Cisco ISE v0.1.11 published on Monday, Dec 2, 2024 by Pulumi
ise.deviceadmin.getAuthorizationExceptionRule
Explore with Pulumi AI
This data source can read the Device Admin Authorization Exception Rule.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";
const example = ise.deviceadmin.getAuthorizationExceptionRule({
id: "76d24097-41c4-4558-a4d0-a8c07ac08470",
policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
});
import pulumi
import pulumi_ise as ise
example = ise.deviceadmin.get_authorization_exception_rule(id="76d24097-41c4-4558-a4d0-a8c07ac08470",
policy_set_id="d82952cb-b901-4b09-b363-5ebf39bdbaf9")
package main
import (
"github.com/pulumi/pulumi-ise/sdk/go/ise/deviceadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := deviceadmin.LookupAuthorizationExceptionRule(ctx, &deviceadmin.LookupAuthorizationExceptionRuleArgs{
Id: pulumi.StringRef("76d24097-41c4-4558-a4d0-a8c07ac08470"),
PolicySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;
return await Deployment.RunAsync(() =>
{
var example = Ise.DeviceAdmin.GetAuthorizationExceptionRule.Invoke(new()
{
Id = "76d24097-41c4-4558-a4d0-a8c07ac08470",
PolicySetId = "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.deviceadmin.DeviceadminFunctions;
import com.pulumi.ise.deviceadmin.inputs.GetAuthorizationExceptionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var example = DeviceadminFunctions.getAuthorizationExceptionRule(GetAuthorizationExceptionRuleArgs.builder()
.id("76d24097-41c4-4558-a4d0-a8c07ac08470")
.policySetId("d82952cb-b901-4b09-b363-5ebf39bdbaf9")
.build());
}
}
variables:
example:
fn::invoke:
Function: ise:deviceadmin:getAuthorizationExceptionRule
Arguments:
id: 76d24097-41c4-4558-a4d0-a8c07ac08470
policySetId: d82952cb-b901-4b09-b363-5ebf39bdbaf9
Using getAuthorizationExceptionRule
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAuthorizationExceptionRule(args: GetAuthorizationExceptionRuleArgs, opts?: InvokeOptions): Promise<GetAuthorizationExceptionRuleResult>
function getAuthorizationExceptionRuleOutput(args: GetAuthorizationExceptionRuleOutputArgs, opts?: InvokeOptions): Output<GetAuthorizationExceptionRuleResult>
def get_authorization_exception_rule(id: Optional[str] = None,
name: Optional[str] = None,
policy_set_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetAuthorizationExceptionRuleResult
def get_authorization_exception_rule_output(id: Optional[pulumi.Input[str]] = None,
name: Optional[pulumi.Input[str]] = None,
policy_set_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetAuthorizationExceptionRuleResult]
func LookupAuthorizationExceptionRule(ctx *Context, args *LookupAuthorizationExceptionRuleArgs, opts ...InvokeOption) (*LookupAuthorizationExceptionRuleResult, error)
func LookupAuthorizationExceptionRuleOutput(ctx *Context, args *LookupAuthorizationExceptionRuleOutputArgs, opts ...InvokeOption) LookupAuthorizationExceptionRuleResultOutput
> Note: This function is named LookupAuthorizationExceptionRule
in the Go SDK.
public static class GetAuthorizationExceptionRule
{
public static Task<GetAuthorizationExceptionRuleResult> InvokeAsync(GetAuthorizationExceptionRuleArgs args, InvokeOptions? opts = null)
public static Output<GetAuthorizationExceptionRuleResult> Invoke(GetAuthorizationExceptionRuleInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetAuthorizationExceptionRuleResult> getAuthorizationExceptionRule(GetAuthorizationExceptionRuleArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: ise:deviceadmin/getAuthorizationExceptionRule:getAuthorizationExceptionRule
arguments:
# arguments dictionary
The following arguments are supported:
- Policy
Set stringId - Policy set ID
- Id string
- The id of the object
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- Policy
Set stringId - Policy set ID
- Id string
- The id of the object
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy
Set StringId - Policy set ID
- id String
- The id of the object
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy
Set stringId - Policy set ID
- id string
- The id of the object
- name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy_
set_ strid - Policy set ID
- id str
- The id of the object
- name str
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy
Set StringId - Policy set ID
- id String
- The id of the object
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
getAuthorizationExceptionRule Result
The following output properties are available:
- Childrens
List<Get
Authorization Exception Rule Children> - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - Command
Sets List<string> - Command sets enforce the specified list of commands that can be executed by a device administrator
- Condition
Attribute stringName - Dictionary attribute name
- Condition
Attribute stringValue - Attribute value for condition. Value type is specified in dictionary object.
