Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco ISE Provider
  3. API Docs
  4. deviceadmin
  5. AuthenticationRule
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

ise.deviceadmin.AuthenticationRule

Explore with Pulumi AI

Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

This resource can manage a Device Admin Authentication Rule.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = new ise.deviceadmin.AuthenticationRule("example", {
    policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
    name: "Rule1",
    "default": false,
    rank: 0,
    state: "enabled",
    conditionType: "ConditionAttributes",
    conditionIsNegate: false,
    conditionAttributeName: "Location",
    conditionAttributeValue: "All Locations",
    conditionDictionaryName: "DEVICE",
    conditionOperator: "equals",
    identitySourceName: "Internal Endpoints",
    ifAuthFail: "REJECT",
    ifProcessFail: "DROP",
    ifUserNotFound: "REJECT",
});
Copy
import pulumi
import pulumi_ise as ise

example = ise.deviceadmin.AuthenticationRule("example",
    policy_set_id="d82952cb-b901-4b09-b363-5ebf39bdbaf9",
    name="Rule1",
    default=False,
    rank=0,
    state="enabled",
    condition_type="ConditionAttributes",
    condition_is_negate=False,
    condition_attribute_name="Location",
    condition_attribute_value="All Locations",
    condition_dictionary_name="DEVICE",
    condition_operator="equals",
    identity_source_name="Internal Endpoints",
    if_auth_fail="REJECT",
    if_process_fail="DROP",
    if_user_not_found="REJECT")
Copy
package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/deviceadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := deviceadmin.NewAuthenticationRule(ctx, "example", &deviceadmin.AuthenticationRuleArgs{
			PolicySetId:             pulumi.String("d82952cb-b901-4b09-b363-5ebf39bdbaf9"),
			Name:                    pulumi.String("Rule1"),
			Default:                 pulumi.Bool(false),
			Rank:                    pulumi.Int(0),
			State:                   pulumi.String("enabled"),
			ConditionType:           pulumi.String("ConditionAttributes"),
			ConditionIsNegate:       pulumi.Bool(false),
			ConditionAttributeName:  pulumi.String("Location"),
			ConditionAttributeValue: pulumi.String("All Locations"),
			ConditionDictionaryName: pulumi.String("DEVICE"),
			ConditionOperator:       pulumi.String("equals"),
			IdentitySourceName:      pulumi.String("Internal Endpoints"),
			IfAuthFail:              pulumi.String("REJECT"),
			IfProcessFail:           pulumi.String("DROP"),
			IfUserNotFound:          pulumi.String("REJECT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = new Ise.DeviceAdmin.AuthenticationRule("example", new()
    {
        PolicySetId = "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
        Name = "Rule1",
        Default = false,
        Rank = 0,
        State = "enabled",
        ConditionType = "ConditionAttributes",
        ConditionIsNegate = false,
        ConditionAttributeName = "Location",
        ConditionAttributeValue = "All Locations",
        ConditionDictionaryName = "DEVICE",
        ConditionOperator = "equals",
        IdentitySourceName = "Internal Endpoints",
        IfAuthFail = "REJECT",
        IfProcessFail = "DROP",
        IfUserNotFound = "REJECT",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.deviceadmin.AuthenticationRule;
import com.pulumi.ise.deviceadmin.AuthenticationRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new AuthenticationRule("example", AuthenticationRuleArgs.builder()
            .policySetId("d82952cb-b901-4b09-b363-5ebf39bdbaf9")
            .name("Rule1")
            .default_(false)
            .rank(0)
            .state("enabled")
            .conditionType("ConditionAttributes")
            .conditionIsNegate(false)
            .conditionAttributeName("Location")
            .conditionAttributeValue("All Locations")
            .conditionDictionaryName("DEVICE")
            .conditionOperator("equals")
            .identitySourceName("Internal Endpoints")
            .ifAuthFail("REJECT")
            .ifProcessFail("DROP")
            .ifUserNotFound("REJECT")
            .build());

