Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
ise.deviceadmin.getAuthenticationRule
Explore with Pulumi AI
This data source can read the Device Admin Authentication Rule.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";
const example = ise.deviceadmin.getAuthenticationRule({
    id: "76d24097-41c4-4558-a4d0-a8c07ac08470",
    policySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
});
import pulumi
import pulumi_ise as ise
example = ise.deviceadmin.get_authentication_rule(id="76d24097-41c4-4558-a4d0-a8c07ac08470",
    policy_set_id="d82952cb-b901-4b09-b363-5ebf39bdbaf9")
package main
import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/deviceadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := deviceadmin.LookupAuthenticationRule(ctx, &deviceadmin.LookupAuthenticationRuleArgs{
			Id:          pulumi.StringRef("76d24097-41c4-4558-a4d0-a8c07ac08470"),
			PolicySetId: "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;
return await Deployment.RunAsync(() => 
{
    var example = Ise.DeviceAdmin.GetAuthenticationRule.Invoke(new()
    {
        Id = "76d24097-41c4-4558-a4d0-a8c07ac08470",
        PolicySetId = "d82952cb-b901-4b09-b363-5ebf39bdbaf9",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.deviceadmin.DeviceadminFunctions;
import com.pulumi.ise.deviceadmin.inputs.GetAuthenticationRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = DeviceadminFunctions.getAuthenticationRule(GetAuthenticationRuleArgs.builder()
            .id("76d24097-41c4-4558-a4d0-a8c07ac08470")
            .policySetId("d82952cb-b901-4b09-b363-5ebf39bdbaf9")
            .build());
    }
}
variables:
  example:
    fn::invoke:
      function: ise:deviceadmin:getAuthenticationRule
      arguments:
        id: 76d24097-41c4-4558-a4d0-a8c07ac08470
        policySetId: d82952cb-b901-4b09-b363-5ebf39bdbaf9
Using getAuthenticationRule
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAuthenticationRule(args: GetAuthenticationRuleArgs, opts?: InvokeOptions): Promise<GetAuthenticationRuleResult>
function getAuthenticationRuleOutput(args: GetAuthenticationRuleOutputArgs, opts?: InvokeOptions): Output<GetAuthenticationRuleResult>def get_authentication_rule(id: Optional[str] = None,
                            name: Optional[str] = None,
                            policy_set_id: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetAuthenticationRuleResult
def get_authentication_rule_output(id: Optional[pulumi.Input[str]] = None,
                            name: Optional[pulumi.Input[str]] = None,
                            policy_set_id: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetAuthenticationRuleResult]func LookupAuthenticationRule(ctx *Context, args *LookupAuthenticationRuleArgs, opts ...InvokeOption) (*LookupAuthenticationRuleResult, error)
func LookupAuthenticationRuleOutput(ctx *Context, args *LookupAuthenticationRuleOutputArgs, opts ...InvokeOption) LookupAuthenticationRuleResultOutput> Note: This function is named LookupAuthenticationRule in the Go SDK.
public static class GetAuthenticationRule 
{
    public static Task<GetAuthenticationRuleResult> InvokeAsync(GetAuthenticationRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetAuthenticationRuleResult> Invoke(GetAuthenticationRuleInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetAuthenticationRuleResult> getAuthenticationRule(GetAuthenticationRuleArgs args, InvokeOptions options)
public static Output<GetAuthenticationRuleResult> getAuthenticationRule(GetAuthenticationRuleArgs args, InvokeOptions options)
fn::invoke:
  function: ise:deviceadmin/getAuthenticationRule:getAuthenticationRule
  arguments:
    # arguments dictionaryThe following arguments are supported:
- PolicySet stringId 
- Policy set ID
- Id string
- The id of the object
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- PolicySet stringId 
- Policy set ID
- Id string
- The id of the object
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policySet StringId 
- Policy set ID
- id String
- The id of the object
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policySet stringId 
- Policy set ID
- id string
- The id of the object
- name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy_set_ strid 
- Policy set ID
- id str
- The id of the object
- name str
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policySet StringId 
- Policy set ID
- id String
- The id of the object
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
getAuthenticationRule Result
The following output properties are available:
- Childrens
List<GetAuthentication Rule Children> 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- ConditionAttribute stringName 
- Dictionary attribute name
- ConditionAttribute stringValue 
- Attribute value for condition. Value type is specified in dictionary object.
- ConditionDictionary stringName 
- Dictionary name
- ConditionDictionary stringValue 
- Dictionary value
- ConditionId string
- UUID for condition
- ConditionIs boolNegate 
- Indicates whereas this condition is in negate mode
- ConditionOperator string
- Equality operator
- ConditionType string
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- Default bool
- Indicates if this rule is the default one
- Id string
- The id of the object
- IdentitySource stringName 
- Identity source name from the identity stores
- IfAuth stringFail 
- Action to perform when authentication fails such as Bad credentials, disabled user and so on
- IfProcess stringFail 
- Action to perform when ISE is unable to access the identity database
- IfUser stringNot Found 
- Action to perform when user is not found in any of identity stores
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- PolicySet stringId 
- Policy set ID
- Rank int
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- State string
- The state that the rule is in. A disabled rule cannot be matched.
