aam authorization policy attribute

Authorization-policy attribute configuration

attribute Specification

Type Collection
Object Key(s) attr-num
Collection Name attribute-list
Collection URI /axapi/v3/aam/authorization/policy/{name}/attribute/
Element Name attribute
Element URI /axapi/v3/aam/authorization/policy/{name}/attribute/{attr-num}
Element Attributes attribute_attributes
Schema attribute schema

Operations Allowed:

Operation Method URI Payload

Create Object

POST

/axapi/v3/aam/authorization/policy/{name}/attribute/

attribute Attributes

Create List

POST

/axapi/v3/aam/authorization/policy/{name}/attribute/

attribute Attributes

Get Object

GET

/axapi/v3/aam/authorization/policy/{name}/attribute/{attr-num}

attribute Attributes

Get List

GET

/axapi/v3/aam/authorization/policy/{name}/attribute/

attribute-list

Modify Object

POST

/axapi/v3/aam/authorization/policy/{name}/attribute/{attr-num}

attribute Attributes

Replace Object

PUT

/axapi/v3/aam/authorization/policy/{name}/attribute/{attr-num}

attribute Attributes

Replace List

PUT

/axapi/v3/aam/authorization/policy/{name}/attribute/

attribute-list

Delete Object

DELETE

/axapi/v3/aam/authorization/policy/{name}/attribute/{attr-num}

attribute Attributes

attribute-list

attribute-list is JSON List of attribute Attributes

attribute-list : [

attribute Attributes

A10-AX-AUTH-URI

Description: Custom-defined attribute

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: A10-AX-AUTH-URI and attribute-name are mutually exclusive

a10-dynamic-defined

Description: The value of this custom attribute will depend on the ACOS configuration instead of user configuration.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

attr-int

Description: Comparison to perform for use with integer-type data:

  • equal : Operation type is equal.
  • not-equal : Operation type is not equal to the attribute value.
  • less-than : Operation type is less than the attribute value.
  • more-than : Operation type is more than the attribute value.
  • less-than-equal-to : Operation type is less than or equal to the attribute value.
  • more-than-equal-to : Operation type is more than or equal to the attribute value.

Type: string

Supported Values: equal, not-equal, less-than, more-than, less-than-equal-to, more-than-equal-to

attr-int-val

Description: Set the attribute value for comparison with attr-int .

Type: number

Range: 0-4294967295

attr-ip

Description: ‘equal’: Operation type is equal; ‘not-equal’: Operation type is not-equal;

Type: string

Supported Values: equal, not-equal

attr-ipv4

Description: IPv4 address

Type: string

Format: ipv4-address

attr-num

Description: Set attribute ID for authorization policy

Type: number

Range: 1-32

Required: Yes

attr-str

Description: Comparison to perform for use with string-type data:

  • match : Operation type is a match with the attribute value.
  • sub-string : Operation type is a sub-string of the attribute value.

Type: string

Supported Values: match, sub-string

attr-str-val

Description: Set the attribute value for comparison with attr-str .

Type: string

Format: string-rlx

attr-type

Description: Enable the use of an attribute type.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

attribute-name

Description: Specify an attribute name.

Type: string

Mutual Exclusion: attribute-name and A10-AX-AUTH-URI are mutually exclusive

custom-attr-str

Description: Comparison to perform for use with custom data:

  • match : Operation type is a match with the attribute value.
  • sub-string : Operation type is a sub-string of the attribute value.

Type: string

Supported Values: match, sub-string

custom-attr-type

Description: Enable the use of a custom attribute type.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

integer-type

Description: Specify that the attribute type is an integer.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: integer-type string-type and ip-type are mutually exclusive

ip-type

Description: IP address is transformed into network byte order

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: ip-type string-type and integer-type are mutually exclusive

string-type

Description: Specify that the attribute type is a string.

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: string-type integer-type and ip-type are mutually exclusive

uuid

Description: uuid of the object

Type: string