-
Notifications
You must be signed in to change notification settings - Fork 0
User Management
Operation ID | Description | ||||
---|---|---|---|---|---|
|
Get info about a role | ||||
|
Assign one or more roles to a user | ||||
|
Revoke one or more roles from a user | ||||
|
Show role IDs for all roles available in your customer account. For more information on each role, provide the role ID to GetRole. | ||||
|
Show role IDs of roles assigned to a user. For more information on each role, provide the role ID to GetRole. | ||||
|
Get info about a user | ||||
|
Create a new user. After creating a user, assign one or more roles with CreateUser | ||||
|
Delete a user permanently | ||||
|
Modify an existing user's first or last name | ||||
|
List the usernames (usually an email address) for all users in your customer account | ||||
|
List user IDs for all users in your customer account. For more information on each user, provide the user ID to RetrieveUser. | ||||
|
Get a user's ID by providing a username (usually an email address) |
Get info about a role
get_roles
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
ids |
|
|
query | string or list of strings | ID of a role. Find a role ID from GetAvailableRoleIds or GetUserRoleIds. |
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.get_roles(ids=id_list)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.GetRoles(ids=id_list)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("GetRoles", ids=id_list)
print(response)
Assign one or more roles to a user
grant_user_role_ids
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
body |
|
|
body | string | Role ID(s) of the role you want to assign. |
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
role_ids |
|
|
body | string or list of strings | Role ID(s) of the role you want to assign. Can also use the keyword roleIds . |
user_uuid |
|
|
query | string | ID of a user. Find a user's ID using RetrieveUserUUID. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.grant_user_role_ids(user_uuid="string", role_ids=id_list)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.GrantUserRoleIds(user_uuid="string", role_ids=id_list)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
BODY = {
"roleIds": [
"string"
]
}
response = falcon.command("GrantUserRoleIds", user_uuid="string", body=BODY)
print(response)
Revoke one or more roles from a user
revoke_user_role_ids
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
ids |
|
|
query | string or list of strings | One or more role IDs to revoke. Find a role's ID using GetAvailableRoleIds. |
user_uuid |
|
|
query | string | ID of a user. Find a user's ID using RetrieveUserUUID. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.revoke_user_role_ids(user_uuid="string", ids=id_list)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.RevokeUserRoleIds(user_uuid="string", ids=id_list)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("RevokeUserRoleIds", user_uuid="string", ids=id_list)
print(response)
Show role IDs for all roles available in your customer account. For more information on each role, provide the role ID to GetRoles.
get_available_role_ids
- Consumes: application/json
- Produces: application/json
No keywords or arguments accepted.
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.get_available_role_ids()
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.GetAvailableRoleIds()
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.command("GetAvailableRoleIds")
print(response)
Show role IDs of roles assigned to a user. For more information on each role, provide the role ID to GetRoles.
get_user_role_ids
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
user_uuid |
|
|
query | string | ID of a user. Find a user's ID using RetrieveUserUUID. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.get_user_role_ids(user_uuid="string")
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.GetUserRoleIds(user_uuid="string")
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.command("GetUserRoleIds", user_uuid="string")
print(response)
Get info about a user
retrieve_user
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
ids |
|
|
query | string or list of strings | ID of a user. Find a user's ID using RetrieveUserUUID. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.retrieve_user(ids=id_list)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.RetrieveUser(ids=id_list)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("RetrieveUser", ids=id_list)
print(response)
Create a new user. After creating a user, assign one or more roles with GrantUserRoleIds.
