WALLIX Bastion

Centralized Control and Monitoring of Privileged Access to Sensitive Assets.
This integration was integrated and tested with version 12 of WALLIX Bastion.

Configure WALLIX Bastion in Cortex

Parameter	Required
Server URL (e.g. localhost)	True
API Auth User	True
API Auth Key or user password	False
Password authentication mode (set false if you provided an API key)	False
Trust any certificate (not secure)	False
Use system proxy settings	False
API version to use. Leave the field empty to use the latest API version available.	False
API requests timeout in seconds. The default value is 60 seconds.	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

wab-add-session-target-to-target-group

---

Add a target account to a target group

Base Command

wab-add-session-target-to-target-group

Input

Argument Name	Description	Required
group_id	The group id or name to edit.	Required
account	The account name.	Required
domain	The domain name (for an account or scenario account).	Optional
domain_type	The domain type: local or global (for an account or scenario account).	Optional
device	The device name (null for an application).	Optional
service	The service name (null for an application).	Optional
application	The application name (null for a device).	Optional
session_account_type	‘account’, ‘account_mapping’, ‘interactive_login’ or ‘scenario_account’.	Required

Context Output

There is no context output for this command.

wab-add-password-target-to-target-group

---

Add a password checkout account to a target group

Base Command

wab-add-password-target-to-target-group

Input

Argument Name	Description	Required
group_id	The group id or name to edit.	Required
account	The account name.	Required
domain	The domain name.	Required
domain_type	The domain type: local or global.	Required
device	The device name (null for an application).	Optional
application	The application name (null for a device).	Optional

Context Output

There is no context output for this command.

wab-add-restriction-to-target-group

---

Add a restriction in a targetgroup
category: Target Group Restrictions.

Base Command

wab-add-restriction-to-target-group

Input

Argument Name	Description	Required
group_id	A target group id or name.	Required
action	The restriction type. Possible values are: kill, notify.	Required
rules	the restriction rules.	Required
subprotocol	The restriction subprotocol. Possible values are: SSH_SHELL_SESSION, SSH_REMOTE_COMMAND, SSH_SCP_UP, SSH_SCP_DOWN, SFTP_SESSION, RLOGIN, TELNET, RDP.	Required

Context Output

Path	Type	Description
WAB.add_restriction_in_targetgroup.id	String	id of the created object.

wab-add-timeframe-period

---

Add a period to a timeframe
category: Timeframes.

Base Command

wab-add-timeframe-period

Input

Argument Name	Description	Required
timeframe_id	The timeframe id or name to edit.	Required
start_date	The period start date. Must respect the format “yyyy-mm-dd”.	Required
end_date	The period end date. Must respect the format “yyyy-mm-dd”.	Required
start_time	The period start time. Must respect the format “hh:mm”.	Required
end_time	The period end time. Must respect the format “hh:mm”.	Required
week_days	The period week days. Comma-separated list (use [] for an empty list). Possible values: monday,tuesday,wednesday,thursday,friday,saturday,sunday.	Required

Context Output

There is no context output for this command.

wab-add-global-domain

---

Add a global domain
category: Domains

Base Command

wab-add-global-domain

Input

Argument Name	Description	Required
domain_post_domain_name	The domain name. /:*?”<>|@ are forbidden.	Required
domain_post_domain_real_name	The domain name used for connection to a target.	Optional
domain_post_description	The domain description.	Optional
domain_post_enable_password_change	Enable the change of password on this domain. Possible values are: true, false.	Optional
domain_post_kerberos_kdc	IP address or hostname the KDC.	Optional
domain_post_kerberos_realm	The Kerberos realm.	Optional
domain_post_kerberos_port	The Kerberos port (88 by default).	Optional
domain_post_password_change_policy	The name of password change policy for this domain. (enter null for null value).	Optional
domain_post_password_change_plugin	The name of plugin used to change passwords on this domain. (enter null for null value).	Optional
domain_post_password_change_plugin_parameters	Parameters for the plugin used to change credentials, formatted in json: {"key":"value"}.	Optional
domain_post_ca_private_key	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.	Optional
domain_post_passphrase	The passphrase that was used to encrypt the private key. If provided, it must be between 4 and 1024 characters long.	Optional
domain_post_vault_plugin	The name of vault plugin used to manage all accounts defined on this domain. (enter null for null value).	Optional
domain_post_vault_plugin_parameters	Parameters for the vault plugin, formatted in json: {"key":"value"}.	Optional

Context Output

Path	Type	Description
WAB.add_global_domain.id	String	id of the created object.

wab-get-account-references

---

Get account references
category: Account References

Base Command

wab-get-account-references

Input

Argument Name	Description	Required
account_id	The referenced account id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘key’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.account_reference_get.id	String	The account reference id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.reference_name	String	The reference name. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.description	String	The account reference description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.account	String	The referenced account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.admin_account	String	The administrator account used to change password references Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.domain	String	The name of the domain defining the password change. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.devices.device_name	String	The device name. \ /:*?”<>	@ and space are forbidden.
WAB.account_reference_get.devices.status	String	The status of the last password change on this device, or null it has never been changed.
WAB.account_reference_get.devices.error_date	String	The date/time since which the status is “error”, or null if the status is not “error”.
WAB.account_reference_get.devices.error_description	String	The description of the error, of null if the status is not “error”.

wab-get-account-reference

---

Get account reference
category: Account References

Base Command

wab-get-account-reference

Input

Argument Name	Description	Required
account_id	The referenced account id or name.	Required
reference_id	An account reference id or name. If specified, only this account reference is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.account_reference_get.id	String	The account reference id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.reference_name	String	The reference name. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.description	String	The account reference description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.account	String	The referenced account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.admin_account	String	The administrator account used to change password references Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.domain	String	The name of the domain defining the password change. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_reference_get.devices.device_name	String	The device name. \ /:*?”<>	@ and space are forbidden.
WAB.account_reference_get.devices.status	String	The status of the last password change on this device, or null it has never been changed.
WAB.account_reference_get.devices.error_date	String	The date/time since which the status is “error”, or null if the status is not “error”.
WAB.account_reference_get.devices.error_description	String	The description of the error, of null if the status is not “error”.

wab-change-password-or-ssh-key-of-account

---

Change password or SSH key of an account and propagate changes on the target host. If the body is empty, an automatic password change is performed: the password or the SSH key are changed to a newly generated value, according to the password change policy on the domain. Note: the password change must be enabled on the domain, with a plugin that will be used to change the password on the target host
category: Account Change Password

Base Command

wab-change-password-or-ssh-key-of-account

Input

Argument Name	Description	Required
account_id	The account id.	Required
credential_type	‘password’ to change the password or ‘ssh_key’ to change the SSH key. Possible values are: password, ssh_key.	Required
changePasswordOrSshKeyOfAccount_password	The new password.	Optional
changePasswordOrSshKeyOfAccount_private_key	The new SSH private key.	Optional
changePasswordOrSshKeyOfAccount_passphrase	The passphrase for the SSH private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.	Optional

Context Output

There is no context output for this command.

wab-get-all-accounts

---

Get all accounts
category: Accounts

Base Command

wab-get-all-accounts

Input

Argument Name	Description	Required
account_type	The account type: “global” for only global domain accounts, “device” for only device accounts, “application” for only application accounts. By default accounts of any type are returned. Cannot be used if an account_name and/or device/application is specified.	Optional
application	The name of the application whose accounts must be returned. Cannot be used if an account_name and/or an account_type/device is specified.	Optional
device	The name of the device whose accounts must be returned. Cannot be used if an account_name and/or an application is specified.	Optional
passwords	Return credentials (passwords and SSH keys) as-is without replacing content by stars. Note: this requires the Password Manager license, the flag “Credential recovery” in the profile of the user logged on the API and the “Credential recovery” option must be enabled in REST API configuration. Possible values are: true, false.	Optional
key_format	Format of the returned SSH public key of the account. Accepted values are ‘openssh’ (default value) and ‘ssh.com’.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘account_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.credentials.id	String	The credential id.
WAB.account_get.credentials.type	String	The credential type.
WAB.account_get.credentials.password	String	The account password.
WAB.account_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.account_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.account_get.credentials.public_key	String	The account public key.
WAB.account_get.credentials.key_type	String	The key type.
WAB.account_get.credentials.key_len	Number	The key length.
WAB.account_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.account_get.credentials.certificate	String	The certificate.
WAB.account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.first_seen.id	String	The scan job id.
WAB.account_get.first_seen.type	String	Scan type.
WAB.account_get.first_seen.error	String	Error message.
WAB.account_get.first_seen.status	String	Scan job status.
WAB.account_get.first_seen.start	String	Scan job start timestamp.
WAB.account_get.first_seen.end	String	Scan job end timestamp.
WAB.account_get.last_seen.id	String	The scan job id.
WAB.account_get.last_seen.type	String	Scan type.
WAB.account_get.last_seen.error	String	Error message.
WAB.account_get.last_seen.status	String	Scan job status.
WAB.account_get.last_seen.start	String	Scan job start timestamp.
WAB.account_get.last_seen.end	String	Scan job end timestamp.
WAB.account_get.resources	String	The account resources.
WAB.account_get.services	String	The account services.
WAB.account_get.url	String	The API URL to the resource.