    }
}
Copy
resources:
  example:
    type: ise:deviceadmin:AuthenticationRule
    properties:
      policySetId: d82952cb-b901-4b09-b363-5ebf39bdbaf9
      name: Rule1
      default: false
      rank: 0
      state: enabled
      conditionType: ConditionAttributes
      conditionIsNegate: false
      conditionAttributeName: Location
      conditionAttributeValue: All Locations
      conditionDictionaryName: DEVICE
      conditionOperator: equals
      identitySourceName: Internal Endpoints
      ifAuthFail: REJECT
      ifProcessFail: DROP
      ifUserNotFound: REJECT
Copy

Create AuthenticationRule Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AuthenticationRule(name: string, args: AuthenticationRuleArgs, opts?: CustomResourceOptions);
@overload
def AuthenticationRule(resource_name: str,
                       args: AuthenticationRuleArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def AuthenticationRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       if_auth_fail: Optional[str] = None,
                       policy_set_id: Optional[str] = None,
                       if_user_not_found: Optional[str] = None,
                       if_process_fail: Optional[str] = None,
                       condition_dictionary_value: Optional[str] = None,
                       childrens: Optional[Sequence[AuthenticationRuleChildrenArgs]] = None,
                       condition_is_negate: Optional[bool] = None,
                       condition_operator: Optional[str] = None,
                       condition_type: Optional[str] = None,
                       default: Optional[bool] = None,
                       identity_source_name: Optional[str] = None,
                       condition_id: Optional[str] = None,
                       condition_dictionary_name: Optional[str] = None,
                       condition_attribute_value: Optional[str] = None,
                       name: Optional[str] = None,
                       condition_attribute_name: Optional[str] = None,
                       rank: Optional[int] = None,
                       state: Optional[str] = None)
func NewAuthenticationRule(ctx *Context, name string, args AuthenticationRuleArgs, opts ...ResourceOption) (*AuthenticationRule, error)
public AuthenticationRule(string name, AuthenticationRuleArgs args, CustomResourceOptions? opts = null)
public AuthenticationRule(String name, AuthenticationRuleArgs args)
public AuthenticationRule(String name, AuthenticationRuleArgs args, CustomResourceOptions options)

