privateKeyPassword: type: string realm: type: string service: type: string sid: type: string useWindowsAuthentication: type: boolean username: type: string description: '' UnauthorizedError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '401' description: The HTTP status code for the error (same as in the HTTP response). enum: - '401' description: '' SharedCredential: type: object required: - account - name - siteAssignment properties: account: example: '' description: "Specify the type of service to authenticate as well as all of the information required by that service.
    \n
    \nservice string \n
    \n\"as400\" \n\"cifs\" \n\"cifshash\" \n\"cvs\" \n\"db2\" \n\"ftp\" \n\"http\" \n\"ms-sql\" \n\"mysql\" \n\"notes\" \n\"oracle\" \n\"pop\" \n\"postgresql\" \n\"remote-exec\" \n\"snmp\" \n\"snmpv3\" \n\"ssh\" \n\"ssh-key\" \n\"sybase\" \n\"telnet\" \n
    \n
    The type of service to authenticate with.
    \n
    \n
    \n\nThe following are the names of the valid values for service: \n| Value | Service | \n| ------------- | ----------------------------------------------- | \n| `as400` | IBM AS/400 | \n| `cifs` | Microsoft Windows/Samba (SMB/CIFS) | \n| `cifshash` | Microsoft Windows/Samba LM/NTLM Hash (SMB/CIFS) | \n| `cvs` | Concurrent Versioning System (CVS) | \n| `db2` | DB2 | \n| `ftp` | File Transfer Protocol (FTP) | \n| `http` | Web Site HTTP Authentication | \n| `ms-sql` | Microsoft SQL Server | \n| `mysql` | MySQL Server | \n| `notes` | Lotus Notes/Domino | \n| `oracle` | Oracle | \n| `pop` | Post Office Protocol (POP) | \n| `postgresql` | PostgreSQL | \n| `remote-exec` | Remote Execution | \n| `snmp` | Simple Network Management Protocol v1/v2c | \n| `snmpv3` | Simple Network Management Protocol v3 | \n| `ssh` | Secure Shell (SSH) | \n| `ssh-key` | Secure Shell (SSH) Public Key | \n| `sybase` | Sybase SQL Server | \n| `telnet` | Telnet | \n\n

    The following is a specification of supported credential properties for each type of service. These properties are to be specified within the account object.

    \n\n`as400` supported properties:\n
    \n
    \ndomain string \n

    The address of the domain.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`cifs` supported properties:\n
    \n
    \ndomain string \n

    The address of the domain.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`cifshash` supported properties:\n
    \n
    \ndomain string \n

    The address of the domain.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \nntlmHash string Required \n

    The NTLM password hash. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`cvs` supported properties:\n
    \n
    \ndomain string \n

    The address of the domain.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`db2` supported properties:\n
    \n
    \ndatabase string \n

    The name of the database.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`ftp` supported properties:\n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`http` supported properties:\n
    \n
    \nrealm string \n

    The realm.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`ms-sql` supported properties:\n
    \n
    \ndatabase string \n

    The name of the database. If not specified, a default database name will be used during authentication.

    \n
    \n
    \nuseWindowsAuthentication boolean \n
    \n

    \nBoolean flag signaling whether to connect to the database using Windows authentication. When set to true, Windows authentication is attempted; when set to false, SQL authentication is attempted.

    \n
    \n
    \n
    \ndomain string \n

    The address of the domain. This property cannot be specified unless property useWindowsAuthentication is set to true.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`mysql` supported properties:\n
    \n
    \ndatabase string \n

    The name of the database. If not specified, a default database name will be used during authentication.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The Notes ID password. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`notes` supported properties:\n
    \n
    \nnotesIDPassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`oracle` supported properties:\n
    \n
    \nsid string \n

    The name of the database. If not specified, a default database name will be used during authentication.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \nenumerateSids boolean \n
    \n

    \nBoolean flag instructing the scan engine to attempt to enumerate SIDs from your environment. If set to true, set the Oracle Net Listener password in property oracleListenerPassword.

    \n
    \n
    \n
    \noracleListenerPassword string \n

    The Oracle Net Listener password. Used to enumerate SIDs from your environment.

    \n
    \n
    \n\n`pop` supported properties:\n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`postgresql` supported properties:\n
    \n
    \ndatabase string \n

    The name of the database.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`remote-exec` supported properties:\n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`snmp` supported properties:\n
    \n
    \ncommunityName string Required \n

    The community name that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`snmpv3` supported properties:\n
    \n
    \nauthenticationType string Required \n
    \n\"no-authentication\" \n\"md5\" \n\"sha\" \n
    \n

    The authentication protocols available to use in SNMP v3.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string \n
    \n

    \nThe password for the account that will be used for authenticating. Is required when the property authenticationType is set to valid value other than \"no-authentication\". Note: This property is not returned in responses for security.

    \n
    \n
    \n
    \nprivacyType string \n
    \n\"no-privacy\" \n\"des\" \n\"aes-128\" \n\"aes-192\" \n\"aes-192-with-3-des-key-extension\" \n\"aes-256\" \n\"aes-265-with-3-des-key-extension\" \n
    \n

    The privacy protocols available to use in SNMP v3.

    \n
    \n
    \nprivacyPassword string \n
    \n

    \nThe privacy password for the account that will be used for authenticating. Is required when the property authenticationType is set to valid value other than \"no-authentication\" and when the privacyType is set to a valid value other than code>\"no-privacy\". Note: This property is not returned in responses for security.

