Skip to main content
A newer release of this product is available.

Update a multi-admin-verify rule

Contributors

PATCH /security/multi-admin-verify/rules/{owner.uuid}/{operation}

Introduced In: 9.11

Updates a multi-admin-verify rule.

Parameters

Name Type In Required Description

owner.uuid

string

path

True

operation

string

path

True

Request Body

Name Type Description

approval_expiry

string

Time for requests to be approved, in ISO-8601 duration format. If not set, the global setting is used.

approval_groups

array[approval_groups]

List of approval groups that are allowed to approve requests for rules that don't have approval groups.

auto_request_create

boolean

When true, ONTAP automatically creates a request for any failed operation where there is no matching pending request.

  • Default value: 1

  • Introduced in: 9.11

  • x-nullable: true

create_time

string

execution_expiry

string

Time for requests to be executed once approved, in ISO-8601 duration format. If not set, the global setting is used.

operation

string

Command that requires one or more approvals.

owner

owner

The owner of the rule. The only valid owner is currently the cluster.

query

string

When specified, this property limits the entries that require approvals to those that match the specified query.

required_approvers

integer

The number of required approvers, excluding the user that made the request.

system_defined

boolean

Specifies whether the rule is system-defined or user-defined.

Example request
{
  "approval_expiry": "string",
  "approval_groups": [
    {
      "name": "string"
    }
  ],
  "create_time": "string",
  "execution_expiry": "string",
  "operation": "string",
  "owner": {
    "_links": {
      "self": {
        "href": "/api/resourcelink"
      }
    },
    "name": "svm1",
    "uuid": "02c9e252-41be-11e9-81d5-00a0986138f7"
  },
  "query": "string"
}

Response

Status: 200, Ok

Error

Status: Default

ONTAP Error Response Codes

Error Code Description

262310

System rules cannot be deleted or have their query modified.

262311

Value must be greater than zero.

262312

Number of required approvers must be less than the total number of unique approvers in the approval-groups.

262313

Number of unique approvers in the approval-groups must be greater than the number of required approvers.

262316

Value must be in the range one second to two weeks.

Name Type Description

error

error

Example error
{
  "error": {
    "arguments": [
      {
        "code": "string",
        "message": "string"
      }
    ],
    "code": "4",
    "message": "entry doesn't exist",
    "target": "uuid"
  }
}

Definitions

See Definitions

approval_groups

Name Type Description

name

string

Name of the approval group.

href

Name Type Description

href

string

Name Type Description

self

href

owner

The owner of the rule. The only valid owner is currently the cluster.

Name Type Description

_links

_links

name

string

The name of the SVM.

uuid

string

The unique identifier of the SVM.

multi_admin_verify_rule

Name Type Description

approval_expiry

string

Time for requests to be approved, in ISO-8601 duration format. If not set, the global setting is used.

approval_groups

array[approval_groups]

List of approval groups that are allowed to approve requests for rules that don't have approval groups.

auto_request_create

boolean

When true, ONTAP automatically creates a request for any failed operation where there is no matching pending request.

  • Default value: 1

  • Introduced in: 9.11

  • x-nullable: true

create_time

string

execution_expiry

string

Time for requests to be executed once approved, in ISO-8601 duration format. If not set, the global setting is used.

operation

string

Command that requires one or more approvals.

owner

owner

The owner of the rule. The only valid owner is currently the cluster.

query

string

When specified, this property limits the entries that require approvals to those that match the specified query.

required_approvers

integer

The number of required approvers, excluding the user that made the request.

system_defined

boolean

Specifies whether the rule is system-defined or user-defined.

error_arguments

Name Type Description

code

string

Argument code

message

string

Message argument

error

Name Type Description

arguments

array[error_arguments]

Message arguments

code

string

Error code

message

string

Error message

target

string

The target parameter that caused the error.