Hi all
I am trying to use the API to create users and assign them to a specific usergroup.
I can use the POST to /api/v1/localusers/ to create a user with a relevant JSON as body. This seems to work just fine. I am a bit annoyed that I can't just add the user_groups to that request, but so be it.
Then I can find all usergroups usign this GET: /api/v1/usergroups/ - This will return all the usergroups along with their "resource_uri". This works fine.
Now, how do I add a user to the group? I don't want to use the PATCH to the /api/v1/usergroups because that would require me to include ALL the users in the PATCH-call. I just need to add a user. So I thought the best way was to use the POST to the /api/v1/localgroup-memberships/ - but it fails for me.
If I provide this JSON:
{
"group": "/api/v1/usergroups/2/",
"user": "/api/v1/localusers/25/"
}
I get an error back: "Cannot add facgroup-user relationship "FacGroup_users object (None)" (Response: HTTP 400), Error:"
So... How do I add a newly created localuser to the existing usergroup?
Thanks! :)
Jan
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Created on 12-06-2022 11:23 PM Edited on 12-06-2022 11:34 PM
Hi,
I think the issues are related to that profile assigned to the user, biztalk.
You can check under System > Administration > Admin profiles and see what it can actually do. My bet is that it got assigned Webservice Authentication permissions set, but nothing from Users and Devices , to be able to change settings for them in regards to group membership :
Web service:
Can authenticate FAC as fabric device
Can use API to authenticate
Can use API to authenticate using SSO
Users and Devices:
Can add user group
Can change user group
Can delete user group
Can view user group
Can add local user
Can change local user
Can delete local user
Can view local user
Have you tried running w/ user admin or another administrator with full permissions ?
Hi Markus
I also only use local users and groups. I can log into fortinet web solution as the same user as I use for API calls and add the user to the group. So I expect that it is a completely valid combnation.
I don't know what a TAC case is. So how do I do that?
Thanks!
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1030 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.