wab-get-one-account

---

Get one account
category: Accounts

Base Command

wab-get-one-account

Input

Argument Name	Description	Required
account_id	An account id or complete name with account name, domain name and device/application name, for example: “Administrator@local@win10”.	Required
account_type	The account type: “global” for only global domain accounts, “device” for only device accounts, “application” for only application accounts. By default accounts of any type are returned. Cannot be used if an account_name and/or device/application is specified.	Optional
application	The name of the application whose accounts must be returned. Cannot be used if an account_name and/or an account_type/device is specified.	Optional
device	The name of the device whose accounts must be returned. Cannot be used if an account_name and/or an application is specified.	Optional
passwords	Return credentials (passwords and SSH keys) as-is without replacing content by stars. Note: this requires the Password Manager license, the flag “Credential recovery” in the profile of the user logged on the API and the “Credential recovery” option must be enabled in REST API configuration. Possible values are: true, false.	Optional
key_format	Format of the returned SSH public key of the account. Accepted values are ‘openssh’ (default value) and ‘ssh.com’.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.credentials.id	String	The credential id.
WAB.account_get.credentials.type	String	The credential type.
WAB.account_get.credentials.password	String	The account password.
WAB.account_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.account_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.account_get.credentials.public_key	String	The account public key.
WAB.account_get.credentials.key_type	String	The key type.
WAB.account_get.credentials.key_len	Number	The key length.
WAB.account_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.account_get.credentials.certificate	String	The certificate.
WAB.account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.account_get.first_seen.id	String	The scan job id.
WAB.account_get.first_seen.type	String	Scan type.
WAB.account_get.first_seen.error	String	Error message.
WAB.account_get.first_seen.status	String	Scan job status.
WAB.account_get.first_seen.start	String	Scan job start timestamp.
WAB.account_get.first_seen.end	String	Scan job end timestamp.
WAB.account_get.last_seen.id	String	The scan job id.
WAB.account_get.last_seen.type	String	Scan type.
WAB.account_get.last_seen.error	String	Error message.
WAB.account_get.last_seen.status	String	Scan job status.
WAB.account_get.last_seen.start	String	Scan job start timestamp.
WAB.account_get.last_seen.end	String	Scan job end timestamp.
WAB.account_get.resources	String	The account resources.
WAB.account_get.services	String	The account services.
WAB.account_get.url	String	The API URL to the resource.

wab-delete-account

---

Delete an account
category: Accounts

Base Command

wab-delete-account

Input

Argument Name	Description	Required
account_id	An account id or complete name with account name, domain name and device/application name, for example: “Administrator@local@win10”.	Required

Context Output

There is no context output for this command.

wab-get-application-account-credentials

---

Get the application account credentials
category: Application Account Credentials

Base Command

wab-get-application-account-credentials

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
q	Searches for a resource matching parameters. The search is performed on the field ‘type’ only.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘type’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.app_account_credential_get.id	String	The credential id. Usable in the “sort” parameter.
WAB.app_account_credential_get.type	String	The credential type. Usable in the “sort” parameter.
WAB.app_account_credential_get.url	String	The API URL to the resource.

wab-add-credential-to-application-account

---

Add a credential to an application account on a local domain
category: Application Account Credentials

Base Command

wab-add-credential-to-application-account

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
app_account_credential_post_password	The account password.	Optional

Context Output

Path	Type	Description
WAB.add_credential_to_application_account.id	String	id of the created object.

wab-get-application-account-credential

---

Get the application account credential
category: Application Account Credentials

Base Command

wab-get-application-account-credential

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
credential_id	The credential id.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.app_account_credential_get.id	String	The credential id. Usable in the “sort” parameter.
WAB.app_account_credential_get.type	String	The credential type. Usable in the “sort” parameter.
WAB.app_account_credential_get.url	String	The API URL to the resource.

wab-edit-credential-of-application-account

---

Edit a credential of an application account on a local domain
category: Application Account Credentials

Base Command

wab-edit-credential-of-application-account

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
credential_id	The credential id to edit.	Required
app_account_credential_put_password	The account password.	Optional

Context Output

There is no context output for this command.

wab-get-application-accounts

---

Get the application accounts
category: Application Accounts

Base Command

wab-get-application-accounts

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘account_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.app_account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.credentials.id	String	The credential id.
WAB.app_account_get.credentials.type	String	The credential type.
WAB.app_account_get.credentials.password	String	The account password.
WAB.app_account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.app_account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.app_account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.first_seen.id	String	The scan job id.
WAB.app_account_get.first_seen.type	String	Scan type.
WAB.app_account_get.first_seen.error	String	Error message.
WAB.app_account_get.first_seen.status	String	Scan job status.
WAB.app_account_get.first_seen.start	String	Scan job start timestamp.
WAB.app_account_get.first_seen.end	String	Scan job end timestamp.
WAB.app_account_get.last_seen.id	String	The scan job id.
WAB.app_account_get.last_seen.type	String	Scan type.
WAB.app_account_get.last_seen.error	String	Error message.
WAB.app_account_get.last_seen.status	String	Scan job status.
WAB.app_account_get.last_seen.start	String	Scan job start timestamp.
WAB.app_account_get.last_seen.end	String	Scan job end timestamp.
WAB.app_account_get.url	String	The API URL to the resource.

wab-add-account-to-local-domain-of-application

---

Add an account to a local domain of an application
category: Application Accounts

Base Command

wab-add-account-to-local-domain-of-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
app_account_post_account_name	The account name. /:*?”<>|@ and space are forbidden.	Required
app_account_post_account_login	The account login.	Required
app_account_post_description	The account description.	Optional
app_account_post_auto_change_password	Automatically change the password. It is enabled by default on a new account. Possible values are: true, false.	Optional
app_account_post_checkout_policy	The account checkout policy.	Required
app_account_post_certificate_validity	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.	Optional
app_account_post_can_edit_certificate_validity	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise. Possible values are: true, false.	Optional

Context Output

Path	Type	Description
WAB.add_account_to_local_domain_of_application.id	String	id of the created object.

wab-get-application-account

---

Get the application account
category: Application Accounts

Base Command

wab-get-application-account

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.app_account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.credentials.id	String	The credential id.
WAB.app_account_get.credentials.type	String	The credential type.
WAB.app_account_get.credentials.password	String	The account password.
WAB.app_account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.app_account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.app_account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.app_account_get.first_seen.id	String	The scan job id.
WAB.app_account_get.first_seen.type	String	Scan type.
WAB.app_account_get.first_seen.error	String	Error message.
WAB.app_account_get.first_seen.status	String	Scan job status.
WAB.app_account_get.first_seen.start	String	Scan job start timestamp.
WAB.app_account_get.first_seen.end	String	Scan job end timestamp.
WAB.app_account_get.last_seen.id	String	The scan job id.
WAB.app_account_get.last_seen.type	String	Scan type.
WAB.app_account_get.last_seen.error	String	Error message.
WAB.app_account_get.last_seen.status	String	Scan job status.
WAB.app_account_get.last_seen.start	String	Scan job start timestamp.
WAB.app_account_get.last_seen.end	String	Scan job end timestamp.
WAB.app_account_get.url	String	The API URL to the resource.

wab-edit-account-on-local-domain-of-application

---

Edit an account on a local domain of an application
category: Application Accounts

Base Command

wab-edit-account-on-local-domain-of-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name to edit.	Required
force	The default value is false. When it is set to true the values of the credentials and services, if they are supplied, are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
app_account_put_account_name	The account name. /:*?”<>|@ and space are forbidden.	Optional
app_account_put_account_login	The account login.	Optional
app_account_put_description	The account description.	Optional
app_account_put_auto_change_password	Automatically change the password. It is enabled by default on a new account. Possible values are: true, false.	Optional
app_account_put_checkout_policy	The account checkout policy.	Optional
app_account_put_certificate_validity	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.	Optional
app_account_put_can_edit_certificate_validity	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise. Possible values are: true, false.	Optional
app_account_put_onboard_status	Onboarding status of the account. Possible values are: onboarded, to_onboard, hide, manual.	Optional

Context Output

There is no context output for this command.

wab-delete-account-from-local-domain-of-application

---

Delete an account from a local domain of an application
category: Application Accounts

Base Command

wab-delete-account-from-local-domain-of-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-local-domains-data-for-application

---

Get local domains data for a given application
category: Application Local Domains

Base Command

wab-get-local-domains-data-for-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘domain_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.localdomain_app_get.id	String	The domain id. Usable in the “q” parameter.
WAB.localdomain_app_get.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_app_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_app_get.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.localdomain_app_get.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.localdomain_app_get.password_change_policy	String	The name of password change policy for this domain.
WAB.localdomain_app_get.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.localdomain_app_get.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.localdomain_app_get.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.localdomain_app_get.url	String	The API URL to the resource.

wab-add-local-domain-in-application

---

Add a local domain in an application
category: Application Local Domains

Base Command

wab-add-local-domain-in-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
localdomain_app_post_domain_name	The domain name. /:*?”<>|@ are forbidden.	Required
localdomain_app_post_description	The domain description.	Optional
localdomain_app_post_enable_password_change	Enable the change of password on this domain. Possible values are: true, false.	Optional
localdomain_app_post_password_change_policy	The name of password change policy for this domain. (enter null for null value).	Optional
localdomain_app_post_password_change_plugin	The name of plugin used to change passwords on this domain. (enter null for null value).	Optional
password_change_plugin_parameters	Parameters for the plugin used to change credentials, formatted in json: {"key":"value"}.	Optional

Context Output

Path	Type	Description
WAB.add_local_domain_in_application.id	String	id of the created object.

wab-get-local-domain-data-for-application

---

Get local domain data for a given application
category: Application Local Domains

Base Command

wab-get-local-domain-data-for-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.localdomain_app_get.id	String	The domain id. Usable in the “q” parameter.
WAB.localdomain_app_get.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_app_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_app_get.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.localdomain_app_get.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.localdomain_app_get.password_change_policy	String	The name of password change policy for this domain.
WAB.localdomain_app_get.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.localdomain_app_get.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.localdomain_app_get.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.localdomain_app_get.url	String	The API URL to the resource.