- Childrens
[]GetAuthentication Rule Children 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- ConditionAttribute stringName 
- Dictionary attribute name
- ConditionAttribute stringValue 
- Attribute value for condition. Value type is specified in dictionary object.
- ConditionDictionary stringName 
- Dictionary name
- ConditionDictionary stringValue 
- Dictionary value
- ConditionId string
- UUID for condition
- ConditionIs boolNegate 
- Indicates whereas this condition is in negate mode
- ConditionOperator string
- Equality operator
- ConditionType string
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- Default bool
- Indicates if this rule is the default one
- Id string
- The id of the object
- IdentitySource stringName 
- Identity source name from the identity stores
- IfAuth stringFail 
- Action to perform when authentication fails such as Bad credentials, disabled user and so on
- IfProcess stringFail 
- Action to perform when ISE is unable to access the identity database
- IfUser stringNot Found 
- Action to perform when user is not found in any of identity stores
- Name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- PolicySet stringId 
- Policy set ID
- Rank int
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- State string
- The state that the rule is in. A disabled rule cannot be matched.
- childrens
List<GetAuthentication Rule Children> 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- conditionAttribute StringName 
- Dictionary attribute name
- conditionAttribute StringValue 
- Attribute value for condition. Value type is specified in dictionary object.
- conditionDictionary StringName 
- Dictionary name
- conditionDictionary StringValue 
- Dictionary value
- conditionId String
- UUID for condition
- conditionIs BooleanNegate 
- Indicates whereas this condition is in negate mode
- conditionOperator String
- Equality operator
- conditionType String
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default_ Boolean
- Indicates if this rule is the default one
- id String
- The id of the object
- identitySource StringName 
- Identity source name from the identity stores
- ifAuth StringFail 
- Action to perform when authentication fails such as Bad credentials, disabled user and so on
- ifProcess StringFail 
- Action to perform when ISE is unable to access the identity database
- ifUser StringNot Found 
- Action to perform when user is not found in any of identity stores
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policySet StringId 
- Policy set ID
- rank Integer
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state String
- The state that the rule is in. A disabled rule cannot be matched.
- childrens
GetAuthentication Rule Children[] 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- conditionAttribute stringName 
- Dictionary attribute name
- conditionAttribute stringValue 
- Attribute value for condition. Value type is specified in dictionary object.
- conditionDictionary stringName 
- Dictionary name
- conditionDictionary stringValue 
- Dictionary value
- conditionId string
- UUID for condition
- conditionIs booleanNegate 
- Indicates whereas this condition is in negate mode
- conditionOperator string
- Equality operator
- conditionType string
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default boolean
- Indicates if this rule is the default one
- id string
- The id of the object
- identitySource stringName 
- Identity source name from the identity stores
- ifAuth stringFail 
- Action to perform when authentication fails such as Bad credentials, disabled user and so on
- ifProcess stringFail 
- Action to perform when ISE is unable to access the identity database
- ifUser stringNot Found 
- Action to perform when user is not found in any of identity stores
- name string
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policySet stringId 
- Policy set ID
- rank number
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state string
- The state that the rule is in. A disabled rule cannot be matched.
- childrens
Sequence[GetAuthentication Rule Children] 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- condition_attribute_ strname 
- Dictionary attribute name
- condition_attribute_ strvalue 
- Attribute value for condition. Value type is specified in dictionary object.
- condition_dictionary_ strname 
- Dictionary name
- condition_dictionary_ strvalue 
- Dictionary value
- condition_id str
- UUID for condition
- condition_is_ boolnegate 
- Indicates whereas this condition is in negate mode
- condition_operator str
- Equality operator
- condition_type str
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default bool
- Indicates if this rule is the default one
- id str
- The id of the object
- identity_source_ strname 
- Identity source name from the identity stores
- if_auth_ strfail 
- Action to perform when authentication fails such as Bad credentials, disabled user and so on
- if_process_ strfail 
- Action to perform when ISE is unable to access the identity database
- if_user_ strnot_ found 
- Action to perform when user is not found in any of identity stores
- name str
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policy_set_ strid 
- Policy set ID
- rank int
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state str
- The state that the rule is in. A disabled rule cannot be matched.
- childrens List<Property Map>
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- conditionAttribute StringName 
- Dictionary attribute name
- conditionAttribute StringValue 
- Attribute value for condition. Value type is specified in dictionary object.
- conditionDictionary StringName 
- Dictionary name
- conditionDictionary StringValue 
- Dictionary value
- conditionId String
- UUID for condition
- conditionIs BooleanNegate 
- Indicates whereas this condition is in negate mode
- conditionOperator String
- Equality operator
- conditionType String
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- default Boolean
- Indicates if this rule is the default one
- id String
- The id of the object
- identitySource StringName 
- Identity source name from the identity stores
- ifAuth StringFail 
- Action to perform when authentication fails such as Bad credentials, disabled user and so on
- ifProcess StringFail 
- Action to perform when ISE is unable to access the identity database
- ifUser StringNot Found 
- Action to perform when user is not found in any of identity stores
- name String
- Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
- policySet StringId 
- Policy set ID
- rank Number
- The rank (priority) in relation to other rules. Lower rank is higher priority.