type: ise:deviceadmin:AuthenticationRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AuthenticationRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AuthenticationRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AuthenticationRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AuthenticationRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AuthenticationRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var authenticationRuleResource = new Ise.DeviceAdmin.AuthenticationRule("authenticationRuleResource", new()
{
    IfAuthFail = "string",
    PolicySetId = "string",
    IfUserNotFound = "string",
    IfProcessFail = "string",
    ConditionDictionaryValue = "string",
    Childrens = new[]
    {
        new Ise.DeviceAdmin.Inputs.AuthenticationRuleChildrenArgs
        {
            ConditionType = "string",
            AttributeName = "string",
            AttributeValue = "string",
            Childrens = new[]
            {
                new Ise.DeviceAdmin.Inputs.AuthenticationRuleChildrenChildrenArgs
                {
                    ConditionType = "string",
                    AttributeName = "string",
                    AttributeValue = "string",
                    DictionaryName = "string",
                    DictionaryValue = "string",
                    Id = "string",
                    IsNegate = false,
                    Operator = "string",
                },
            },
            DictionaryName = "string",
            DictionaryValue = "string",
            Id = "string",
            IsNegate = false,
            Operator = "string",
        },
    },
    ConditionIsNegate = false,
    ConditionOperator = "string",
    ConditionType = "string",
    Default = false,
    IdentitySourceName = "string",
    ConditionId = "string",
    ConditionDictionaryName = "string",
    ConditionAttributeValue = "string",
    Name = "string",
    ConditionAttributeName = "string",
    Rank = 0,
    State = "string",
});
Copy
example, err := deviceadmin.NewAuthenticationRule(ctx, "authenticationRuleResource", &deviceadmin.AuthenticationRuleArgs{
	IfAuthFail:               pulumi.String("string"),
	PolicySetId:              pulumi.String("string"),
	IfUserNotFound:           pulumi.String("string"),
	IfProcessFail:            pulumi.String("string"),
	ConditionDictionaryValue: pulumi.String("string"),
	Childrens: deviceadmin.AuthenticationRuleChildrenArray{
		&deviceadmin.AuthenticationRuleChildrenArgs{
			ConditionType:  pulumi.String("string"),
			AttributeName:  pulumi.String("string"),
			AttributeValue: pulumi.String("string"),
			Childrens: deviceadmin.AuthenticationRuleChildrenChildrenArray{
				&deviceadmin.AuthenticationRuleChildrenChildrenArgs{
					ConditionType:   pulumi.String("string"),
					AttributeName:   pulumi.String("string"),
					AttributeValue:  pulumi.String("string"),
					DictionaryName:  pulumi.String("string"),
					DictionaryValue: pulumi.String("string"),
					Id:              pulumi.String("string"),
					IsNegate:        pulumi.Bool(false),
					Operator:        pulumi.String("string"),
				},
			},
			DictionaryName:  pulumi.String("string"),
			DictionaryValue: pulumi.String("string"),
			Id:              pulumi.String("string"),
			IsNegate:        pulumi.Bool(false),
			Operator:        pulumi.String("string"),
		},
	},
	ConditionIsNegate:       pulumi.Bool(false),
	ConditionOperator:       pulumi.String("string"),
	ConditionType:           pulumi.String("string"),
	Default:                 pulumi.Bool(false),
	IdentitySourceName:      pulumi.String("string"),
	ConditionId:             pulumi.String("string"),
	ConditionDictionaryName: pulumi.String("string"),
	ConditionAttributeValue: pulumi.String("string"),
	Name:                    pulumi.String("string"),
	ConditionAttributeName:  pulumi.String("string"),
	Rank:                    pulumi.Int(0),
	State:                   pulumi.String("string"),
})
Copy
var authenticationRuleResource = new AuthenticationRule("authenticationRuleResource", AuthenticationRuleArgs.builder()
    .ifAuthFail("string")
    .policySetId("string")
    .ifUserNotFound("string")
    .ifProcessFail("string")
    .conditionDictionaryValue("string")
    .childrens(AuthenticationRuleChildrenArgs.builder()
        .conditionType("string")
        .attributeName("string")
        .attributeValue("string")