- Condition
Dictionary stringName - Dictionary name
- Condition
Dictionary stringValue - Dictionary value
- Condition
Id string - UUID for condition
- Condition
Is boolNegate - Indicates whereas this condition is in negate mode
- Condition
Operator string - Equality operator
- Condition
Type string - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- Default bool
- Indicates if this rule is the default one
- Id string
- The id of the object
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- Policy
Set stringId - Policy set ID
- Profile string
- Device admin profiles control the initial login session of the device administrator
- Rank int
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- State string
- The state that the rule is in. A disabled rule cannot be matched.
- Childrens
[]Get
Authorization Exception Rule Children - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - Command
Sets []string - Command sets enforce the specified list of commands that can be executed by a device administrator
- Condition
Attribute stringName - Dictionary attribute name
- Condition
Attribute stringValue - Attribute value for condition. Value type is specified in dictionary object.
- Condition
Dictionary stringName - Dictionary name
- Condition
Dictionary stringValue - Dictionary value
- Condition
Id string - UUID for condition
- Condition
Is boolNegate - Indicates whereas this condition is in negate mode
- Condition
Operator string - Equality operator
- Condition
Type string - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- Default bool
- Indicates if this rule is the default one
- Id string
- The id of the object
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- Policy
Set stringId - Policy set ID
- Profile string
- Device admin profiles control the initial login session of the device administrator
- Rank int
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- State string
- The state that the rule is in. A disabled rule cannot be matched.
- childrens
List<Get
Authorization Exception Rule Children> - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - command
Sets List<String> - Command sets enforce the specified list of commands that can be executed by a device administrator
- condition
Attribute StringName - Dictionary attribute name
- condition
Attribute StringValue - Attribute value for condition. Value type is specified in dictionary object.
- condition
Dictionary StringName - Dictionary name
- condition
Dictionary StringValue - Dictionary value
- condition
Id String - UUID for condition
- condition
Is BooleanNegate - Indicates whereas this condition is in negate mode
- condition
Operator String - Equality operator
- condition
Type String - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default_ Boolean
- Indicates if this rule is the default one
- id String
- The id of the object
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy
Set StringId - Policy set ID
- profile String
- Device admin profiles control the initial login session of the device administrator
- rank Integer
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state String
- The state that the rule is in. A disabled rule cannot be matched.
- childrens
Get
Authorization Exception Rule Children[] - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - command
Sets string[] - Command sets enforce the specified list of commands that can be executed by a device administrator
- condition
Attribute stringName - Dictionary attribute name
- condition
Attribute stringValue - Attribute value for condition. Value type is specified in dictionary object.
- condition
Dictionary stringName - Dictionary name
- condition
Dictionary stringValue - Dictionary value
- condition
Id string - UUID for condition
- condition
Is booleanNegate - Indicates whereas this condition is in negate mode
- condition
Operator string - Equality operator
- condition
Type string - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default boolean
- Indicates if this rule is the default one
- id string
- The id of the object
- name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy
Set stringId - Policy set ID
- profile string
- Device admin profiles control the initial login session of the device administrator
- rank number
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state string
- The state that the rule is in. A disabled rule cannot be matched.
- childrens
Sequence[Get
Authorization Exception Rule Children] - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - command_
sets Sequence[str] - Command sets enforce the specified list of commands that can be executed by a device administrator
- condition_
attribute_ strname - Dictionary attribute name
- condition_
attribute_ strvalue - Attribute value for condition. Value type is specified in dictionary object.
- condition_
dictionary_ strname - Dictionary name
- condition_
dictionary_ strvalue - Dictionary value
- condition_
id str - UUID for condition
- condition_
is_ boolnegate - Indicates whereas this condition is in negate mode
- condition_
operator str - Equality operator
- condition_
type str - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default bool
- Indicates if this rule is the default one
- id str
- The id of the object
- name str
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy_
set_ strid - Policy set ID
- profile str
- Device admin profiles control the initial login session of the device administrator
- rank int
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state str
- The state that the rule is in. A disabled rule cannot be matched.
- childrens List<Property Map>
- List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - command
Sets List<String> - Command sets enforce the specified list of commands that can be executed by a device administrator
- condition
Attribute StringName - Dictionary attribute name
- condition
Attribute StringValue - Attribute value for condition. Value type is specified in dictionary object.
- condition
Dictionary StringName - Dictionary name
- condition
Dictionary StringValue - Dictionary value
- condition
Id String - UUID for condition
- condition
Is BooleanNegate - Indicates whereas this condition is in negate mode
- condition
Operator String - Equality operator
- condition
Type String - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default Boolean
- Indicates if this rule is the default one
- id String
- The id of the object
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy
Set StringId - Policy set ID
- profile String
- Device admin profiles control the initial login session of the device administrator
- rank Number
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state String
- The state that the rule is in. A disabled rule cannot be matched.
