topic Re: creating user groups using python script in Network Access Control

creating user groups using python script

Richie20 — Thu, 03 Jun 2021 09:47:04 GMT

Hi everyone ,

I am creating internal user groups through python script to ISE . I am getting this error while running the script

"ERSResponse": {

"operation": "POST-create-internaluser",

"messages": [

{

"title": "Resource Initialization Failed: Invalid JSON: Unrecognized field \"User Groups\" (Class identity.InternalUser), not marked as ignorable\n ",

"type": "ERROR",

"code": "Application resource validation exception"

}

"link": {

"rel": "related",

"href": "https://192.169.39.19:9060/ers/config/internaluser",

"type": "application/xml"

}

this is my code :

import requests

import json

url = "https://192.169.39.19:9060/ers/config/internaluser"

payload = json.dumps({

"InternalUser": {

"name": "tet b",

"password": "C1sco4",

"changePassword": False,

"User Groups": "Employee"

}

})

headers = {

'Content-Type': 'application/json',

'Accept': 'application/json',

'Authorization': 'Basic ZXJzYWRtaW46b0ZsUFJybmU0NTE=',

'Cookie': 'APPSESSIONID=CC0213F7C85B124B22A7E88D5DDD7B8F; Cookie_1=value; JSESSIONIDSSO=A613BB7DCA4AD94866C0574D096B785D'

}

response = requests.request("POST", url, headers=headers, data=payload)

print(response.text)

Any suggestions are welcomed

Re: creating user groups using python script

Mike.Cifelli — Thu, 03 Jun 2021 11:50:42 GMT

"title": "Resource Initialization Failed: Invalid JSON: Unrecognized field \"User Groups\" (Class identity.InternalUser), not marked as ignorable\n "

-Your snippet shows that you are attempting to create (identified via POST) an internal user (identified via url). You are getting that error because the following is not valid syntax when attempting to consume the internal user API: "User Groups": "Employee"

This JSON request content example was extracted from the ERS Online SDK in regard to the internal user API:

JSON
{
  "InternalUser": {
    "name": "name",
    "description": "description",
    "enabled": true,
    "email": "email@domain.com",
    "password": "password",
    "firstName": "firstName",
    "lastName": "lastName",
    "changePassword": true,
    "identityGroups": "identityGroups",
    "expiryDateEnabled": false,
    "expiryDate": "2016-12-11",
    "enablePassword": "enablePassword",
    "customAttributes": {
      "key1": "value1",
      "key2": "value3"
    },
    "passwordIDStore": "Internal Users"
  }
}

If your end goal is to an Identity Group then the URL for consumption would look like this: https://x.x.x.x:9060/ers/config/identitygroup

JSON context example from SDK:

JSON
{
  "IdentityGroup": {
    "name": "name",
    "description": "description",
    "parent": "parent"
  }
}

I strongly suggest taking a look at the following resources:

ERS SDK: https://<ise_pan_ip>:9060/ers/sdk#

ISE ERS API Examples - Cisco Community

HTH!