    \n
    \n
    \n
    \n\n`ssh` supported properties:\n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \npermissionElevation string \n
    \n\"none\" \n\"sudo\" \n\"sudosu\" \n\"su\" \n\"pbrun\" \n\"privileged-exec\" \n
    \n
    \n

    \nElevate scan engine permissions to administrative or root access, which is necessary to obtain certain data during the scan. Defaults to \"none\" if not specified.

    \n
    \n
    \n
    \npermissionElevationUsername string \n
    \n

    \nThe user name for the account with elevated permissions. This property must not be specified when the property permissionElevation is set to either \"none\" or \"pbrun\"; otherwise the property is required.

    \n
    \n
    \n
    \npassword string \n
    \n

    \nThe password for the account with elevated permissions. This property must not be specified when the property permissionElevation is set to either \"none\" or \"pbrun\"; otherwise the property is required.Note: This property is not returned in responses for security.

    \n
    \n
    \n
    \n\n`ssh-key` supported properties:\n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \nprivateKeyPassword string \n

    The password for private key. Note: This property is not returned in responses for security.

    \n
    \n
    \npemKey string Required \n

    The PEM-format private key. Note: This property is not returned in responses for security.

    \n
    \n
    \npermissionElevation string \n
    \n\"none\" \n\"sudo\" \n\"sudosu\" \n\"su\" \n\"pbrun\" \n\"privileged-exec\" \n
    \n
    \n

    \nElevate scan engine permissions to administrative or root access, which is necessary to obtain certain data during the scan. Defaults to \"none\" if not specified.

    \n
    \n
    \n
    \npermissionElevationUsername string \n
    \n

    \nThe user name for the account with elevated permissions. This property must not be specified when the property permissionElevation is set to either \"none\" or \"pbrun\"; otherwise the property is required.

    \n
    \n
    \n
    \npassword string \n
    \n

    \nThe password for the account with elevated permissions. This property must not be specified when the property permissionElevation is set to either \"none\" or \"pbrun\"; otherwise the property is required.Note: This property is not returned in responses for security.

    \n
    \n
    \n
    \n\n`sybase` supported properties:\n
    \n
    \ndatabase string \n

    The name of the database. If not specified, a default database name will be used during authentication.

    \n
    \n
    \nuseWindowsAuthentication boolean \n
    \n

    \nBoolean flag signaling whether to connect to the database using Windows authentication. When set to true, Windows authentication is attempted; when set to false, SQL authentication is attempted.

    \n
    \n
    \n
    \ndomain string \n

    The address of the domain. This property cannot be specified unless property useWindowsAuthentication is set to true.

    \n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n`telnet` supported properties:\n
    \n
    \nusername string Required \n

    The user name for the account that will be used for authenticating.

    \n
    \n
    \npassword string Required \n

    The password for the account that will be used for authenticating. Note: This property is not returned in responses for security.

    \n
    \n
    \n\n" $ref: '#/definitions/SharedCredentialAccount' description: type: string example: '' description: The description of the credential. hostRestriction: type: string example: '' description: The host name or IP address that you want to restrict the credentials to. id: type: integer format: int32 example: '' description: The identifier of the credential. name: type: string example: '' description: The name of the credential. portRestriction: type: integer format: int32 example: '' description: Further restricts the credential to attempt to authenticate on a specific port. The port can only be restricted if the property `hostRestriction` is specified. minimum: 1 maximum: 65535 siteAssignment: type: string example: '' description: "Assigns the shared scan credential either to be available to all sites or to a specific list of sites.\nThe following table describes each supported value: \n| Value | Description | \n| ---------- | ---------------- | \n| `\"all-sites\"` | The shared scan credential is assigned to all current and future sites. | \n| `\"specific-sites\"` | The shared scan credential is assigned to zero sites by default. Administrators must explicitly assign sites to the shared credential. | \nShared scan credentials assigned to a site can disabled within the site configuration, if needed." sites: type: array description: List of site identifiers. These sites are explicitly assigned access to the shared scan credential, allowing the site to use the credential for authentication during a scan. This property can only be set if the value of property `siteAssignment` is set to `"specific-sites"`. When the property `siteAssignment` is set to `"all-sites"`, this property will be `null`. items: type: integer format: int32 description: '' Links: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' description: '' ServiceUnavailableError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '503' description: The HTTP status code for the error (same as in the HTTP response). enum: - '503' description: '' NotFoundError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '404' description: The HTTP status code for the error (same as in the HTTP response). enum: - '404' description: '' Resources«SharedCredential»: type: object properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' resources: type: array description: The resources returned. items: $ref: '#/definitions/SharedCredential' description: '' CreatedReference«CredentialID,Link»: type: object properties: id: type: integer format: int32 example: 1 description: The identifier of the resource created. links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' description: '' Link: type: object properties: href: type: string example: https://hostname:3780/api/3/... description: 'A hypertext reference, which is either a URI (see RFC 3986) or URI template (see RFC 6570). ' rel: type: string example: self description: The link relation type. This value is one from the Link Relation Type Registry or is the type of resource being linked to. description: '' InternalServerError: type: object required: - status properties: links: type: array description: Hypermedia links to corresponding or related resources. items: $ref: '#/definitions/Link' message: type: string example: An error has occurred. description: The messages indicating the cause or reason for failure. status: type: string example: '500' description: The HTTP status code for the error (same as in the HTTP response). enum: - '500' description: ''