Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco ISE Provider
  3. API Docs
  4. deviceadmin
  5. AuthenticationRule
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

ise.deviceadmin.AuthenticationRule

Explore with Pulumi AI

ise logo
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

    This resource can manage a Device Admin Authentication Rule.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = new ise.deviceadmin.AuthenticationRule("example", {
    policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
    name: "Rule1",
    "default": false,
    rank: 0,
    state: "enabled",
    conditionType: "ConditionAttributes",
    conditionIsNegate: false,
    conditionAttributeName: "Location",
    conditionAttributeValue: "All Locations",
    conditionDictionaryName: "DEVICE",
    conditionOperator: "equals",
    identitySourceName: "Internal Endpoints",
    ifAuthFail: "REJECT",
    ifProcessFail: "DROP",
    ifUserNotFound: "REJECT",
});

    import pulumi
import pulumi_ise as ise

example = ise.deviceadmin.AuthenticationRule("example",
    policy_set_id="d82952cb-b901-4b09-b363-5ebf39bdbaf9",
    name="Rule1",
    default=False,
    rank=0,
    state="enabled",
    condition_type="ConditionAttributes",
    condition_is_negate=False,
    condition_attribute_name="Location",
    condition_attribute_value="All Locations",
    condition_dictionary_name="DEVICE",
    condition_operator="equals",
    identity_source_name="Internal Endpoints",
    if_auth_fail="REJECT",
    if_process_fail="DROP",
    if_user_not_found="REJECT")

    package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/deviceadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := deviceadmin.NewAuthenticationRule(ctx, "example", &deviceadmin.AuthenticationRuleArgs{
			PolicySetId:             pulumi.String("d82952cb-b901-4b09-b363-5ebf39bdbaf9"),
			Name:                    pulumi.String("Rule1"),
			Default:                 pulumi.Bool(false),
			Rank:                    pulumi.Int(0),
			State:                   pulumi.String("enabled"),
			ConditionType:           pulumi.String("ConditionAttributes"),
			ConditionIsNegate:       pulumi.Bool(false),
			ConditionAttributeName:  pulumi.String("Location"),
			ConditionAttributeValue: pulumi.String("All Locations"),
			ConditionDictionaryName: pulumi.String("DEVICE"),
			ConditionOperator:       pulumi.String("equals"),
			IdentitySourceName:      pulumi.String("Internal Endpoints"),
			IfAuthFail:              pulumi.String("REJECT"),
			IfProcessFail:           pulumi.String("DROP"),
			IfUserNotFound:          pulumi.String("REJECT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = new Ise.DeviceAdmin.AuthenticationRule("example", new()
    {
        PolicySetId = "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
        Name = "Rule1",
        Default = false,
        Rank = 0,
        State = "enabled",
        ConditionType = "ConditionAttributes",
        ConditionIsNegate = false,
        ConditionAttributeName = "Location",
        ConditionAttributeValue = "All Locations",
        ConditionDictionaryName = "DEVICE",
        ConditionOperator = "equals",
        IdentitySourceName = "Internal Endpoints",
        IfAuthFail = "REJECT",
        IfProcessFail = "DROP",
        IfUserNotFound = "REJECT",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.deviceadmin.AuthenticationRule;
import com.pulumi.ise.deviceadmin.AuthenticationRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new AuthenticationRule("example", AuthenticationRuleArgs.builder()
            .policySetId("d82952cb-b901-4b09-b363-5ebf39bdbaf9")
            .name("Rule1")
            .default_(false)
            .rank(0)
            .state("enabled")
            .conditionType("ConditionAttributes")
            .conditionIsNegate(false)
            .conditionAttributeName("Location")
            .conditionAttributeValue("All Locations")
            .conditionDictionaryName("DEVICE")
            .conditionOperator("equals")
            .identitySourceName("Internal Endpoints")
            .ifAuthFail("REJECT")
            .ifProcessFail("DROP")
            .ifUserNotFound("REJECT")
            .build());

    }
}

    resources:
  example:
    type: ise:deviceadmin:AuthenticationRule
    properties:
      policySetId: d82952cb-b901-4b09-b363-5ebf39bdbaf9
      name: Rule1
      default: false
      rank: 0
      state: enabled
      conditionType: ConditionAttributes
      conditionIsNegate: false
      conditionAttributeName: Location
      conditionAttributeValue: All Locations
      conditionDictionaryName: DEVICE
      conditionOperator: equals
      identitySourceName: Internal Endpoints
      ifAuthFail: REJECT
      ifProcessFail: DROP
      ifUserNotFound: REJECT

