The following table lists the supported parameters for user group operations.
Parameter |
Description and Parameter Values |
---|---|
userGroupEntity/userGroupName |
Name of the user group. |
userGroupEntity/newName |
If you are changing the name of the user group, enter the new name in the userGroupEntity/newName parameter and the original name in the userGroupEntity/userGroupName parameter. |
associationsOperationType |
The operation to perform on the role and entities inside the <associations> block. The entity, role, and user group form a security association. To perform an operation on multiple security associations, add an <associations> block in the XML file for each security association:
Valid values are:
|
entity/entity_name |
Replace entity_name with the name of the entity operated on by the associationsOperationType parameter. Valid replacement values are:
|
role/roleName |
The name of the role operated on by the associationsOperationType parameter. The <associations> block must have exactly one role, for example:
|
permissionName |
Use this element to add permissions without selecting a role. If you use the permissionName parameter, you cannot use the roleName parameter. The name of the permission operated on by the associationsOperationType parameter. To work with multiple permissions, add the following elements in the XML file for each permission:
For a list of valid values, see User Security Permissions and Permitted Actions. |
categoryName |
Use this element to add all of the permissions in a category without selecting a role. If you use the categoryName parameter, you cannot use the roleName parameter. The name of the permission category operated on by the associationsOperationType parameter. To work with multiple categories, add the following elements in the XML file for each category:
Valid values are:
|
description |
A general description of the user group. |
enabled |
Option to enable/disable the user group. Valid values are True/False. |
users/userName |
Name of the user to be associated with the user group. To associate more than one user with a user group, add a <users> element for each user:
|
usersOperationType |
The operation to perform on the users in the userName parameter. Valid values are:
|
level |
The property level information that you want to display when listing user groups. When no property level is specified, all properties are returned by default. Valid values are:
|
transferAllFromOldUser |
When a user group is deleted, you must transfer the ownership of entities such as alerts, scheduled policies, and workflows from the deleted user group to another user or user group. To transfer ownership, the valid value is 1. |
newUser/userName |
The user name to transfer ownership to. When you delete a user group, you must provide either a new user name or a new user group name. |
newUserGroup/userGroupName |
The user group name to transfer ownership to. When you delete a user group, you must provide either a new user name or a new user group name. |