create_user
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
body |
|
|
body | string | Attributes for this user. uid (required) is the user's email address, which is their username in Falcon. Optional attributes:
password . If single sign-on is enabled for your customer account, the password attribute is ignored. If single sign-on is not enabled, we send a user activation request to their email address when you create the user with no password . The user should use the activation email to set their own password. |
first_name |
|
|
body | string | First name of the user. (Can also use the keyword firstName.) |
last_name |
|
|
body | string | Last name of the user. (Can also use the keyword lastName.) |
password |
|
|
body | string | Assigned password. String. As a best practice, we recommend ommitting password. If single sign-on is enabled for your customer account, the password attribute is ignored. If single sign-on is not enabled, we send a user activation request to their email address when you create the user with no password. The user should use the activation email to set their own password. |
uid |
|
|
body | string | The user's email address, which will be the assigned username. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.create_user(first_name="string",
last_name="string",
uid="[email protected]"
)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.CreateUser(first_name="string",
last_name="string",
uid="[email protected]"
)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
BODY = {
"firstName": "string",
"lastName": "string",
"password": "string",
"uid": "[email protected]"
}
response = falcon.command("CreateUser", body=BODY)
print(response)
Delete a user permanently
delete_user
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
user_uuid |
|
|
query | string | ID of a user. Find a user's ID using RetrieveUserUUID. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.delete_user(user_uuid="string")
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.DeleteUser(user_uuid="string")
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.command("DeleteUser", user_uuid="string")
print(response)
Modify an existing user's first or last name
update_user
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
body |
|
|
body | string | Full body payload in JSON format. |
first_name |
|
|
body | string | First name of the user. (Can also use the keyword firstName.) |
last_name |
|
|
body | string | Last name of the user. (Can also use the keyword lastName.) |
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
user_uuid |
|
|
query | string | The user ID to modify. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.update_user(user_uuid="string",
first_name="string",
last_name="string"
)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.UpdateUser(user_uuid="string",
first_name="string",
last_name="string"
)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
BODY = {
"firstName": "string",
"lastName": "string"
}
response = falcon.command("UpdateUser", user_uuid="string", body=BODY)
print(response)
List the usernames (usually an email address) for all users in your customer account
retrieve_emails_by_cid
- Consumes: application/json
- Produces: application/json
No keywords or arguments accepted.
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.retrieve_emails_by_cid()
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.RetrieveEmailsByCID()
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.command("RetrieveEmailsByCID")
print(response)
List user IDs for all users in your customer account. For more information on each user, provide the user ID to RetrieveUser.
retrieve_user_uuids_by_cid
- Consumes: application/json
- Produces: application/json
No keywords or arguments accepted.
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.retrieve_user_uuids_by_cid()
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.RetrieveUserUUIDsByCID()
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
response = falcon.command("RetrieveUserUUIDsByCID")
print(response)
Get a user's ID by providing a username (usually an email address)
retrieve_user_uuid
- Consumes: application/json
- Produces: application/json
Name | Service | Uber | Type | Datatype | Description |
---|---|---|---|---|---|
parameters |
|
|
query | string | Full query string parameters payload in JSON format. |
uid |
|
|
query | string or list of strings | List of User names to retrieve. |
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.retrieve_user_uuid(uid=id_list)
print(response)
from falconpy import UserManagement
falcon = UserManagement(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.RetrieveUserUUID(uid=id_list)
print(response)
from falconpy import APIHarness
falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
client_secret="API_CLIENT_SECRET_HERE"
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("RetrieveUserUUID", uid=id_list)
print(response)
- Home
- Discussions Board
- Glossary of Terms
- Installation, Upgrades and Removal
- Samples Collection
- Using FalconPy
- API Operations
-
Service Collections
- Alerts
- API Integrations
- ASPM
- Certificate Based Exclusions
- Cloud Connect AWS (deprecated)
- Cloud Snapshots
- Compliance Assessments
- Configuration Assessment
- Configuration Assessment Evaluation Logic
- Container Alerts
- Container Detections
- Container Images
- Container Packages
- Container Vulnerabilities
- CSPM Registration
- Custom IOAs
- Custom Storage
- D4C Registration (deprecated)
- DataScanner
- Delivery Settings
- Detects
- Device Control Policies
- Discover
- Downloads
- Drift Indicators
- Event Streams
- Exposure Management
- Falcon Complete Dashboard
- Falcon Container
- Falcon Intelligence Sandbox
- FDR
- FileVantage
- Firewall Management
- Firewall Policies
- Foundry LogScale
- Host Group
- Host Migration
- Hosts
- Identity Protection
- Image Assessment Policies
- Incidents
- Installation Tokens
- Intel
- IOA Exclusions
- IOC
- IOCs (deprecated)
- Kubernetes Protection
- MalQuery
- Message Center
- ML Exclusions
- Mobile Enrollment
- MSSP (Flight Control)
- OAuth2
- ODS (On Demand Scan)
- Overwatch Dashboard
- Prevention Policy
- Quarantine
- Quick Scan
- Quick Scan Pro
- Real Time Response
- Real Time Response Admin
- Real Time Response Audit
- Recon
- Report Executions
- Response Policies
- Sample Uploads
- Scheduled Reports
- Sensor Download
- Sensor Update Policy
- Sensor Usage
- Sensor Visibility Exclusions
- Spotlight Evaluation Logic
- Spotlight Vulnerabilities
- Tailored Intelligence
- ThreatGraph
- Unidentified Containers
- User Management
- Workflows
- Zero Trust Assessment
- Documentation Support
-
CrowdStrike SDKs
- Crimson Falcon - Ruby
- FalconPy - Python 3
- FalconJS - Javascript
- goFalcon - Go
- PSFalcon - Powershell
- Rusty Falcon - Rust