        .childrens(AuthenticationRuleChildrenChildrenArgs.builder()
            .conditionType("string")
            .attributeName("string")
            .attributeValue("string")
            .dictionaryName("string")
            .dictionaryValue("string")
            .id("string")
            .isNegate(false)
            .operator("string")
            .build())
        .dictionaryName("string")
        .dictionaryValue("string")
        .id("string")
        .isNegate(false)
        .operator("string")
        .build())
    .conditionIsNegate(false)
    .conditionOperator("string")
    .conditionType("string")
    .default_(false)
    .identitySourceName("string")
    .conditionId("string")
    .conditionDictionaryName("string")
    .conditionAttributeValue("string")
    .name("string")
    .conditionAttributeName("string")
    .rank(0)
    .state("string")
    .build());
Copy
authentication_rule_resource = ise.deviceadmin.AuthenticationRule("authenticationRuleResource",
    if_auth_fail="string",
    policy_set_id="string",
    if_user_not_found="string",
    if_process_fail="string",
    condition_dictionary_value="string",
    childrens=[{
        "condition_type": "string",
        "attribute_name": "string",
        "attribute_value": "string",
        "childrens": [{
            "condition_type": "string",
            "attribute_name": "string",
            "attribute_value": "string",
            "dictionary_name": "string",
            "dictionary_value": "string",
            "id": "string",
            "is_negate": False,
            "operator": "string",
        }],
        "dictionary_name": "string",
        "dictionary_value": "string",
        "id": "string",
        "is_negate": False,
        "operator": "string",
    }],
    condition_is_negate=False,
    condition_operator="string",
    condition_type="string",
    default=False,
    identity_source_name="string",
    condition_id="string",
    condition_dictionary_name="string",
    condition_attribute_value="string",
    name="string",
    condition_attribute_name="string",
    rank=0,
    state="string")
Copy
const authenticationRuleResource = new ise.deviceadmin.AuthenticationRule("authenticationRuleResource", {
    ifAuthFail: "string",
    policySetId: "string",
    ifUserNotFound: "string",
    ifProcessFail: "string",
    conditionDictionaryValue: "string",
    childrens: [{
        conditionType: "string",
        attributeName: "string",
        attributeValue: "string",
        childrens: [{
            conditionType: "string",
            attributeName: "string",
            attributeValue: "string",
            dictionaryName: "string",
            dictionaryValue: "string",
            id: "string",
            isNegate: false,
            operator: "string",
        }],
        dictionaryName: "string",
        dictionaryValue: "string",
        id: "string",
        isNegate: false,
        operator: "string",
    }],
    conditionIsNegate: false,
    conditionOperator: "string",
    conditionType: "string",
    "default": false,
    identitySourceName: "string",
    conditionId: "string",
    conditionDictionaryName: "string",
    conditionAttributeValue: "string",
    name: "string",
    conditionAttributeName: "string",
    rank: 0,
    state: "string",
});
Copy
type: ise:deviceadmin:AuthenticationRule
properties:
    childrens:
        - attributeName: string
          attributeValue: string
          childrens:
            - attributeName: string
              attributeValue: string
              conditionType: string
              dictionaryName: string
              dictionaryValue: string
              id: string
              isNegate: false
              operator: string
          conditionType: string
          dictionaryName: string
          dictionaryValue: string
          id: string
          isNegate: false
          operator: string
    conditionAttributeName: string
    conditionAttributeValue: string
    conditionDictionaryName: string
    conditionDictionaryValue: string
    conditionId: string
    conditionIsNegate: false
    conditionOperator: string
    conditionType: string
    default: false
    identitySourceName: string
    ifAuthFail: string
    ifProcessFail: string
    ifUserNotFound: string
    name: string
    policySetId: string
    rank: 0
    state: string
Copy

AuthenticationRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AuthenticationRule resource accepts the following input properties:

IfAuthFail This property is required. string
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
IfProcessFail This property is required. string
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
IfUserNotFound This property is required. string
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
PolicySetId This property is required. string
Policy set ID
Childrens List<AuthenticationRuleChildren>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
ConditionAttributeName string
Dictionary attribute name
ConditionAttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
ConditionDictionaryName string
Dictionary name
ConditionDictionaryValue string
Dictionary value
ConditionId string
UUID for condition
ConditionIsNegate bool
Indicates whereas this condition is in negate mode
ConditionOperator string
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
ConditionType string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
Default bool
Indicates if this rule is the default one
IdentitySourceName string
Identity source name from the identity stores
Name string
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
Rank int
The rank (priority) in relation to other rules. Lower rank is higher priority.
State string
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
IfAuthFail This property is required. string
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
IfProcessFail This property is required. string
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
IfUserNotFound This property is required. string
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
PolicySetId This property is required. string
Policy set ID
Childrens []AuthenticationRuleChildrenArgs
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
ConditionAttributeName string
Dictionary attribute name
ConditionAttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
ConditionDictionaryName string
Dictionary name
ConditionDictionaryValue string
Dictionary value
ConditionId string
UUID for condition
ConditionIsNegate bool
Indicates whereas this condition is in negate mode
ConditionOperator string
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
ConditionType string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
Default bool
Indicates if this rule is the default one
IdentitySourceName string
Identity source name from the identity stores
Name string
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
Rank int
The rank (priority) in relation to other rules. Lower rank is higher priority.
State string
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
ifAuthFail This property is required. String
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
ifProcessFail This property is required. String
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
ifUserNotFound This property is required. String
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
policySetId This property is required. String
Policy set ID
childrens List<AuthenticationRuleChildren>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
conditionAttributeName String
Dictionary attribute name
conditionAttributeValue String
Attribute value for condition. Value type is specified in dictionary object.
conditionDictionaryName String
Dictionary name
conditionDictionaryValue String
Dictionary value
conditionId String
UUID for condition
conditionIsNegate Boolean
Indicates whereas this condition is in negate mode
conditionOperator String
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType String
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default_ Boolean
Indicates if this rule is the default one
identitySourceName String
Identity source name from the identity stores
name String
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
rank Integer
The rank (priority) in relation to other rules. Lower rank is higher priority.
state String
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
ifAuthFail This property is required. string
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
ifProcessFail This property is required. string
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
ifUserNotFound This property is required. string
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
policySetId This property is required. string
Policy set ID
childrens AuthenticationRuleChildren[]
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
conditionAttributeName string
Dictionary attribute name
conditionAttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
conditionDictionaryName string
Dictionary name
conditionDictionaryValue string
Dictionary value
conditionId string
UUID for condition
conditionIsNegate boolean
Indicates whereas this condition is in negate mode
conditionOperator string
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default boolean
Indicates if this rule is the default one
identitySourceName string
Identity source name from the identity stores
name string
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
rank number
The rank (priority) in relation to other rules. Lower rank is higher priority.
state string
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
if_auth_fail This property is required. str
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
if_process_fail This property is required. str
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
if_user_not_found This property is required. str
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
policy_set_id This property is required. str
Policy set ID
childrens Sequence[AuthenticationRuleChildrenArgs]
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
condition_attribute_name str
Dictionary attribute name
condition_attribute_value str
Attribute value for condition. Value type is specified in dictionary object.
condition_dictionary_name str
Dictionary name
condition_dictionary_value str
Dictionary value
condition_id str
UUID for condition
condition_is_negate bool
Indicates whereas this condition is in negate mode
condition_operator str
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
condition_type str
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default bool
Indicates if this rule is the default one
identity_source_name str
Identity source name from the identity stores
name str
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
rank int
The rank (priority) in relation to other rules. Lower rank is higher priority.
state str
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
ifAuthFail This property is required. String
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
ifProcessFail This property is required. String
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
ifUserNotFound This property is required. String
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
policySetId This property is required. String
Policy set ID
childrens List<Property Map>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
conditionAttributeName String
Dictionary attribute name
conditionAttributeValue String
Attribute value for condition. Value type is specified in dictionary object.
conditionDictionaryName String
Dictionary name
conditionDictionaryValue String
Dictionary value
conditionId String
UUID for condition
conditionIsNegate Boolean
Indicates whereas this condition is in negate mode
conditionOperator String
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType String
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default Boolean
Indicates if this rule is the default one
identitySourceName String
Identity source name from the identity stores
name String
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
rank Number
The rank (priority) in relation to other rules. Lower rank is higher priority.
state String
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

