Security accounts owner.uuid name endpoint overview
- PDF of this doc site
Collection of separate PDF docs
Creating your file...
Overview
This API displays and manages the configuration of scoped user accounts.
Newly created user accounts might need to be updated for many reasons. For example, a user account might need to use a different application or its role might need to be modified. According to a policy, the password or authentication source of a user account might need to be changed, or a user account might need to be locked or deleted from the system. This API allows you to make these changes to user accounts.
Specify the owner UUID and the user account name in the URI path. The owner UUID corresponds to the UUID of the SVM for which the user account has been created and can be obtained from the response body of the GET request performed on one of the following APIs:
/api/security/accounts for all user accounts
/api/security/accounts/?scope=cluster for cluster-scoped user accounts
/api/security/accounts/?scope=svm for SVM-scoped accounts
/api/security/accounts/?owner.name=
Examples
Retrieving the user account details
# The API: GET "/api/security/accounts/{owner.uuid}/{name}" # The call: curl -X GET "https://<mgmt-ip>/api/security/accounts/aef7c38-4bd3-11e9-b238-0050568e2e25/svm_user1" # The response: { "owner": { "uuid": "aaef7c38-4bd3-11e9-b238-0050568e2e25", "name": "svm1", "_links": { "self": { "href": "/api/svm/svms/aaef7c38-4bd3-11e9-b238-0050568e2e25" } } }, "name": "svm_user1", "applications": [ { "application": "ssh", "authentication_methods": [ "password" ], "second_authentication_method": "none" } ], "role": { "name": "vsadmin", "_links": { "self": { "href": "/api/svms/aaef7c38-4bd3-11e9-b238-0050568e2e25/admin/roles/vsadmin" } } }, "locked": false, "password_hash_algorithm": "sha512", "scope": "svm", "_links": { "self": { "href": "/api/security/accounts/aaef7c38-4bd3-11e9-b238-0050568e2e25/svm_user1" } } }
Updating the applications and role in a user account
Specify the desired configuration in the form of tuples (of applications and authentication methods) and the role. All other previously configured applications that are not specified in the "applications" parameter of the PATCH request will be de-provisioned for the user account.
# The API: PATCH "/api/security/accounts/{owner.uuid}/{name}" # The call to update the applications and role: curl -X PATCH "https://<mgmt-ip>/api/security/accounts/aaef7c38-4bd3-11e9-b238-0050568e2e25/svm_user1" -d '{"applications":[{"application":"http","authentication_methods":["domain"]},{"application":"ontapi","authentication_methods":["password"]}],"role": {"name": "vsadmin-backup"}}' # The call to update only the role: curl -X PATCH "https://<mgmt-ip>/api/security/accounts/aaef7c38-4bd3-11e9-b238-0050568e2e25/svm_user1" -d '{"role":"vsadmin-p