cisco.ise.authorization_profile – Resource module for Authorization Profile
Note
This plugin is part of the cisco.ise collection (version 2.1.0).
You might already have this collection installed if you are using the ansible package.
It is not included in ansible-core.
To check whether it is installed, run ansible-galaxy collection list.
To install it, use: ansible-galaxy collection install cisco.ise.
To use it in a playbook, specify: cisco.ise.authorization_profile.
New in version 1.0.0: of cisco.ise
Synopsis
Manage operations create, update and delete of the resource Authorization Profile.
Note
This module has a corresponding action plugin.
Requirements
The below requirements are needed on the host that executes this module.
ciscoisesdk >= 1.3.0
python >= 3.5
Parameters
Notes
Note
Does not support
check_modeThe plugin runs on the control node and does not use any ansible connection plugins, but instead the embedded connection manager from Cisco ISE SDK
The parameters starting with ise_ are used by the Cisco ISE Python SDK to establish the connection
See Also
See also
- Authorization Profile reference
Complete reference of the Authorization Profile object model.
Examples
- name: Update by id
cisco.ise.authorization_profile:
ise_hostname: "{{ise_hostname}}"
ise_username: "{{ise_username}}"
ise_password: "{{ise_password}}"
ise_verify: "{{ise_verify}}"
state: present
accessType: string
acl: string
advancedAttributes:
- leftHandSideDictionaryAttribue:
AdvancedAttributeValueType: string
attributeName: string
dictionaryName: string
value: string
rightHandSideAttribueValue:
AdvancedAttributeValueType: string
attributeName: string
dictionaryName: string
value: string
agentlessPosture: true
airespaceACL: string
airespaceIPv6ACL: string
asaVpn: string
authzProfileType: string
autoSmartPort: string
avcProfile: string
daclName: string
description: string
easywiredSessionCandidate: true
id: string
interfaceTemplate: string
ipv6ACLFilter: string
ipv6DaclName: string
macSecPolicy: string
name: string
neat: true
profileName: string
reauth:
connectivity: string
timer: 0
serviceTemplate: true
trackMovement: true
vlan:
nameID: string
tagID: 0
voiceDomainPermission: true
webAuth: true
webRedirection:
WebRedirectionType: string
acl: string
displayCertificatesRenewalMessages: true
portalName: string
staticIPHostNameFQDN: string
- name: Delete by id
cisco.ise.authorization_profile:
ise_hostname: "{{ise_hostname}}"
ise_username: "{{ise_username}}"
ise_password: "{{ise_password}}"
ise_verify: "{{ise_verify}}"
state: absent
id: string
- name: Create
cisco.ise.authorization_profile:
ise_hostname: "{{ise_hostname}}"
ise_username: "{{ise_username}}"
ise_password: "{{ise_password}}"
ise_verify: "{{ise_verify}}"
state: present
accessType: string
acl: string
advancedAttributes:
- leftHandSideDictionaryAttribue:
AdvancedAttributeValueType: string
attributeName: string
dictionaryName: string
value: string
rightHandSideAttribueValue:
AdvancedAttributeValueType: string
attributeName: string
dictionaryName: string
value: string
agentlessPosture: true
airespaceACL: string
airespaceIPv6ACL: string
asaVpn: string
authzProfileType: string
autoSmartPort: string
avcProfile: string
daclName: string
description: string
easywiredSessionCandidate: true
id: string
interfaceTemplate: string
ipv6ACLFilter: string
ipv6DaclName: string
macSecPolicy: string
name: string
neat: true
profileName: string
reauth:
connectivity: string
timer: 0
serviceTemplate: true
trackMovement: true
vlan:
nameID: string
tagID: 0
voiceDomainPermission: true
webAuth: true
webRedirection:
WebRedirectionType: string
acl: string
displayCertificatesRenewalMessages: true
portalName: string
staticIPHostNameFQDN: string
Return Values
Common return values are documented here, the following are the fields unique to this module:
Authors
Rafael Campos (@racampos)