Outputs

All input properties are implicitly available as output properties. Additionally, the AuthenticationRule resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing AuthenticationRule Resource

Get an existing AuthenticationRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AuthenticationRuleState, opts?: CustomResourceOptions): AuthenticationRule
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        childrens: Optional[Sequence[AuthenticationRuleChildrenArgs]] = None,
        condition_attribute_name: Optional[str] = None,
        condition_attribute_value: Optional[str] = None,
        condition_dictionary_name: Optional[str] = None,
        condition_dictionary_value: Optional[str] = None,
        condition_id: Optional[str] = None,
        condition_is_negate: Optional[bool] = None,
        condition_operator: Optional[str] = None,
        condition_type: Optional[str] = None,
        default: Optional[bool] = None,
        identity_source_name: Optional[str] = None,
        if_auth_fail: Optional[str] = None,
        if_process_fail: Optional[str] = None,
        if_user_not_found: Optional[str] = None,
        name: Optional[str] = None,
        policy_set_id: Optional[str] = None,
        rank: Optional[int] = None,
        state: Optional[str] = None) -> AuthenticationRule
func GetAuthenticationRule(ctx *Context, name string, id IDInput, state *AuthenticationRuleState, opts ...ResourceOption) (*AuthenticationRule, error)
public static AuthenticationRule Get(string name, Input<string> id, AuthenticationRuleState? state, CustomResourceOptions? opts = null)
public static AuthenticationRule get(String name, Output<String> id, AuthenticationRuleState state, CustomResourceOptions options)
resources:  _:    type: ise:deviceadmin:AuthenticationRule    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Childrens List<AuthenticationRuleChildren>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
ConditionAttributeName string
Dictionary attribute name
ConditionAttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
ConditionDictionaryName string
Dictionary name
ConditionDictionaryValue string
Dictionary value
ConditionId string
UUID for condition
ConditionIsNegate bool
Indicates whereas this condition is in negate mode
ConditionOperator string
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
ConditionType string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
Default bool
Indicates if this rule is the default one
IdentitySourceName string
Identity source name from the identity stores
IfAuthFail string
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
IfProcessFail string
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
IfUserNotFound string
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
Name string
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
PolicySetId string
Policy set ID
Rank int
The rank (priority) in relation to other rules. Lower rank is higher priority.
State string
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
Childrens []AuthenticationRuleChildrenArgs
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
ConditionAttributeName string
Dictionary attribute name
ConditionAttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
ConditionDictionaryName string
Dictionary name
ConditionDictionaryValue string
Dictionary value
ConditionId string
UUID for condition
ConditionIsNegate bool
Indicates whereas this condition is in negate mode
ConditionOperator string
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
ConditionType string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
Default bool
Indicates if this rule is the default one
IdentitySourceName string
Identity source name from the identity stores
IfAuthFail string
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
IfProcessFail string
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
IfUserNotFound string
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
Name string
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
PolicySetId string
Policy set ID
Rank int
The rank (priority) in relation to other rules. Lower rank is higher priority.
State string
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
childrens List<AuthenticationRuleChildren>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
conditionAttributeName String
Dictionary attribute name
conditionAttributeValue String
Attribute value for condition. Value type is specified in dictionary object.
conditionDictionaryName String
Dictionary name
conditionDictionaryValue String
Dictionary value
conditionId String
UUID for condition
conditionIsNegate Boolean
Indicates whereas this condition is in negate mode
conditionOperator String
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType String
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default_ Boolean
Indicates if this rule is the default one
identitySourceName String
Identity source name from the identity stores
ifAuthFail String
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
ifProcessFail String
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
ifUserNotFound String
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
name String
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
policySetId String
Policy set ID
rank Integer
The rank (priority) in relation to other rules. Lower rank is higher priority.
state String
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
childrens AuthenticationRuleChildren[]
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
conditionAttributeName string
Dictionary attribute name
conditionAttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
conditionDictionaryName string
Dictionary name
conditionDictionaryValue string
Dictionary value
conditionId string
UUID for condition
conditionIsNegate boolean
Indicates whereas this condition is in negate mode
conditionOperator string
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default boolean
Indicates if this rule is the default one
identitySourceName string
Identity source name from the identity stores
ifAuthFail string
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
ifProcessFail string
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
ifUserNotFound string
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
name string
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
policySetId string
Policy set ID
rank number
The rank (priority) in relation to other rules. Lower rank is higher priority.
state string
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
childrens Sequence[AuthenticationRuleChildrenArgs]
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
condition_attribute_name str
Dictionary attribute name
condition_attribute_value str
Attribute value for condition. Value type is specified in dictionary object.
condition_dictionary_name str
Dictionary name
condition_dictionary_value str
Dictionary value
condition_id str
UUID for condition
condition_is_negate bool
Indicates whereas this condition is in negate mode
condition_operator str
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
condition_type str
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default bool
Indicates if this rule is the default one
identity_source_name str
Identity source name from the identity stores
if_auth_fail str
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
if_process_fail str
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
if_user_not_found str
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
name str
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
policy_set_id str
Policy set ID
rank int
The rank (priority) in relation to other rules. Lower rank is higher priority.
state str
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
childrens List<Property Map>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
conditionAttributeName String
Dictionary attribute name
conditionAttributeValue String
Attribute value for condition. Value type is specified in dictionary object.
conditionDictionaryName String
Dictionary name
conditionDictionaryValue String
Dictionary value
conditionId String
UUID for condition
conditionIsNegate Boolean
Indicates whereas this condition is in negate mode
conditionOperator String
Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType String
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
default Boolean
Indicates if this rule is the default one
identitySourceName String
Identity source name from the identity stores
ifAuthFail String
Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
ifProcessFail String
Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
ifUserNotFound String
Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
name String
Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
policySetId String
Policy set ID
rank Number
The rank (priority) in relation to other rules. Lower rank is higher priority.
state String
The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

Supporting Types

AuthenticationRuleChildren
, AuthenticationRuleChildrenArgs

ConditionType This property is required. string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

  • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
AttributeName string
Dictionary attribute name
AttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
Childrens List<AuthenticationRuleChildrenChildren>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
DictionaryName string
Dictionary name
DictionaryValue string
Dictionary value
Id string
UUID for condition
IsNegate bool
Indicates whereas this condition is in negate mode
Operator string
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
ConditionType This property is required. string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

  • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
AttributeName string
Dictionary attribute name
AttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
Childrens []AuthenticationRuleChildrenChildren
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
DictionaryName string
Dictionary name
DictionaryValue string
Dictionary value
Id string
UUID for condition
IsNegate bool
Indicates whereas this condition is in negate mode
Operator string
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType This property is required. String
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

  • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
attributeName String
Dictionary attribute name
attributeValue String
Attribute value for condition. Value type is specified in dictionary object.
childrens List<AuthenticationRuleChildrenChildren>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
dictionaryName String
Dictionary name
dictionaryValue String
Dictionary value
id String
UUID for condition
isNegate Boolean
Indicates whereas this condition is in negate mode
operator String
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType This property is required. string
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

  • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
attributeName string
Dictionary attribute name
attributeValue string
Attribute value for condition. Value type is specified in dictionary object.
childrens AuthenticationRuleChildrenChildren[]
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
dictionaryName string
Dictionary name
dictionaryValue string
Dictionary value
id string
UUID for condition
isNegate boolean
Indicates whereas this condition is in negate mode
operator string
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
condition_type This property is required. str
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

  • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
attribute_name str
Dictionary attribute name
attribute_value str
Attribute value for condition. Value type is specified in dictionary object.
childrens Sequence[AuthenticationRuleChildrenChildren]
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
dictionary_name str
Dictionary name
dictionary_value str
Dictionary value
id str
UUID for condition
is_negate bool
Indicates whereas this condition is in negate mode
operator str
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType This property is required. String
Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

  • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
attributeName String
Dictionary attribute name
attributeValue String
Attribute value for condition. Value type is specified in dictionary object.
childrens List<Property Map>
List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
dictionaryName String
Dictionary name
dictionaryValue String
Dictionary value
id String
UUID for condition
isNegate Boolean
Indicates whereas this condition is in negate mode
operator String
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

AuthenticationRuleChildrenChildren
, AuthenticationRuleChildrenChildrenArgs

ConditionType This property is required. string
Condition type.

  • Choices: ConditionAttributes, ConditionReference
AttributeName string
Dictionary attribute name
AttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
DictionaryName string
Dictionary name
DictionaryValue string
Dictionary value
Id string
UUID for condition
IsNegate bool
Indicates whereas this condition is in negate mode
Operator string
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
ConditionType This property is required. string
Condition type.

  • Choices: ConditionAttributes, ConditionReference
AttributeName string
Dictionary attribute name
AttributeValue string
Attribute value for condition. Value type is specified in dictionary object.
DictionaryName string
Dictionary name
DictionaryValue string
Dictionary value
Id string
UUID for condition
IsNegate bool
Indicates whereas this condition is in negate mode
Operator string
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType This property is required. String
Condition type.

  • Choices: ConditionAttributes, ConditionReference
attributeName String
Dictionary attribute name
attributeValue String
Attribute value for condition. Value type is specified in dictionary object.
dictionaryName String
Dictionary name
dictionaryValue String
Dictionary value
id String
UUID for condition
isNegate Boolean
Indicates whereas this condition is in negate mode
operator String
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType This property is required. string
Condition type.

  • Choices: ConditionAttributes, ConditionReference
attributeName string
Dictionary attribute name
attributeValue string
Attribute value for condition. Value type is specified in dictionary object.
dictionaryName string
Dictionary name
dictionaryValue string
Dictionary value
id string
UUID for condition
isNegate boolean
Indicates whereas this condition is in negate mode
operator string
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
condition_type This property is required. str
Condition type.

  • Choices: ConditionAttributes, ConditionReference
attribute_name str
Dictionary attribute name
attribute_value str
Attribute value for condition. Value type is specified in dictionary object.
dictionary_name str
Dictionary name
dictionary_value str
Dictionary value
id str
UUID for condition
is_negate bool
Indicates whereas this condition is in negate mode
operator str
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
conditionType This property is required. String
Condition type.

  • Choices: ConditionAttributes, ConditionReference
attributeName String
Dictionary attribute name
attributeValue String
Attribute value for condition. Value type is specified in dictionary object.
dictionaryName String
Dictionary name
dictionaryValue String
Dictionary value
id String
UUID for condition
isNegate Boolean
Indicates whereas this condition is in negate mode
operator String
Equality operator

  • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

Import

$ pulumi import ise:deviceadmin/authenticationRule:AuthenticationRule example "76d24097-41c4-4558-a4d0-a8c07ac08470,76d24097-41c4-4558-a4d0-a8c07ac08470"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
ise pulumi/pulumi-ise
License
Apache-2.0
Notes
This Pulumi package is based on the ise Terraform Provider.
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise