Cisco ISE v2.7 API call to assign Endpoint Group to Parent Group

[Juraj Parcer]

In GUI there is option to assign Endpoint Identity Group to Parent Group but I am not able to do this via API.

Am I looking for API call that doesnt exist in ISE v2.7?

Thanks

[Greg Gibbs]

Yes, you can create a nested Endpoint Identity Group using the 'parentId' attribute in your POST call. For some reason, this did not make it into the documentation.

Example:

{
"EndPointGroup": {
"name": "EIG_Child_Test",
"description": "Child Endpoint ID Group",
"parentId": "d4f43cc0-eaf4-11ee-8820-b29f5853cf2c"
    }
}

[Juraj Parcer]

Thank you for tip Greg but its bad request for me. I am running ISE version 2.7 and parentID is not in attributes from GET call of endpoint group which I assigned to parent group via GUI

    "ERSResponse": {

        "operation": "POST-create-endpointgroup",

        "messages": [

            {

                "title": "Resource Initialization Failed: Invalid JSON: Unrecognized field \"parentId\" (Class identity.EndPointGroup), not marked as ignorable\n ",

                "type": "ERROR",

                "code": "Application resource validation exception"

[Greg Gibbs · Accepted solution]

What patch are you using with 2.7? I tested the same with patch 9 and 10, and both the POST API call works with the 'parentId' attribute and the GET API call shows the same attribute.

{
   "EndPointGroup": {
     "id": "2a1e36c0-eafe-11ee-a696-c68bb8be0225",
     "name": "EIG_Child_Test",
     "description": "Child Endpoint ID Group",
     "systemDefined": false,
     "parentId": "d4f43cc0-eaf4-11ee-8820-b29f5853cf2c",
     "link": {
        "rel": "self",
        "href": "https://ise27-sa1.ise.domain.local:9060/ers/config/endpointgroup/2a1e36c0-eafe-11ee-a696-c68bb8be0225",
        "type": "application/json"
     }
}

[Juraj Parcer]

Patch 7, so probably old for parentid, thank you for your assistance

[thomas]

Please include your actual REST request and error message so we can undertand what you are doing and potentially duplicate the problem and correct it.

[Juraj Parcer]

ISE v2.7 patch 7