wab-delete-local-domain-from-application

---

Delete a local domain from an application
category: Application Local Domains

Base Command

wab-delete-local-domain-from-application

Input

Argument Name	Description	Required
application_id	The application id or name.	Required
domain_id	The local domain id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-applications

---

Get the applications
category: Applications

Base Command

wab-get-applications

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘application_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.application_get.id	String	The application id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.application_name	String	The application name. \/:*?”<>	and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.description	String	The application description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.category	String	The application category. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.last_connection	String	The last connection on this application (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.parameters	String	The application parameters. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.local_domains.id	String	The domain id. Usable in the “q” parameter.
WAB.application_get.local_domains.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.local_domains.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.local_domains.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.application_get.local_domains.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.application_get.local_domains.password_change_policy	String	The name of password change policy for this domain.
WAB.application_get.local_domains.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.application_get.local_domains.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.application_get.local_domains.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.application_get.local_domains.url	String	The API URL to the resource.
WAB.application_get.cluster	String	The application cluster/device name.
WAB.application_get.target	String	The application target/cluster name.
WAB.application_get.paths.target	String	The application target.
WAB.application_get.paths.program	String	The application path.
WAB.application_get.paths.working_dir	String	The application working directory.
WAB.application_get.global_domains	String	The global domains names.
WAB.application_get.tags.key	String	The tag key. Must not start or end with a space.
WAB.application_get.tags.value	String	The tag value. Must not start or end with a space.
WAB.application_get.connection_policy	String	The connection policy name. Usable in the “q” parameter.
WAB.application_get.url	String	The API URL to the resource.
WAB.application_get.application_url	String	The application url. Usable in the “q” parameter. Usable in the “sort” parameter.

wab-get-application

---

Get the application
category: Applications

Base Command

wab-get-application

Input

Argument Name	Description	Required
application_id	An application id or name. If specified, only this application is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.application_get.id	String	The application id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.application_name	String	The application name. \/:*?”<>	and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.description	String	The application description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.category	String	The application category. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.last_connection	String	The last connection on this application (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.parameters	String	The application parameters. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.local_domains.id	String	The domain id. Usable in the “q” parameter.
WAB.application_get.local_domains.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.local_domains.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.application_get.local_domains.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.application_get.local_domains.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.application_get.local_domains.password_change_policy	String	The name of password change policy for this domain.
WAB.application_get.local_domains.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.application_get.local_domains.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.application_get.local_domains.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.application_get.local_domains.url	String	The API URL to the resource.
WAB.application_get.cluster	String	The application cluster/device name.
WAB.application_get.target	String	The application target/cluster name.
WAB.application_get.paths.target	String	The application target.
WAB.application_get.paths.program	String	The application path.
WAB.application_get.paths.working_dir	String	The application working directory.
WAB.application_get.global_domains	String	The global domains names.
WAB.application_get.tags.key	String	The tag key. Must not start or end with a space.
WAB.application_get.tags.value	String	The tag value. Must not start or end with a space.
WAB.application_get.connection_policy	String	The connection policy name. Usable in the “q” parameter.
WAB.application_get.url	String	The API URL to the resource.
WAB.application_get.application_url	String	The application url. Usable in the “q” parameter. Usable in the “sort” parameter.

wab-edit-application

---

Edit an application
category: Applications

Base Command

wab-edit-application

Input

Argument Name	Description	Required
application_id	The application id or name to edit.	Required
force	The default value is false. When it is set to true the values of the global_domains and tags are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
application_put_application_name	The application name. \/:*?”<>| and space are forbidden.	Optional
application_put_description	The application description.	Optional
application_put_parameters	The application parameters.	Optional
application_put_global_domains	The global domains names. Comma-separated list (use [] for an empty list).	Optional
application_put_connection_policy	The connection policy name.	Optional

Context Output

There is no context output for this command.

wab-delete-application

---

Delete an application
category: Applications

Base Command

wab-delete-application

Input

Argument Name	Description	Required
application_id	The application id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-approvals

---

Get the approvals
category: Approvals

Base Command

wab-get-approvals

Input

Argument Name	Description	Required
approval_id	An approval id. If specified, only this approval is returned.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘-begin’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.approval_get.id	String	The approval id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.user_name	String	The user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.target_name	String	The target name.(example: account@domain@device:service). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.creation	String	The creation date.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.begin	String	The start date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.end	String	The end date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.duration	Number	The allowed connection time, in minutes. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.ticket	String	The ticket reference. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.comment	String	The request description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.email	String	The user email. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.language	String	The user language code (en, fr, …). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.status	String	The approval status. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.quorum	Number	The quorum to reach. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.answers.approver_name	String	The user name of approver.
WAB.approval_get.answers.date	String	The answer date (format: “yyyy-mm-dd hh:mm”).
WAB.approval_get.answers.comment	String	The answer comment.
WAB.approval_get.answers.approved	Boolean	Request approval (true = accepted, false = rejected).
WAB.approval_get.timeout	Number	Timeout to initiate the first connection (in minutes). After that, the approval will be automatically closed. 0: no timeout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.authorization_name	String	The authorization name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.is_active	Boolean	The approval is active.
WAB.approval_get.account	String	The account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.service	String	The service name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.url	String	The API URL to the resource.

wab-get-approvals-for-all-approvers

---

Get the approvals for a given approver
category: Approvals Assignments

Base Command

wab-get-approvals-for-all-approvers

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘-begin’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.approval_get.id	String	The approval id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.user_name	String	The user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.target_name	String	The target name.(example: account@domain@device:service). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.creation	String	The creation date.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.begin	String	The start date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.end	String	The end date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.duration	Number	The allowed connection time, in minutes. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.ticket	String	The ticket reference. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.comment	String	The request description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.email	String	The user email. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.language	String	The user language code (en, fr, …). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.status	String	The approval status. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.quorum	Number	The quorum to reach. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.answers.approver_name	String	The user name of approver.
WAB.approval_get.answers.date	String	The answer date (format: “yyyy-mm-dd hh:mm”).
WAB.approval_get.answers.comment	String	The answer comment.
WAB.approval_get.answers.approved	Boolean	Request approval (true = accepted, false = rejected).
WAB.approval_get.timeout	Number	Timeout to initiate the first connection (in minutes). After that, the approval will be automatically closed. 0: no timeout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.authorization_name	String	The authorization name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.is_active	Boolean	The approval is active.
WAB.approval_get.account	String	The account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.service	String	The service name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.url	String	The API URL to the resource.

wab-reply-to-approval-request

---

Reply to an approval request (approve/reject it). Note: you can answer to an approval request only if you are in approvers groups of authorization
category: Approvals Assignments

Base Command

wab-reply-to-approval-request

Input

Argument Name	Description	Required
approval_assignment_post_id	The approval id.	Required
approval_assignment_post_comment	The approval comment.	Required
approval_assignment_post_duration	The allowed time range to connect (in minutes).	Optional
approval_assignment_post_timeout	Timeout to initiate the first connection (in minutes). After that, the approval will be automatically closed. 0: no timeout.	Optional
approval_assignment_post_approved	Approve/reject the request. Possible values are: true, false.	Required
approval_assignment_post_is_active	The approval is active. Possible values are: true, false.	Optional
approval_assignment_post_status	The approval status. Possible values are: accepted, cancelled, closed, none, pending, rejected.	Optional

Context Output

Path	Type	Description
WAB.reply_to_approval_request.id	String	id of the created object.

wab-get-approvals-for-approver

---

Get the approvals for a given approver
category: Approvals Assignments

Base Command

wab-get-approvals-for-approver

Input

Argument Name	Description	Required
user_name	The name of a user (approver).	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘-begin’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.approval_get.id	String	The approval id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.user_name	String	The user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.target_name	String	The target name.(example: account@domain@device:service). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.creation	String	The creation date.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.begin	String	The start date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.end	String	The end date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.duration	Number	The allowed connection time, in minutes. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.ticket	String	The ticket reference. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.comment	String	The request description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.email	String	The user email. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.language	String	The user language code (en, fr, …). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.status	String	The approval status. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.quorum	Number	The quorum to reach. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.answers.approver_name	String	The user name of approver.
WAB.approval_get.answers.date	String	The answer date (format: “yyyy-mm-dd hh:mm”).
WAB.approval_get.answers.comment	String	The answer comment.
WAB.approval_get.answers.approved	Boolean	Request approval (true = accepted, false = rejected).
WAB.approval_get.timeout	Number	Timeout to initiate the first connection (in minutes). After that, the approval will be automatically closed. 0: no timeout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.authorization_name	String	The authorization name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.is_active	Boolean	The approval is active.
WAB.approval_get.account	String	The account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.service	String	The service name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.url	String	The API URL to the resource.

wab-cancel-accepted-approval

---

Cancel an accepted approval. Note: you can cancel an approval only if you are in approvers groups of authorization and the end date is still not reached
category: Approvals Assignments

Base Command

wab-cancel-accepted-approval

Input

Argument Name	Description	Required
approval_assignment_cancel_post_id	The approval id.	Required
approval_assignment_cancel_post_comment	The cancel comment.	Required

Context Output

Path	Type	Description
WAB.cancel_accepted_approval.id	String	id of the created object.

wab-notify-approvers-linked-to-approval-assignment

---

Notify approvers linked to an approval request by sending them an email
category: Approvals Assignments

Base Command

wab-notify-approvers-linked-to-approval-assignment

Input

Argument Name	Description	Required
approval_assignment_notify_post_id	The approval id.	Required