Supporting Types
GetAuthorizationExceptionRuleChildren
- Attribute
Name string - Dictionary attribute name
- Attribute
Value string - Attribute value for condition. Value type is specified in dictionary object.
- Childrens
List<Get
Authorization Exception Rule Children Children> - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - Condition
Type string - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- Dictionary
Name string - Dictionary name
- Dictionary
Value string - Dictionary value
- Id string
- UUID for condition
- Is
Negate bool - Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- Attribute
Name string - Dictionary attribute name
- Attribute
Value string - Attribute value for condition. Value type is specified in dictionary object.
- Childrens
[]Get
Authorization Exception Rule Children Children - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - Condition
Type string - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- Dictionary
Name string - Dictionary name
- Dictionary
Value string - Dictionary value
- Id string
- UUID for condition
- Is
Negate bool - Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- attribute
Name String - Dictionary attribute name
- attribute
Value String - Attribute value for condition. Value type is specified in dictionary object.
- childrens
List<Get
Authorization Exception Rule Children Children> - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - condition
Type String - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionary
Name String - Dictionary name
- dictionary
Value String - Dictionary value
- id String
- UUID for condition
- is
Negate Boolean - Indicates whereas this condition is in negate mode
- operator String
- Equality operator
- attribute
Name string - Dictionary attribute name
- attribute
Value string - Attribute value for condition. Value type is specified in dictionary object.
- childrens
Get
Authorization Exception Rule Children Children[] - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - condition
Type string - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionary
Name string - Dictionary name
- dictionary
Value string - Dictionary value
- id string
- UUID for condition
- is
Negate boolean - Indicates whereas this condition is in negate mode
- operator string
- Equality operator
- attribute_
name str - Dictionary attribute name
- attribute_
value str - Attribute value for condition. Value type is specified in dictionary object.
- childrens
Sequence[Get
Authorization Exception Rule Children Children] - List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - condition_
type str - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionary_
name str - Dictionary name
- dictionary_
value str - Dictionary value
- id str
- UUID for condition
- is_
negate bool - Indicates whereas this condition is in negate mode
- operator str
- Equality operator
- attribute
Name String - Dictionary attribute name
- attribute
Value String - Attribute value for condition. Value type is specified in dictionary object.
- childrens List<Property Map>
- List of child conditions.
condition_type
must be one ofConditionAndBlock
orConditionOrBlock
. - condition
Type String - Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionary
Name String - Dictionary name
- dictionary
Value String - Dictionary value
- id String
- UUID for condition
- is
Negate Boolean - Indicates whereas this condition is in negate mode
- operator String
- Equality operator
GetAuthorizationExceptionRuleChildrenChildren
- Attribute
Name string - Dictionary attribute name
- Attribute
Value string - Attribute value for condition. Value type is specified in dictionary object.
- Condition
Type string - Condition type.
- Dictionary
Name string - Dictionary name
- Dictionary
Value string - Dictionary value
- Id string
- UUID for condition
- Is
Negate bool - Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- Attribute
Name string - Dictionary attribute name
- Attribute
Value string - Attribute value for condition. Value type is specified in dictionary object.
- Condition
Type string - Condition type.
- Dictionary
Name string - Dictionary name
- Dictionary
Value string - Dictionary value
- Id string
- UUID for condition
- Is
Negate bool - Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- attribute
Name String - Dictionary attribute name
- attribute
Value String - Attribute value for condition. Value type is specified in dictionary object.
- condition
Type String - Condition type.
- dictionary
Name String - Dictionary name
- dictionary
Value String - Dictionary value
- id String
- UUID for condition
- is
Negate Boolean - Indicates whereas this condition is in negate mode
- operator String
- Equality operator
- attribute
Name string - Dictionary attribute name
- attribute
Value string - Attribute value for condition. Value type is specified in dictionary object.
- condition
Type string - Condition type.
- dictionary
Name string - Dictionary name
- dictionary
Value string - Dictionary value
- id string
- UUID for condition
- is
Negate boolean - Indicates whereas this condition is in negate mode
- operator string
- Equality operator
- attribute_
name str - Dictionary attribute name
- attribute_
value str - Attribute value for condition. Value type is specified in dictionary object.
- condition_
type str - Condition type.
- dictionary_
name str - Dictionary name
- dictionary_
value str - Dictionary value
- id str
- UUID for condition
- is_
negate bool - Indicates whereas this condition is in negate mode
- operator str
- Equality operator
- attribute
Name String - Dictionary attribute name
- attribute
Value String - Attribute value for condition. Value type is specified in dictionary object.
- condition
Type String - Condition type.
- dictionary
Name String - Dictionary name
- dictionary
Value String - Dictionary value
- id String
- UUID for condition
- is
Negate Boolean - Indicates whereas this condition is in negate mode
- operator String
- Equality operator
Package Details
- Repository
- ise pulumi/pulumi-ise
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
ise
Terraform Provider.