topic Re: API Script to Manage Meraki Cloud Authentication accounts in Network Platform API

API Script to Manage Meraki Cloud Authentication accounts

russell.sage — Mon, 29 Jan 2024 22:09:55 GMT

I have written a script to remove guest accounts that are older than 7days from the day the script is run inline with my customers policy. The script appears to work. Items in BOLD are print statements in the script. But all the users I check on the dashboard are still present.

api call:

networkId = network["id"]

userId = user["id"]

dashboard.networks.deleteNetworkMerakiAuthUser(
    networkId, userId)

From the console

{'id': 'c2FsbWFuLndhc3RpQGNlbnRyaWNhLmNvbSxHdWVzdA==', 'email': 'salman.wasti@centrica.com', 'name': 'Salman', 'createdAt': '2018-12-19T14:04:55.855830Z', 'accountType': 'Guest', 'isAdmin': False, 'authorizations': [{'ssidNumber': 1, 'authorizedZone': 'MyGuest', 'expiresAt': '2019-01-18T14:04:52.000000Z', 'authorizedByName': None, 'authorizedByEmail': None}]}
Salman has expired
2024-01-29 21:47:31 meraki: INFO > networks, deleteNetworkMerakiAuthUser - 204 No Content
2024-01-29 21:47:31 meraki: INFO > DELETE https://n645.meraki.com/api/v1/networks/N_658651445502962172/merakiAuthUsers/c2FtLnNhbGloQGNlbnRyaWNhLmNvbSxHdWVzdA%3D%3D
Salman **DELETED**

The line red is confusing me. According to the API guid for deleting a merakiauth user the response 204 is a successful operation

Re: API Script to Manage Meraki Cloud Authentication accounts

amitpalsingh — Tue, 30 Jan 2024 06:14:14 GMT

This will deauthorize user if it is still active, not delete it

The user will still remain in the history..

I don't think Meraki let's you delete users from history using API

Re: API Script to Manage Meraki Cloud Authentication accounts

aleabrahao — Tue, 30 Jan 2024 12:04:43 GMT

"If the ID supplied is for a splash guest or client VPN user, and that user is not authorized for any other networks in the organization, then also delete the user. 802.1X RADIUS users are always deleted regardless of this optional attribute."

https://developer.cisco.com/meraki/api-v1/delete-network-meraki-auth-user/

Re: API Script to Manage Meraki Cloud Authentication accounts

amitpalsingh — Tue, 30 Jan 2024 12:15:31 GMT

I tried same in my org but it does not delete the splash guest entry , just deauthorizes it.. The user will still exist in the user history

Re: API Script to Manage Meraki Cloud Authentication accounts

aleabrahao — Tue, 30 Jan 2024 12:19:10 GMT

And that user is not authorized for any other networks in the organization, then also delete the user.

Re: API Script to Manage Meraki Cloud Authentication accounts

russell.sage — Tue, 30 Jan 2024 15:27:41 GMT

If you can't delete the user how is the Meraki solution GDPR compliant?

Re: API Script to Manage Meraki Cloud Authentication accounts

amitpalsingh — Tue, 30 Jan 2024 15:47:30 GMT

You can remove user from dashboard manually and that will delete the user from the org, but using API i think that is not possible because API just unauthorizes the user in the network , does not delete it from org level

Re: API Script to Manage Meraki Cloud Authentication accounts

aleabrahao — Tue, 30 Jan 2024 15:55:51 GMT

Check the description I sent you.

Re: API Script to Manage Meraki Cloud Authentication accounts

Rasmus Hoffmann Birkelund — Tue, 30 Jan 2024 18:51:18 GMT

Try passing "delete = True" as a parameter to your call aswell. That is,

dashboard.networks.deleteNetworkMerakiAuthUser(
    networkId, userId,
    delete = True
)

Re: API Script to Manage Meraki Cloud Authentication accounts

russell.sage — Wed, 31 Jan 2024 07:55:48 GMT

Thank you I will give this ago. I have 4000+ accounts that need to be deleted. I can't delete them manually. I will try the delete = 'True' parameter.

Re: API Script to Manage Meraki Cloud Authentication accounts

russell.sage — Wed, 31 Jan 2024 07:59:31 GMT

I have 4000+ accounts manual simply isn't an option. Also when self certified accounts are created they don't seem to set an expiry date.

Re: API Script to Manage Meraki Cloud Authentication accounts

russell.sage — Tue, 13 Feb 2024 09:07:18 GMT

I tried that it didn't work. Interestingly you can delete a using Postman with the delete keyword. I have raised a TAC case and they it can't be done and that an internal case is being raise to amend their documentation