Context Output

Path	Type	Description
WAB.approval_assignment_notify_post_response.emails_count	Number	Number of e-mails sent to approvers.
WAB.approval_assignment_notify_post_response.approval_assignment_notify_post_id	String	the approval_assignment_notify_post_id.

wab-get-approval-request-pending-for-user

---

Get the approval request pending for this user (by default the user logged on the REST API), or the approval request with the given id
category: Approvals Requests

Base Command

wab-get-approval-request-pending-for-user

Input

Argument Name	Description	Required
user	(1st option) The name of a user (by default the user logged on the REST API).	Optional
q	(1st option) Searches for a resource matching parameters.	Optional
sort	(1st option) Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘-begin’.	Optional
offset	(1st option) The index of first item to retrieve (starts and defaults to 0).	Optional
limit	(1st option) The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional
approval_id	(2nd option) The approval request id (the ‘id’ returned when the approval was created).	Optional

Context Output

Path	Type	Description
WAB.approval_get.id	String	The approval id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.user_name	String	The user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.target_name	String	The target name.(example: account@domain@device:service). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.creation	String	The creation date.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.begin	String	The start date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.end	String	The end date/time for connection.(format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.duration	Number	The allowed connection time, in minutes. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.ticket	String	The ticket reference. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.comment	String	The request description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.email	String	The user email. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.language	String	The user language code (en, fr, …). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.status	String	The approval status. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.quorum	Number	The quorum to reach. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.answers.approver_name	String	The user name of approver.
WAB.approval_get.answers.date	String	The answer date (format: “yyyy-mm-dd hh:mm”).
WAB.approval_get.answers.comment	String	The answer comment.
WAB.approval_get.answers.approved	Boolean	Request approval (true = accepted, false = rejected).
WAB.approval_get.timeout	Number	Timeout to initiate the first connection (in minutes). After that, the approval will be automatically closed. 0: no timeout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.authorization_name	String	The authorization name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.is_active	Boolean	The approval is active.
WAB.approval_get.account	String	The account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.service	String	The service name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.approval_get.url	String	The API URL to the resource.

wab-make-new-approval-request-to-access-target

---

Make a new approval request to access a target. Note: depending on the authorization settings, the fields “ticket” and “comment” may be required
category: Approvals Requests

Base Command

wab-make-new-approval-request-to-access-target

Input

Argument Name	Description	Required
approval_request_post_target_name	The target name (example: account@domain@device:service).	Required
approval_request_post_authorization	The authorization name.	Optional
approval_request_post_account	The account name.	Optional
approval_request_post_domain	The domain name.	Optional
approval_request_post_device	The device name.	Optional
approval_request_post_application	The application name.	Optional
approval_request_post_service	The service name.	Optional
approval_request_post_ticket	The ticket reference.	Optional
approval_request_post_comment	The request comment.	Optional
approval_request_post_begin	The date/time for connection (format: “yyyy-mm-dd hh:mm”), default is now.	Optional
approval_request_post_duration	The allowed time range to connect (in minutes).	Required

Context Output

Path	Type	Description
WAB.approval_request_post_response_ok.id	String	The new approval id.

wab-cancel-approval-request

---

Cancel an approval request
category: Approvals Requests

Base Command

wab-cancel-approval-request

Input

Argument Name	Description	Required
approval_request_cancel_post_id	The approval id.	Required

Context Output

Path	Type	Description
WAB.cancel_approval_request.id	String	id of the created object.

wab-notify-approvers-linked-to-approval-request

---

Notify approvers linked to an approval request by sending them an email
category: Approvals Requests

Base Command

wab-notify-approvers-linked-to-approval-request

Input

Argument Name	Description	Required
approval_request_notify_post_id	The approval id.	Required

Context Output

Path	Type	Description
WAB.approval_request_notify_post_response.emails_count	Number	Number of e-mails sent to approvers.
WAB.approval_request_notify_post_response.approval_request_notify_post_id	String	the approval_request_notify_post_id.

wab-check-if-approval-is-required-for-target

---

Check if an approval is required for this target (optionally for a given date in future)
category: Approvals Requests Target

Base Command

wab-check-if-approval-is-required-for-target

Input

Argument Name	Description	Required
target_name	The target name (for example ‘account@domain@device:service’).	Required
authorization	The name of the authorization (in case of multiple authorizations to access the target).	Optional
begin	The date/time (in future) for the check, current date/time is used by default (format is ‘yyyy-mm-dd hh:mm’).	Optional

Context Output

Path	Type	Description
WAB.approval_request_target_get.approval	String	Tells whether an approval request is needed to access the target or not: not_authorized = connection is not authorized at all, not_required = connection is allowed without approval request, required = an approval request is required, pending = an approval request is pending, error = internal error.
WAB.approval_request_target_get.message	String	A message with detail about the access to the target.
WAB.approval_request_target_get.id	String	The approval id if an approval request is already pending for this target.

wab-get-mappings-of-domain

---

Get the mappings of a domain
category: Auth Domain Mappings

Base Command

wab-get-mappings-of-domain

Input

Argument Name	Description	Required
domain_id	A domain id or name to retrieve.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘user_group’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authdomain_mapping_get.id	String	The mapping id. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.domain	String	The name of the domain for which the mapping is defined. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.user_group	String	The name of the Bastion users group. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.url	String	The API URL to the resource.

wab-add-mapping-in-domain

---

Add a mapping in a domain and set mapping fallback. If the field “external_group” is set to “*”, it is used as the fallback mapping, which allows mapping of users in the domain that do not belong to the external_group to be mapped to the user_group by default
category: Auth Domain Mappings

Base Command

wab-add-mapping-in-domain

Input

Argument Name	Description	Required
domain_id	A domain id or name.	Required
authdomain_mapping_post_domain	The name of the domain for which the mapping is defined.	Optional
authdomain_mapping_post_user_group	The name of the Bastion users group.	Required
authdomain_mapping_post_external_group	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.	Required

Context Output

Path	Type	Description
WAB.add_mapping_in_domain.id	String	id of the created object.

wab-edit-mappings-of-domain

---

Edit mappings of a domain
category: Auth Domain Mappings

Base Command

wab-edit-mappings-of-domain

Input

Argument Name	Description	Required
domain_id	A domain id or name.	Required
authdomain_mapping_put_domain	The name of the domain for which the mapping is defined.	Optional
authdomain_mapping_put_user_group	The name of the Bastion users group.	Required
authdomain_mapping_put_external_group	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.	Required

Context Output

There is no context output for this command.

wab-get-mapping-of-domain

---

Get the mapping of a domain
category: Auth Domain Mappings

Base Command

wab-get-mapping-of-domain

Input

Argument Name	Description	Required
domain_id	A domain id or name to retrieve.	Required
mapping_id	A mapping id to retrieve. If specified, only this mapping information will be retrieved.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authdomain_mapping_get.id	String	The mapping id. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.domain	String	The name of the domain for which the mapping is defined. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.user_group	String	The name of the Bastion users group. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.url	String	The API URL to the resource.

wab-edit-mapping-of-domain

---

Edit a mapping of a domain
category: Auth Domain Mappings

Base Command

wab-edit-mapping-of-domain

Input

Argument Name	Description	Required
domain_id	A domain id or name.	Required
mapping_id	A mapping id to edit.	Required
authdomain_mapping_put_domain	The name of the domain for which the mapping is defined.	Optional
authdomain_mapping_put_user_group	The name of the Bastion users group.	Required
authdomain_mapping_put_external_group	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.	Required

Context Output

There is no context output for this command.

wab-delete-mapping-of-domain

---

Delete the mapping of the given domain
category: Auth Domain Mappings

Base Command

wab-delete-mapping-of-domain

Input

Argument Name	Description	Required
domain_id	A domain id or name.	Required
mapping_id	A mapping id.	Required

Context Output

There is no context output for this command.

wab-get-auth-domains

---

Get the auth domains
category: Auth Domains

Base Command

wab-get-auth-domains

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘domain_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.auth_domain_get.id	String	The domain id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.domain_name	String	The domain name.\ Only alphanumeric characters, dots (.) and hyphens (-) are allowed \ Length ranges between 3 and 63. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.type	String	The domain type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.is_default	Boolean	The domain is used by default. Usable in the “sort” parameter.
WAB.auth_domain_get.auth_domain_name	String	The auth domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.external_auths	String	The external authentications.
WAB.auth_domain_get.secondary_auth	String	The secondary authentications methods for the auth domain.
WAB.auth_domain_get.default_language	String	The default language. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.default_email_domain	String	The default email domain. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.mappings.id	String	The mapping id.
WAB.auth_domain_get.mappings.domain	String	The name of the domain for which the mapping is defined.
WAB.auth_domain_get.mappings.user_group	String	The name of the Bastion users group.
WAB.auth_domain_get.mappings.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.
WAB.auth_domain_get.certificate_authority	String	The certificate authority name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.enable_ca	Boolean	The value indicate if certificate authority is enabled Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.check_x509_san_email	Boolean	Match the X509v3 SAN email. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.san_domain_name	String	The domain name to match SAN email (only for AD server). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.x509_condition	String	Condition to match a LDAP domain with the X509 certificate variables (only for LDAP server). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.x509_search_filter	String	LDAP search filter for X509 authentication (only for LDAP server). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.group_attribute	String	The group attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.display_name_attribute	String	The display name attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.pubkey_attribute	String	The SSH public key attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.email_attribute	String	The email attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.language_attribute	String	The language attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.url	String	The API URL to the resource.
WAB.auth_domain_get.label	String	The label to display on the login page. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.entity_id	String	The entity (tenant) ID. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.client_id	String	The application (client) ID. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.client_secret	String	The client secret Usable in the “q” parameter.
WAB.auth_domain_get.certificate	String	The client certificate.
WAB.auth_domain_get.private_key	String	The client private key.
WAB.auth_domain_get.idp_initiated_url	String	URL used in Identity Provider (IdP) initiated Single Sign-On (SSO) flows.
WAB.auth_domain_get.force_authn	Boolean	Force SAML authentication on IdP at each login. Usable in the “q” parameter. Usable in the “sort” parameter. / Force authentication on IdP at each login. Usable in the “q” parameter. Usable in the “sort” parameter.