    Create AuthenticationRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthenticationRule(name: string, args: AuthenticationRuleArgs, opts?: CustomResourceOptions);
    @overload
def AuthenticationRule(resource_name: str,
                       args: AuthenticationRuleArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def AuthenticationRule(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       if_auth_fail: Optional[str] = None,
                       policy_set_id: Optional[str] = None,
                       if_user_not_found: Optional[str] = None,
                       if_process_fail: Optional[str] = None,
                       condition_dictionary_value: Optional[str] = None,
                       childrens: Optional[Sequence[AuthenticationRuleChildrenArgs]] = None,
                       condition_is_negate: Optional[bool] = None,
                       condition_operator: Optional[str] = None,
                       condition_type: Optional[str] = None,
                       default: Optional[bool] = None,
                       identity_source_name: Optional[str] = None,
                       condition_id: Optional[str] = None,
                       condition_dictionary_name: Optional[str] = None,
                       condition_attribute_value: Optional[str] = None,
                       name: Optional[str] = None,
                       condition_attribute_name: Optional[str] = None,
                       rank: Optional[int] = None,
                       state: Optional[str] = None)
    func NewAuthenticationRule(ctx *Context, name string, args AuthenticationRuleArgs, opts ...ResourceOption) (*AuthenticationRule, error)
    public AuthenticationRule(string name, AuthenticationRuleArgs args, CustomResourceOptions? opts = null)
    public AuthenticationRule(String name, AuthenticationRuleArgs args)
public AuthenticationRule(String name, AuthenticationRuleArgs args, CustomResourceOptions options)

    type: ise:deviceadmin:AuthenticationRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthenticationRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var authenticationRuleResource = new Ise.DeviceAdmin.AuthenticationRule("authenticationRuleResource", new()
{
    IfAuthFail = "string",
    PolicySetId = "string",
    IfUserNotFound = "string",
    IfProcessFail = "string",
    ConditionDictionaryValue = "string",
    Childrens = new[]
    {
        new Ise.DeviceAdmin.Inputs.AuthenticationRuleChildrenArgs
        {
            ConditionType = "string",
            AttributeName = "string",
            AttributeValue = "string",
            Childrens = new[]
            {
                new Ise.DeviceAdmin.Inputs.AuthenticationRuleChildrenChildrenArgs
                {
                    ConditionType = "string",
                    AttributeName = "string",
                    AttributeValue = "string",
                    DictionaryName = "string",
                    DictionaryValue = "string",
                    Id = "string",
                    IsNegate = false,
                    Operator = "string",
                },
            },
            DictionaryName = "string",
            DictionaryValue = "string",
            Id = "string",
            IsNegate = false,
            Operator = "string",
        },
    },
    ConditionIsNegate = false,
    ConditionOperator = "string",
    ConditionType = "string",
    Default = false,
    IdentitySourceName = "string",
    ConditionId = "string",
    ConditionDictionaryName = "string",
    ConditionAttributeValue = "string",
    Name = "string",
    ConditionAttributeName = "string",
    Rank = 0,
    State = "string",
});

    example, err := deviceadmin.NewAuthenticationRule(ctx, "authenticationRuleResource", &deviceadmin.AuthenticationRuleArgs{
	IfAuthFail:               pulumi.String("string"),
	PolicySetId:              pulumi.String("string"),
	IfUserNotFound:           pulumi.String("string"),
	IfProcessFail:            pulumi.String("string"),
	ConditionDictionaryValue: pulumi.String("string"),
	Childrens: deviceadmin.AuthenticationRuleChildrenArray{
		&deviceadmin.AuthenticationRuleChildrenArgs{
			ConditionType:  pulumi.String("string"),
			AttributeName:  pulumi.String("string"),
			AttributeValue: pulumi.String("string"),
			Childrens: deviceadmin.AuthenticationRuleChildrenChildrenArray{
				&deviceadmin.AuthenticationRuleChildrenChildrenArgs{
					ConditionType:   pulumi.String("string"),
					AttributeName:   pulumi.String("string"),
					AttributeValue:  pulumi.String("string"),
					DictionaryName:  pulumi.String("string"),
					DictionaryValue: pulumi.String("string"),
					Id:              pulumi.String("string"),
					IsNegate:        pulumi.Bool(false),
					Operator:        pulumi.String("string"),
				},
			},
			DictionaryName:  pulumi.String("string"),
			DictionaryValue: pulumi.String("string"),
			Id:              pulumi.String("string"),
			IsNegate:        pulumi.Bool(false),
			Operator:        pulumi.String("string"),
		},
	},
	ConditionIsNegate:       pulumi.Bool(false),
	ConditionOperator:       pulumi.String("string"),
	ConditionType:           pulumi.String("string"),
	Default:                 pulumi.Bool(false),
	IdentitySourceName:      pulumi.String("string"),
	ConditionId:             pulumi.String("string"),
	ConditionDictionaryName: pulumi.String("string"),
	ConditionAttributeValue: pulumi.String("string"),
	Name:                    pulumi.String("string"),
	ConditionAttributeName:  pulumi.String("string"),
	Rank:                    pulumi.Int(0),
	State:                   pulumi.String("string"),
})