- state String
- The state that the rule is in. A disabled rule cannot be matched.
Supporting Types
GetAuthenticationRuleChildren   
- AttributeName string
- Dictionary attribute name
- AttributeValue string
- Attribute value for condition. Value type is specified in dictionary object.
- Childrens
List<GetAuthentication Rule Children Children> 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- ConditionType string
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- DictionaryName string
- Dictionary name
- DictionaryValue string
- Dictionary value
- Id string
- UUID for condition
- IsNegate bool
- Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- AttributeName string
- Dictionary attribute name
- AttributeValue string
- Attribute value for condition. Value type is specified in dictionary object.
- Childrens
[]GetAuthentication Rule Children Children 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- ConditionType string
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- DictionaryName string
- Dictionary name
- DictionaryValue string
- Dictionary value
- Id string
- UUID for condition
- IsNegate bool
- Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- attributeName String
- Dictionary attribute name
- attributeValue String
- Attribute value for condition. Value type is specified in dictionary object.
- childrens
List<GetAuthentication Rule Children Children> 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- conditionType String
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionaryName String
- Dictionary name
- dictionaryValue String
- Dictionary value
- id String
- UUID for condition
- isNegate Boolean
- Indicates whereas this condition is in negate mode
- operator String
- Equality operator
- attributeName string
- Dictionary attribute name
- attributeValue string
- Attribute value for condition. Value type is specified in dictionary object.
- childrens
GetAuthentication Rule Children Children[] 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- conditionType string
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionaryName string
- Dictionary name
- dictionaryValue string
- Dictionary value
- id string
- UUID for condition
- isNegate boolean
- Indicates whereas this condition is in negate mode
- operator string
- Equality operator
- attribute_name str
- Dictionary attribute name
- attribute_value str
- Attribute value for condition. Value type is specified in dictionary object.
- childrens
Sequence[GetAuthentication Rule Children Children] 
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- condition_type str
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionary_name str
- Dictionary name
- dictionary_value str
- Dictionary value
- id str
- UUID for condition
- is_negate bool
- Indicates whereas this condition is in negate mode
- operator str
- Equality operator
- attributeName String
- Dictionary attribute name
- attributeValue String
- Attribute value for condition. Value type is specified in dictionary object.
- childrens List<Property Map>
- List of child conditions. condition_typemust be one ofConditionAndBlockorConditionOrBlock.
- conditionType String
- Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- dictionaryName String
- Dictionary name
- dictionaryValue String
- Dictionary value
- id String
- UUID for condition
- isNegate Boolean
- Indicates whereas this condition is in negate mode
- operator String
- Equality operator
GetAuthenticationRuleChildrenChildren    
- AttributeName string
- Dictionary attribute name
- AttributeValue string
- Attribute value for condition. Value type is specified in dictionary object.
- ConditionType string
- Condition type.
- DictionaryName string
- Dictionary name
- DictionaryValue string
- Dictionary value
- Id string
- UUID for condition
- IsNegate bool
- Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- AttributeName string
- Dictionary attribute name
- AttributeValue string
- Attribute value for condition. Value type is specified in dictionary object.
- ConditionType string
- Condition type.
- DictionaryName string
- Dictionary name
- DictionaryValue string
- Dictionary value
- Id string
- UUID for condition
- IsNegate bool
- Indicates whereas this condition is in negate mode
- Operator string
- Equality operator
- attributeName String
- Dictionary attribute name
- attributeValue String
- Attribute value for condition. Value type is specified in dictionary object.
- conditionType String
- Condition type.
- dictionaryName String
- Dictionary name
- dictionaryValue String
- Dictionary value
- id String
- UUID for condition
- isNegate Boolean
- Indicates whereas this condition is in negate mode
- operator String
- Equality operator
- attributeName string
- Dictionary attribute name
- attributeValue string
- Attribute value for condition. Value type is specified in dictionary object.
- conditionType string
- Condition type.
- dictionaryName string
- Dictionary name
- dictionaryValue string
- Dictionary value
- id string
- UUID for condition
- isNegate boolean
- Indicates whereas this condition is in negate mode
- operator string
- Equality operator
- attribute_name str
- Dictionary attribute name
- attribute_value str
- Attribute value for condition. Value type is specified in dictionary object.
- condition_type str
- Condition type.
- dictionary_name str
- Dictionary name
- dictionary_value str
- Dictionary value
- id str
- UUID for condition
- is_negate bool
- Indicates whereas this condition is in negate mode
- operator str
- Equality operator
- attributeName String
- Dictionary attribute name
- attributeValue String
- Attribute value for condition. Value type is specified in dictionary object.
- conditionType String
- Condition type.
- dictionaryName String
- Dictionary name
- dictionaryValue String
- Dictionary value
- id String
- UUID for condition
- isNegate Boolean
- Indicates whereas this condition is in negate mode
- operator String
- Equality operator
Package Details
- Repository
- ise pulumi/pulumi-ise
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the iseTerraform Provider.