wab-get-auth-domain

---

Get the auth domain
category: Auth Domains

Base Command

wab-get-auth-domain

Input

Argument Name	Description	Required
domain_id	An auth domain id or name to retrieve. If specified, only this auth domain information will be retrieved.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.auth_domain_get.id	String	The domain id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.domain_name	String	The domain name.\ Only alphanumeric characters, dots (.) and hyphens (-) are allowed \ Length ranges between 3 and 63. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.type	String	The domain type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.is_default	Boolean	The domain is used by default. Usable in the “sort” parameter.
WAB.auth_domain_get.auth_domain_name	String	The auth domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.external_auths	String	The external authentications.
WAB.auth_domain_get.secondary_auth	String	The secondary authentications methods for the auth domain.
WAB.auth_domain_get.default_language	String	The default language. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.default_email_domain	String	The default email domain. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.mappings.id	String	The mapping id.
WAB.auth_domain_get.mappings.domain	String	The name of the domain for which the mapping is defined.
WAB.auth_domain_get.mappings.user_group	String	The name of the Bastion users group.
WAB.auth_domain_get.mappings.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.
WAB.auth_domain_get.certificate_authority	String	The certificate authority name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.enable_ca	Boolean	The value indicate if certificate authority is enabled Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.check_x509_san_email	Boolean	Match the X509v3 SAN email. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.san_domain_name	String	The domain name to match SAN email (only for AD server). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.x509_condition	String	Condition to match a LDAP domain with the X509 certificate variables (only for LDAP server). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.x509_search_filter	String	LDAP search filter for X509 authentication (only for LDAP server). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.group_attribute	String	The group attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.display_name_attribute	String	The display name attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.pubkey_attribute	String	The SSH public key attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.email_attribute	String	The email attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.language_attribute	String	The language attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.url	String	The API URL to the resource.
WAB.auth_domain_get.label	String	The label to display on the login page. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.entity_id	String	The entity (tenant) ID. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.client_id	String	The application (client) ID. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.auth_domain_get.client_secret	String	The client secret Usable in the “q” parameter.
WAB.auth_domain_get.certificate	String	The client certificate.
WAB.auth_domain_get.private_key	String	The client private key.
WAB.auth_domain_get.idp_initiated_url	String	URL used in Identity Provider (IdP) initiated Single Sign-On (SSO) flows.
WAB.auth_domain_get.force_authn	Boolean	Force SAML authentication on IdP at each login. Usable in the “q” parameter. Usable in the “sort” parameter. / Force authentication on IdP at each login. Usable in the “q” parameter. Usable in the “sort” parameter.

wab-get-authentications

---

Get the authentications
category: Authentications

Base Command

wab-get-authentications

Input

Argument Name	Description	Required
from_date	Return authentications from this date/time (format: “yyyy-mm-dd” or “yyyy-mm-dd hh:mm:ss”).	Optional
to_date	Return authentications until this date/time (format: “yyyy-mm-dd” or “yyyy-mm-dd hh:mm:ss”).	Optional
date_field	The field used for date comparison: “login” for the login time, “logout” for the logout time.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authentication_get.id	String	The authentication id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.login	String	The user connection date/time (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.logout	String	The user deconnection date/time (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.username	String	The primary user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.domain	String	The user domain. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.source_ip	String	The source IP. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.diagnostic	String	The diagnostic message. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.result	Boolean	The authentication is successful. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.url	String	The API URL to the resource.

wab-get-authentication

---

Get the authentication
category: Authentications

Base Command

wab-get-authentication

Input

Argument Name	Description	Required
auth_id	An authentication id. If specified, only this authentication is returned.	Required
from_date	Return authentications from this date/time (format: “yyyy-mm-dd” or “yyyy-mm-dd hh:mm:ss”).	Optional
to_date	Return authentications until this date/time (format: “yyyy-mm-dd” or “yyyy-mm-dd hh:mm:ss”).	Optional
date_field	The field used for date comparison: “login” for the login time, “logout” for the logout time.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authentication_get.id	String	The authentication id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.login	String	The user connection date/time (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.logout	String	The user deconnection date/time (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.username	String	The primary user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.domain	String	The user domain. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.source_ip	String	The source IP. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.diagnostic	String	The diagnostic message. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.result	Boolean	The authentication is successful. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authentication_get.url	String	The API URL to the resource.

wab-get-authorizations

---

Get the authorizations
category: Authorizations

Base Command

wab-get-authorizations

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authorization_get.id	String	The authorization id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.user_group	String	The user group. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.target_group	String	The target group. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.authorization_name	String	The authorization name. \ /:*?”<>	@& and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.description	String	The authorization description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.subprotocols	String	The authorization subprotocols. It is mandatory if “authorize_sessions” is enabled (default).
WAB.authorization_get.is_critical	Boolean	Define if it’s critical. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.is_recorded	Boolean	Define if it’s recorded. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.authorize_password_retrieval	Boolean	Authorize password retrieval. Enabled by default. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.authorize_sessions	Boolean	Authorize sessions via proxies. Enabled by default. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.approval_required	Boolean	Approval is required to connect to targets. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.has_comment	Boolean	Comment is allowed in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.mandatory_comment	Boolean	Comment is mandatory in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.has_ticket	Boolean	Ticket is allowed in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.mandatory_ticket	Boolean	Ticket is mandatory in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.approvers	String	The approvers user groups.
WAB.authorization_get.active_quorum	Number	The quorum for active periods (-1: approval workflow with automatic approval, 0: no approval workflow (direct connection), > 0: quorum to reach). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.inactive_quorum	Number	The quorum for inactive periods (-1: approval workflow with automatic approval, 0: no connection allowed, > 0: quorum to reach). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.single_connection	Boolean	Limit to one single connection during the approval period (i.e. if the user disconnects, he will not be allowed to start a new session during the original requested time). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.approval_timeout	Number	Set a timeout in minutes after which the approval will be automatically closed if no connection has been initiated (i.e. the user won’t be able to connect). 0: no timeout. Usable in the “q” parameter.
WAB.authorization_get.authorize_session_sharing	Boolean	Enable Session Sharing. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.session_sharing_mode	String	The Session Sharing Mode. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.url	String	The API URL to the resource.

wab-add-authorization

---

Add an authorization
category: Authorizations

Base Command

wab-add-authorization

Input

Argument Name	Description	Required
authorization_post_user_group	The user group.	Required
authorization_post_target_group	The target group.	Required
authorization_post_authorization_name	The authorization name. \ /:*?”<>|@& and space are forbidden.	Required
authorization_post_description	The authorization description.	Optional
authorization_post_subprotocols	The authorization subprotocols. It is mandatory if “authorize_sessions” is enabled (default). Comma-separated list (use [] for an empty list).	Optional
authorization_post_is_critical	Define if it’s critical. Possible values are: true, false.	Optional
authorization_post_is_recorded	Define if it’s recorded. Possible values are: true, false.	Optional
authorization_post_authorize_password_retrieval	Authorize password retrieval. Enabled by default. Possible values are: true, false.	Optional
authorization_post_authorize_sessions	Authorize sessions via proxies. Enabled by default. Possible values are: true, false.	Optional
authorization_post_approval_required	Approval is required to connect to targets. Possible values are: true, false.	Optional
authorization_post_has_comment	Comment is allowed in approval. Possible values are: true, false.	Optional
authorization_post_mandatory_comment	Comment is mandatory in approval. Possible values are: true, false.	Optional
authorization_post_has_ticket	Ticket is allowed in approval. Possible values are: true, false.	Optional
authorization_post_mandatory_ticket	Ticket is mandatory in approval. Possible values are: true, false.	Optional
authorization_post_approvers	The approvers user groups. Comma-separated list (use [] for an empty list).	Optional
authorization_post_active_quorum	The quorum for active periods (-1: approval workflow with automatic approval, 0: no approval workflow (direct connection), > 0: quorum to reach).	Optional
authorization_post_inactive_quorum	The quorum for inactive periods (-1: approval workflow with automatic approval, 0: no connection allowed, > 0: quorum to reach).	Optional
authorization_post_single_connection	Limit to one single connection during the approval period (i.e. if the user disconnects, he will not be allowed to start a new session during the original requested time). Possible values are: true, false.	Optional
authorization_post_approval_timeout	Set a timeout in minutes after which the approval will be automatically closed if no connection has been initiated (i.e. the user won’t be able to connect). 0: no timeout.	Optional
authorization_post_authorize_session_sharing	Enable Session Sharing. Possible values are: true, false.	Optional
authorization_post_session_sharing_mode	The Session Sharing Mode. Possible values are: view_only, view_control.	Optional

Context Output

Path	Type	Description
WAB.add_authorization.id	String	id of the created object.