    var authenticationRuleResource = new AuthenticationRule("authenticationRuleResource", AuthenticationRuleArgs.builder()
    .ifAuthFail("string")
    .policySetId("string")
    .ifUserNotFound("string")
    .ifProcessFail("string")
    .conditionDictionaryValue("string")
    .childrens(AuthenticationRuleChildrenArgs.builder()
        .conditionType("string")
        .attributeName("string")
        .attributeValue("string")
        .childrens(AuthenticationRuleChildrenChildrenArgs.builder()
            .conditionType("string")
            .attributeName("string")
            .attributeValue("string")
            .dictionaryName("string")
            .dictionaryValue("string")
            .id("string")
            .isNegate(false)
            .operator("string")
            .build())
        .dictionaryName("string")
        .dictionaryValue("string")
        .id("string")
        .isNegate(false)
        .operator("string")
        .build())
    .conditionIsNegate(false)
    .conditionOperator("string")
    .conditionType("string")
    .default_(false)
    .identitySourceName("string")
    .conditionId("string")
    .conditionDictionaryName("string")
    .conditionAttributeValue("string")
    .name("string")
    .conditionAttributeName("string")
    .rank(0)
    .state("string")
    .build());

    authentication_rule_resource = ise.deviceadmin.AuthenticationRule("authenticationRuleResource",
    if_auth_fail="string",
    policy_set_id="string",
    if_user_not_found="string",
    if_process_fail="string",
    condition_dictionary_value="string",
    childrens=[{
        "condition_type": "string",
        "attribute_name": "string",
        "attribute_value": "string",
        "childrens": [{
            "condition_type": "string",
            "attribute_name": "string",
            "attribute_value": "string",
            "dictionary_name": "string",
            "dictionary_value": "string",
            "id": "string",
            "is_negate": False,
            "operator": "string",
        }],
        "dictionary_name": "string",
        "dictionary_value": "string",
        "id": "string",
        "is_negate": False,
        "operator": "string",
    }],
    condition_is_negate=False,
    condition_operator="string",
    condition_type="string",
    default=False,
    identity_source_name="string",
    condition_id="string",
    condition_dictionary_name="string",
    condition_attribute_value="string",
    name="string",
    condition_attribute_name="string",
    rank=0,
    state="string")

    const authenticationRuleResource = new ise.deviceadmin.AuthenticationRule("authenticationRuleResource", {
    ifAuthFail: "string",
    policySetId: "string",
    ifUserNotFound: "string",
    ifProcessFail: "string",
    conditionDictionaryValue: "string",
    childrens: [{
        conditionType: "string",
        attributeName: "string",
        attributeValue: "string",
        childrens: [{
            conditionType: "string",
            attributeName: "string",
            attributeValue: "string",
            dictionaryName: "string",
            dictionaryValue: "string",
            id: "string",
            isNegate: false,
            operator: "string",
        }],
        dictionaryName: "string",
        dictionaryValue: "string",
        id: "string",
        isNegate: false,
        operator: "string",
    }],
    conditionIsNegate: false,
    conditionOperator: "string",
    conditionType: "string",
    "default": false,
    identitySourceName: "string",
    conditionId: "string",
    conditionDictionaryName: "string",
    conditionAttributeValue: "string",
    name: "string",
    conditionAttributeName: "string",
    rank: 0,
    state: "string",
});

    type: ise:deviceadmin:AuthenticationRule
properties:
    childrens:
        - attributeName: string
          attributeValue: string
          childrens:
            - attributeName: string
              attributeValue: string
              conditionType: string
              dictionaryName: string
              dictionaryValue: string
              id: string
              isNegate: false
              operator: string
          conditionType: string
          dictionaryName: string
          dictionaryValue: string
          id: string
          isNegate: false
          operator: string
    conditionAttributeName: string
    conditionAttributeValue: string
    conditionDictionaryName: string
    conditionDictionaryValue: string
    conditionId: string
    conditionIsNegate: false
    conditionOperator: string
    conditionType: string
    default: false
    identitySourceName: string
    ifAuthFail: string
    ifProcessFail: string
    ifUserNotFound: string
    name: string
    policySetId: string
    rank: 0
    state: string

    AuthenticationRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthenticationRule resource accepts the following input properties:

    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    PolicySetId string
    Policy set ID
    Childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    PolicySetId string
    Policy set ID
    Childrens []AuthenticationRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policySetId String
    Policy set ID
    childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default_ Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    ifAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policySetId string
    Policy set ID
    childrens AuthenticationRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default boolean
    Indicates if this rule is the default one
    identitySourceName string
    Identity source name from the identity stores
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    if_auth_fail str
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    if_process_fail str
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    if_user_not_found str
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policy_set_id str
    Policy set ID
    childrens Sequence[AuthenticationRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default bool
    Indicates if this rule is the default one
    identity_source_name str
    Identity source name from the identity stores
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    policySetId String
    Policy set ID
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthenticationRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AuthenticationRule Resource

    Get an existing AuthenticationRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthenticationRuleState, opts?: CustomResourceOptions): AuthenticationRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        childrens: Optional[Sequence[AuthenticationRuleChildrenArgs]] = None,
        condition_attribute_name: Optional[str] = None,
        condition_attribute_value: Optional[str] = None,
        condition_dictionary_name: Optional[str] = None,
        condition_dictionary_value: Optional[str] = None,
        condition_id: Optional[str] = None,
        condition_is_negate: Optional[bool] = None,
        condition_operator: Optional[str] = None,
        condition_type: Optional[str] = None,
        default: Optional[bool] = None,
        identity_source_name: Optional[str] = None,
        if_auth_fail: Optional[str] = None,
        if_process_fail: Optional[str] = None,
        if_user_not_found: Optional[str] = None,
        name: Optional[str] = None,
        policy_set_id: Optional[str] = None,
        rank: Optional[int] = None,
        state: Optional[str] = None) -> AuthenticationRule
    func GetAuthenticationRule(ctx *Context, name string, id IDInput, state *AuthenticationRuleState, opts ...ResourceOption) (*AuthenticationRule, error)
    public static AuthenticationRule Get(string name, Input<string> id, AuthenticationRuleState? state, CustomResourceOptions? opts = null)
    public static AuthenticationRule get(String name, Output<String> id, AuthenticationRuleState state, CustomResourceOptions options)
    resources:  _:    type: ise:deviceadmin:AuthenticationRule    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    PolicySetId string
    Policy set ID
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    Childrens []AuthenticationRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Default bool
    Indicates if this rule is the default one
    IdentitySourceName string
    Identity source name from the identity stores
    IfAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    IfProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    IfUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    PolicySetId string
    Policy set ID
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<AuthenticationRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default_ Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policySetId String
    Policy set ID
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens AuthenticationRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default boolean
    Indicates if this rule is the default one
    identitySourceName string
    Identity source name from the identity stores
    ifAuthFail string
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail string
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound string
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policySetId string
    Policy set ID
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens Sequence[AuthenticationRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default bool
    Indicates if this rule is the default one
    identity_source_name str
    Identity source name from the identity stores
    if_auth_fail str
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    if_process_fail str
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    if_user_not_found str
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policy_set_id str
    Policy set ID
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    default Boolean
    Indicates if this rule is the default one
    identitySourceName String
    Identity source name from the identity stores
    ifAuthFail String
    Action to perform when authentication fails such as Bad credentials, disabled user and so on - Choices: REJECT, DROP, CONTINUE
    ifProcessFail String
    Action to perform when ISE is unable to access the identity database - Choices: REJECT, DROP, CONTINUE
    ifUserNotFound String
    Action to perform when user is not found in any of identity stores - Choices: REJECT, DROP, CONTINUE
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    policySetId String
    Policy set ID
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Supporting Types

    AuthenticationRuleChildren, AuthenticationRuleChildrenArgs

    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens List<AuthenticationRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens []AuthenticationRuleChildrenChildren
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<AuthenticationRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    childrens AuthenticationRuleChildrenChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    childrens Sequence[AuthenticationRuleChildrenChildren]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    AuthenticationRuleChildrenChildren, AuthenticationRuleChildrenChildrenArgs

    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    Import

    $ pulumi import ise:deviceadmin/authenticationRule:AuthenticationRule example "76d24097-41c4-4558-a4d0-a8c07ac08470,76d24097-41c4-4558-a4d0-a8c07ac08470"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
    pulumi/pulumi-ise