wab-get-authorization

---

Get the authorization
category: Authorizations

Base Command

wab-get-authorization

Input

Argument Name	Description	Required
authorization_id	An authorization id or name. If specified, only this authorization is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authorization_get.id	String	The authorization id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.user_group	String	The user group. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.target_group	String	The target group. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.authorization_name	String	The authorization name. \ /:*?”<>	@& and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.description	String	The authorization description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.subprotocols	String	The authorization subprotocols. It is mandatory if “authorize_sessions” is enabled (default).
WAB.authorization_get.is_critical	Boolean	Define if it’s critical. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.is_recorded	Boolean	Define if it’s recorded. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.authorize_password_retrieval	Boolean	Authorize password retrieval. Enabled by default. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.authorize_sessions	Boolean	Authorize sessions via proxies. Enabled by default. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.approval_required	Boolean	Approval is required to connect to targets. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.has_comment	Boolean	Comment is allowed in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.mandatory_comment	Boolean	Comment is mandatory in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.has_ticket	Boolean	Ticket is allowed in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.mandatory_ticket	Boolean	Ticket is mandatory in approval. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.approvers	String	The approvers user groups.
WAB.authorization_get.active_quorum	Number	The quorum for active periods (-1: approval workflow with automatic approval, 0: no approval workflow (direct connection), > 0: quorum to reach). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.inactive_quorum	Number	The quorum for inactive periods (-1: approval workflow with automatic approval, 0: no connection allowed, > 0: quorum to reach). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.single_connection	Boolean	Limit to one single connection during the approval period (i.e. if the user disconnects, he will not be allowed to start a new session during the original requested time). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.approval_timeout	Number	Set a timeout in minutes after which the approval will be automatically closed if no connection has been initiated (i.e. the user won’t be able to connect). 0: no timeout. Usable in the “q” parameter.
WAB.authorization_get.authorize_session_sharing	Boolean	Enable Session Sharing. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.session_sharing_mode	String	The Session Sharing Mode. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authorization_get.url	String	The API URL to the resource.

wab-edit-authorization

---

Edit an authorization
category: Authorizations

Base Command

wab-edit-authorization

Input

Argument Name	Description	Required
authorization_id	The authorization id or name to edit.	Required
force	The default value is false. When it is set to true the values of subprotocols and approvers are replaced otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
authorization_put_authorization_name	The authorization name. \ /:*?”<>|@& and space are forbidden.	Optional
authorization_put_description	The authorization description.	Optional
authorization_put_subprotocols	The authorization subprotocols. It is mandatory if “authorize_sessions” is enabled (default). Comma-separated list (use [] for an empty list).	Optional
authorization_put_is_critical	Define if it’s critical. Possible values are: true, false.	Optional
authorization_put_is_recorded	Define if it’s recorded. Possible values are: true, false.	Optional
authorization_put_authorize_password_retrieval	Authorize password retrieval. Enabled by default. Possible values are: true, false.	Optional
authorization_put_authorize_sessions	Authorize sessions via proxies. Enabled by default. Possible values are: true, false.	Optional
authorization_put_approval_required	Approval is required to connect to targets. Possible values are: true, false.	Optional
authorization_put_has_comment	Comment is allowed in approval. Possible values are: true, false.	Optional
authorization_put_mandatory_comment	Comment is mandatory in approval. Possible values are: true, false.	Optional
authorization_put_has_ticket	Ticket is allowed in approval. Possible values are: true, false.	Optional
authorization_put_mandatory_ticket	Ticket is mandatory in approval. Possible values are: true, false.	Optional
authorization_put_approvers	The approvers user groups. Comma-separated list (use [] for an empty list).	Optional
authorization_put_active_quorum	The quorum for active periods (-1: approval workflow with automatic approval, 0: no approval workflow (direct connection), > 0: quorum to reach).	Optional
authorization_put_inactive_quorum	The quorum for inactive periods (-1: approval workflow with automatic approval, 0: no connection allowed, > 0: quorum to reach).	Optional
authorization_put_single_connection	Limit to one single connection during the approval period (i.e. if the user disconnects, he will not be allowed to start a new session during the original requested time). Possible values are: true, false.	Optional
authorization_put_approval_timeout	Set a timeout in minutes after which the approval will be automatically closed if no connection has been initiated (i.e. the user won’t be able to connect). 0: no timeout.	Optional
authorization_put_authorize_session_sharing	Enable Session Sharing. Possible values are: true, false.	Optional
authorization_put_session_sharing_mode	The Session Sharing Mode. Possible values are: view_only, view_control.	Optional

Context Output

There is no context output for this command.

wab-delete-authorization

---

Delete an authorization
category: Authorizations

Base Command

wab-delete-authorization

Input

Argument Name	Description	Required
authorization_id	The authorization id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-checkout-policies

---

Get the checkout policies
category: Checkout Policies

Base Command

wab-get-checkout-policies

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘checkout_policy_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.checkoutpolicy_get.id	String	The checkout policy id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.checkout_policy_name	String	The checkout policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.description	String	The checkout policy description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.enable_lock	Boolean	Lock on checkout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.duration	Number	The checkout duration (in seconds). It is mandatory if lock on checkout is enabled. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.extension	Number	The extension duration (in seconds). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.max_duration	Number	The max duration (in seconds). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.change_credentials_at_checkin	Boolean	Change credentials at check-in. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.url	String	The API URL to the resource.

wab-get-checkout-policy

---

Get the checkout policy
category: Checkout Policies

Base Command

wab-get-checkout-policy

Input

Argument Name	Description	Required
checkout_policy_id	A checkout policy id or name. If specified, only this checkout policy is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.checkoutpolicy_get.id	String	The checkout policy id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.checkout_policy_name	String	The checkout policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.description	String	The checkout policy description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.enable_lock	Boolean	Lock on checkout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.duration	Number	The checkout duration (in seconds). It is mandatory if lock on checkout is enabled. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.extension	Number	The extension duration (in seconds). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.max_duration	Number	The max duration (in seconds). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.change_credentials_at_checkin	Boolean	Change credentials at check-in. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.checkoutpolicy_get.url	String	The API URL to the resource.

wab-get-clusters

---

Get the clusters
category: Clusters

Base Command

wab-get-clusters

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘cluster_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.cluster_get.id	String	The cluster id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.cluster_get.cluster_name	String	The cluster name. \/:*?”<>	and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.cluster_get.description	String	The cluster description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.cluster_get.accounts	String	The cluster targets. The targets must exist in the Bastion.
WAB.cluster_get.account_mappings	String	The cluster targets with account mapping. The targets must exist in the Bastion.
WAB.cluster_get.interactive_logins	String	The cluster targets with interactive login. The targets must exist in the Bastion.
WAB.cluster_get.url	String	The API URL to the resource.

wab-get-cluster

---

Get the cluster
category: Clusters

Base Command

wab-get-cluster

Input

Argument Name	Description	Required
cluster_id	A cluster id or name. If specified, only this cluster is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.cluster_get.id	String	The cluster id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.cluster_get.cluster_name	String	The cluster name. \/:*?”<>	and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.cluster_get.description	String	The cluster description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.cluster_get.accounts	String	The cluster targets. The targets must exist in the Bastion.
WAB.cluster_get.account_mappings	String	The cluster targets with account mapping. The targets must exist in the Bastion.
WAB.cluster_get.interactive_logins	String	The cluster targets with interactive login. The targets must exist in the Bastion.
WAB.cluster_get.url	String	The API URL to the resource.

wab-getx509-configuration-infos

---

Get the X509 configuration infos
category: Config X509

Base Command

wab-getx509-configuration-infos

Input

There are no input arguments for this command.

Context Output

Path	Type	Description
WAB.config_x509_get.ca_certificate	String	Certificate Authority’s certificate (*.cert file in PEM format).If there’s several certificate to be added, they’ve to be concatenated and supplied to this field, as one string.
WAB.config_x509_get.server_public_key	String	Server public key (*.cert file in PEM format).
WAB.config_x509_get.server_private_key	String	Server private key (*.key file in PEM format).
WAB.config_x509_get.enable	Boolean	Enable X509 or not (true = enabled, false = disabled).
WAB.config_x509_get.default	Boolean	Default X509 configuration or not (true = default, false = set by user).

wab-uploadx509-configuration

---

Upload X509 configuration
category: Config X509

Base Command

wab-uploadx509-configuration

Input

Argument Name	Description	Required
config_x509_post_ca_certificate	Certificate Authority’s certificate (*.cert file in PEM format).If there’s several certificate to be added, they’ve to be concatenated and supplied to this field, as one string.	Optional
config_x509_post_server_public_key	Server public key (*.cert file in PEM format).	Optional
config_x509_post_server_private_key	Server private key (*.key file in PEM format).	Optional
config_x509_post_enable	Enable X509 or not (true = enabled, false = disabled). Possible values are: true, false.	Optional

Context Output

Path	Type	Description
WAB.uploadx509_configuration.id	String	id of the created object.

wab-updatex509-configuration

---

Update X509 Configuration
category: Config X509

Base Command

wab-updatex509-configuration

Input

Argument Name	Description	Required
config_x509_put_ca_certificate	Certificate Authority’s certificate (*.cert file in PEM format).If there’s several certificate to be added, they’ve to be concatenated and supplied to this field, as one string.	Optional
config_x509_put_server_public_key	Server public key (*.cert file in PEM format).	Optional
config_x509_put_server_private_key	Server private key (*.key file in PEM format).	Optional
config_x509_put_enable	Enable X509 or not (true = enabled, false = disabled). Possible values are: true, false.	Optional

Context Output

There is no context output for this command.

wab-resetx509-configuration

---

Reset X509 configuration
category: Config X509

Base Command

wab-resetx509-configuration

Input

There are no input arguments for this command.

Context Output

There is no context output for this command.

wab-get-current-serial-configuration-number-of-bastion

---

Get current serial configuration number of the Bastion. This number can be used to know if the Bastion configuration was changed
category: Configuration Number

Base Command

wab-get-current-serial-configuration-number-of-bastion

Input

There are no input arguments for this command.

Context Output

Path	Type	Description
WAB.confignumber_get.configuration_number	Number	The current serial configuration number of the WALLIX Bastion.

wab-get-connection-policies

---

Get the connection policies
category: Connection Policies

Base Command

wab-get-connection-policies

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘connection_policy_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.connectionpolicy_get.id	String	The connection policy id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.connection_policy_name	String	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.type	String	The connection policy type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.description	String	The connection policy description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.protocol	String	The connection policy protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.is_default	Boolean	True if the connection policy is a default one.
WAB.connectionpolicy_get.authentication_methods	String	The allowed authentication methods.
WAB.connectionpolicy_get.url	String	The API URL to the resource.

wab-add-connection-policy

---

Add a connection policy
category: Connection Policies

Base Command

wab-add-connection-policy

Input

Argument Name	Description	Required
connectionpolicy_post_connection_policy_name	The connection policy name.	Required
connectionpolicy_post_type	The connection policy type. Possible values are: RAWTCPIP, RDP, RLOGIN, SSH, TELNET, VNC.	Required
connectionpolicy_post_description	The connection policy description.	Optional
connectionpolicy_post_protocol	The connection policy protocol. Possible values are: RAWTCPIP, RDP, RLOGIN, SSH, TELNET, VNC.	Required
connectionpolicy_post_authentication_methods	The allowed authentication methods. Comma-separated list (use [] for an empty list). Possible values: KERBEROS_FORWARDING,PASSWORD_INTERACTIVE,PASSWORD_MAPPING,PASSWORD_VAULT,PUBKEY_AGENT_FORWARDING,PUBKEY_VAULT.	Optional
options	Options for the connection policy, formatted in json: {"key”:"value"}.	Optional

Context Output

Path	Type	Description
WAB.add_connection_policy.id	String	id of the created object.

wab-get-connection-policy

---

Get the connection policy
category: Connection Policies

Base Command

wab-get-connection-policy

Input

Argument Name	Description	Required
connection_policy_id	A connection policy id or name. If specified, only this connection policy is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.connectionpolicy_get.id	String	The connection policy id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.connection_policy_name	String	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.type	String	The connection policy type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.description	String	The connection policy description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.protocol	String	The connection policy protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.connectionpolicy_get.is_default	Boolean	True if the connection policy is a default one.
WAB.connectionpolicy_get.authentication_methods	String	The allowed authentication methods.
WAB.connectionpolicy_get.url	String	The API URL to the resource.

wab-edit-connection-policy

---

Edit a connection policy
category: Connection Policies

Base Command

wab-edit-connection-policy

Input

Argument Name	Description	Required
connection_policy_id	A connection policy id or name to edit.	Required
force	The default value is false. When it is set to true the values of the authentication_methods are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
connectionpolicy_put_connection_policy_name	The connection policy name.	Optional
connectionpolicy_put_description	The connection policy description.	Optional
connectionpolicy_put_authentication_methods	The allowed authentication methods. Comma-separated list (use [] for an empty list). Possible values: KERBEROS_FORWARDING,PASSWORD_INTERACTIVE,PASSWORD_MAPPING,PASSWORD_VAULT,PUBKEY_AGENT_FORWARDING,PUBKEY_VAULT.	Optional
options	Options for the connection policy, formatted in json: {"key”:"value"}.	Optional

Context Output

There is no context output for this command.

wab-delete-connection-policy

---

Delete a connection policy. Note: it is not possible to delete the default Bastion connection policies
category: Connection Policies

Base Command

wab-delete-connection-policy

Input

Argument Name	Description	Required
connection_policy_id	The connection policy id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-device-account-credentials

---

Get all credentials of an account on a device local domain
category: Device Account Credentials

Base Command

wab-get-device-account-credentials

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
key_format	Format of the returned SSH public key of the account. Accepted values are ‘openssh’ (default value) and ‘ssh.com’.	Optional
q	Searches for a resource matching parameters. The search is performed on the field ‘type’ only.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘type’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.credential_get.id	String	The credential id. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.type	String	The credential type. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.credential_get.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.credential_get.public_key	String	The account public key.
WAB.credential_get.key_type	String	The key type.
WAB.credential_get.key_len	Number	The key length.
WAB.credential_get.key_id	String	The key identity: random value used for revocation.
WAB.credential_get.certificate	String	The certificate.
WAB.credential_get.url	String	The API URL to the resource.

wab-add-credential-to-device-account

---

Add a credential to a device account on a local domain
category: Device Account Credentials

Base Command

wab-add-credential-to-device-account

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
credential_post_type	The credential type. Possible values are: password, ssh_key.	Required
credential_post_password	The account password.	Optional
credential_post_private_key	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.	Optional
credential_post_passphrase	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.	Optional

Context Output

Path	Type	Description
WAB.add_credential_to_device_account.id	String	id of the created object.

wab-get-device-account-credential

---

Get one credential of an account on a device local domain
category: Device Account Credentials

Base Command

wab-get-device-account-credential

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
credential_id	The credential id.	Required
key_format	Format of the returned SSH public key of the account. Accepted values are ‘openssh’ (default value) and ‘ssh.com’.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.credential_get.id	String	The credential id. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.type	String	The credential type. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.credential_get.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.credential_get.public_key	String	The account public key.
WAB.credential_get.key_type	String	The key type.
WAB.credential_get.key_len	Number	The key length.
WAB.credential_get.key_id	String	The key identity: random value used for revocation.
WAB.credential_get.certificate	String	The certificate.
WAB.credential_get.url	String	The API URL to the resource.

wab-edit-credential-of-device-account

---

Edit a credential of an account on a local domain of a device
category: Device Account Credentials

Base Command

wab-edit-credential-of-device-account

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
credential_id	The credential id.	Required
credential_put_type	The credential type. Possible values are: password, ssh_key.	Required
credential_put_password	The account password.	Optional
credential_put_private_key	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.	Optional
credential_put_passphrase	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.	Optional

Context Output

There is no context output for this command.

wab-get-all-accounts-on-device-local-domain

---

Get all accounts on a device local domain
category: Device Accounts

Base Command

wab-get-all-accounts-on-device-local-domain

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
key_format	Format of the returned SSH public key of the account. Accepted values are ‘openssh’ (default value) and ‘ssh.com’.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘account_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.device_account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.credentials.id	String	The credential id.
WAB.device_account_get.credentials.type	String	The credential type.
WAB.device_account_get.credentials.password	String	The account password.
WAB.device_account_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.device_account_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.device_account_get.credentials.public_key	String	The account public key.
WAB.device_account_get.credentials.key_type	String	The key type.
WAB.device_account_get.credentials.key_len	Number	The key length.
WAB.device_account_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.device_account_get.credentials.certificate	String	The certificate.
WAB.device_account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.device_account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.device_account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.first_seen.id	String	The scan job id.
WAB.device_account_get.first_seen.type	String	Scan type.
WAB.device_account_get.first_seen.error	String	Error message.
WAB.device_account_get.first_seen.status	String	Scan job status.
WAB.device_account_get.first_seen.start	String	Scan job start timestamp.
WAB.device_account_get.first_seen.end	String	Scan job end timestamp.
WAB.device_account_get.last_seen.id	String	The scan job id.
WAB.device_account_get.last_seen.type	String	Scan type.
WAB.device_account_get.last_seen.error	String	Error message.
WAB.device_account_get.last_seen.status	String	Scan job status.
WAB.device_account_get.last_seen.start	String	Scan job start timestamp.
WAB.device_account_get.last_seen.end	String	Scan job end timestamp.
WAB.device_account_get.url	String	The API URL to the resource.
WAB.device_account_get.services	String	The account services.

wab-add-account-to-local-domain-on-device

---

Add an account to a local domain on a device
category: Device Accounts

Base Command

wab-add-account-to-local-domain-on-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
device_account_post_account_name	The account name. /:*?”<>|@ and space are forbidden.	Required
device_account_post_account_login	The account login.	Required
device_account_post_description	The account description.	Optional
device_account_post_auto_change_password	Automatically change the password. It is enabled by default on a new account. Possible values are: true, false.	Optional
device_account_post_auto_change_ssh_key	Automatically change the ssh key. It is enabled by default on a new account. Possible values are: true, false.	Optional
device_account_post_checkout_policy	The account checkout policy.	Required
device_account_post_certificate_validity	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.	Optional
device_account_post_can_edit_certificate_validity	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise. Possible values are: true, false.	Optional
device_account_post_services	The account services. Comma-separated list (use [] for an empty list).	Optional

Context Output

Path	Type	Description
WAB.add_account_to_local_domain_on_device.id	String	id of the created object.

wab-get-one-account-on-device-local-domain

---

Get one account on a device local domain
category: Device Accounts

Base Command

wab-get-one-account-on-device-local-domain

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name.	Required
key_format	Format of the returned SSH public key of the account. Accepted values are ‘openssh’ (default value) and ‘ssh.com’.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.device_account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.credentials.id	String	The credential id.
WAB.device_account_get.credentials.type	String	The credential type.
WAB.device_account_get.credentials.password	String	The account password.
WAB.device_account_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.device_account_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.device_account_get.credentials.public_key	String	The account public key.
WAB.device_account_get.credentials.key_type	String	The key type.
WAB.device_account_get.credentials.key_len	Number	The key length.
WAB.device_account_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.device_account_get.credentials.certificate	String	The certificate.
WAB.device_account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.device_account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.device_account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_account_get.first_seen.id	String	The scan job id.
WAB.device_account_get.first_seen.type	String	Scan type.
WAB.device_account_get.first_seen.error	String	Error message.
WAB.device_account_get.first_seen.status	String	Scan job status.
WAB.device_account_get.first_seen.start	String	Scan job start timestamp.
WAB.device_account_get.first_seen.end	String	Scan job end timestamp.
WAB.device_account_get.last_seen.id	String	The scan job id.
WAB.device_account_get.last_seen.type	String	Scan type.
WAB.device_account_get.last_seen.error	String	Error message.
WAB.device_account_get.last_seen.status	String	Scan job status.
WAB.device_account_get.last_seen.start	String	Scan job start timestamp.
WAB.device_account_get.last_seen.end	String	Scan job end timestamp.
WAB.device_account_get.url	String	The API URL to the resource.
WAB.device_account_get.services	String	The account services.

wab-edit-account-on-local-domain-of-device

---

Edit an account on a local domain of a device
category: Device Accounts

Base Command

wab-edit-account-on-local-domain-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name to edit.	Required
force	The default value is false. When it is set to true the values of the credentials and services, if they are supplied, are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
device_account_put_account_name	The account name. /:*?”<>|@ and space are forbidden.	Optional
device_account_put_account_login	The account login.	Optional
device_account_put_description	The account description.	Optional
device_account_put_auto_change_password	Automatically change the password. It is enabled by default on a new account. Possible values are: true, false.	Optional
device_account_put_auto_change_ssh_key	Automatically change the ssh key. It is enabled by default on a new account. Possible values are: true, false.	Optional
device_account_put_checkout_policy	The account checkout policy.	Optional
device_account_put_certificate_validity	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.	Optional
device_account_put_can_edit_certificate_validity	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise. Possible values are: true, false.	Optional
device_account_put_onboard_status	Onboarding status of the account. Possible values are: onboarded, to_onboard, hide, manual.	Optional
device_account_put_services	The account services. Comma-separated list (use [] for an empty list).	Optional

Context Output

There is no context output for this command.

wab-delete-account-from-local-domain-of-device

---

Delete an account from a local domain of a device
category: Device Accounts

Base Command

wab-delete-account-from-local-domain-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
account_id	The account id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-certificates-on-device

---

Get the certificates on a device
category: Device Certificates

Base Command

wab-get-certificates-on-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
q	Search and return only certificates matching these words.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘type,address’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.device_certificates_get.type	String	The certificate type. Usable in the “sort” parameter.
WAB.device_certificates_get.address	String	The certificate address. Usable in the “sort” parameter.
WAB.device_certificates_get.port	Number	The certificate port. Usable in the “sort” parameter.
WAB.device_certificates_get.key_type	String	The certificate key type. Usable in the “sort” parameter.
WAB.device_certificates_get.fingerprint	String	The fingerprint of the certificate. Usable in the “sort” parameter.
WAB.device_certificates_get.last_modification_date	String	The last time the certificate was modified. Usable in the “sort” parameter.
WAB.device_certificates_get.url	String	The API URL to the resource.

wab-get-certificate-on-device

---

Get the certificate on a device
category: Device Certificates

Base Command

wab-get-certificate-on-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
cert_type	The certificate type (SSH, RDP).	Required
address	The certificate address/ip.	Required
port	The certificate port.	Required
q	Search and return only certificates matching these words.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘type,address’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.device_certificates_get.type	String	The certificate type. Usable in the “sort” parameter.
WAB.device_certificates_get.address	String	The certificate address. Usable in the “sort” parameter.
WAB.device_certificates_get.port	Number	The certificate port. Usable in the “sort” parameter.
WAB.device_certificates_get.key_type	String	The certificate key type. Usable in the “sort” parameter.
WAB.device_certificates_get.fingerprint	String	The fingerprint of the certificate. Usable in the “sort” parameter.
WAB.device_certificates_get.last_modification_date	String	The last time the certificate was modified. Usable in the “sort” parameter.
WAB.device_certificates_get.url	String	The API URL to the resource.

wab-revoke-certificate-of-device

---

Revoke a certificate of a device
category: Device Certificates

Base Command

wab-revoke-certificate-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
cert_type	The certificate type (SSH, RDP).	Required
address	The certificate address/ip.	Required
port	The certificate port.	Required

Context Output

There is no context output for this command.

wab-get-local-domains-of-device

---

Get the local domains of a device
category: Device Local Domains

Base Command

wab-get-local-domains-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘domain_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.localdomain_get.id	String	The domain id. Usable in the “q” parameter.
WAB.localdomain_get.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_get.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.localdomain_get.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.localdomain_get.password_change_policy	String	The name of password change policy for this domain.
WAB.localdomain_get.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.localdomain_get.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.localdomain_get.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.localdomain_get.url	String	The API URL to the resource.

wab-add-local-domain-in-device

---

Add a local domain in a device
category: Device Local Domains

Base Command

wab-add-local-domain-in-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
localdomain_post_domain_name	The domain name. /:*?”<>|@ are forbidden.	Required
localdomain_post_description	The domain description.	Optional
localdomain_post_enable_password_change	Enable the change of password on this domain. Possible values are: true, false.	Optional
localdomain_post_password_change_policy	The name of password change policy for this domain. (enter null for null value).	Optional
localdomain_post_password_change_plugin	The name of plugin used to change passwords on this domain. (enter null for null value).	Optional
localdomain_post_ca_private_key	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.	Optional
localdomain_post_passphrase	The passphrase that was used to encrypt the private key. If provided, it must be between 4 and 1024 characters long.	Optional
password_change_plugin_parameters	Parameters for the plugin used to change credentials, formatted in json: {"key":"value"}.	Optional

Context Output

Path	Type	Description
WAB.add_local_domain_in_device.id	String	id of the created object.

wab-get-local-domain-of-device

---

Get the local domain of a device
category: Device Local Domains

Base Command

wab-get-local-domain-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.localdomain_get.id	String	The domain id. Usable in the “q” parameter.
WAB.localdomain_get.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.localdomain_get.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.localdomain_get.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.localdomain_get.password_change_policy	String	The name of password change policy for this domain.
WAB.localdomain_get.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.localdomain_get.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.localdomain_get.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.localdomain_get.url	String	The API URL to the resource.

wab-delete-local-domain-from-device

---

Delete a local domain from a device
category: Device Local Domains

Base Command

wab-delete-local-domain-from-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
domain_id	The local domain id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-services-of-device

---

Get the services of a device
category: Device Services

Base Command

wab-get-services-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘service_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.service_get.id	String	The service id. Usable in the “sort” parameter.
WAB.service_get.service_name	String	The service name. Must start with a letter; only letters, digits and -are allowed. Usable in the “sort” parameter. / The service name. Must start with a letter; only letters, digits and - are allowed. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.protocol	String	The protocol. Usable in the “sort” parameter. / The protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.port	Number	The port number. Usable in the “sort” parameter. / The port number. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.subprotocols	String	The sub protocols.
WAB.service_get.connection_policy	String	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.global_domains	String	The global domains names.
WAB.service_get.url	String	The API URL to the resource.
WAB.service_get.multi_tunneling.enabled	Boolean	The multi-tunneling is enabled.
WAB.service_get.multi_tunneling.additional_interfaces.ip	String	The ip address.
WAB.service_get.multi_tunneling.additional_interfaces.port	Number	The port address.
WAB.service_get.seamless_connection	Boolean	The seamless connection.

wab-add-service-in-device

---

Add a service in a device
category: Device Services

Base Command

wab-add-service-in-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
service_post_id	The service id. Usable in the “sort” parameter.	Optional
service_post_service_name	The service name. Must start with a letter; only letters, digits and -are allowed. Usable in the “sort” parameter. / The service name. Must start with a letter; only letters, digits and - are allowed. Usable in the “q” parameter. Usable in the “sort” parameter.	Required
service_post_protocol	The protocol. Usable in the “sort” parameter. / The protocol. Usable in the “q” parameter. Usable in the “sort” parameter. Possible values are: RAWTCPIP, RDP, RLOGIN, SSH, TELNET, VNC.	Required
service_post_port	The port number. Usable in the “sort” parameter. / The port number. Usable in the “q” parameter. Usable in the “sort” parameter.	Required
service_post_subprotocols	The sub protocols. Comma-separated list (use [] for an empty list). Possible values: RDP_AUDIO_INPUT,RDP_AUDIO_OUTPUT,RDP_CLIPBOARD_DOWN,RDP_CLIPBOARD_FILE,RDP_CLIPBOARD_UP,RDP_COM_PORT,RDP_DRIVE,RDP_PRINTER,RDP_SMARTCARD,SFTP_SESSION,SSH_AUTH_AGENT,SSH_DIRECT_TCPIP,SSH_DIRECT_UNIXSOCK,SSH_REMOTE_COMMAND,SSH_REVERSE_TCPIP,SSH_REVERSE_UNIXSOCK,SSH_SCP_DOWN,SSH_SCP_UP,SSH_SHELL_SESSION,SSH_X11.	Optional
service_post_connection_policy	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.	Required
service_post_global_domains	The global domains names. Comma-separated list (use [] for an empty list).	Optional
service_post_seamless_connection	The seamless connection. Possible values are: true, false.	Optional

Context Output

Path	Type	Description
WAB.add_service_in_device.id	String	id of the created object.

wab-get-service-of-device

---

Get the service of a device
category: Device Services

Base Command

wab-get-service-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
service_id	The service id or name.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.service_get.id	String	The service id. Usable in the “sort” parameter.
WAB.service_get.service_name	String	The service name. Must start with a letter; only letters, digits and -are allowed. Usable in the “sort” parameter. / The service name. Must start with a letter; only letters, digits and - are allowed. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.protocol	String	The protocol. Usable in the “sort” parameter. / The protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.port	Number	The port number. Usable in the “sort” parameter. / The port number. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.subprotocols	String	The sub protocols.
WAB.service_get.connection_policy	String	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.service_get.global_domains	String	The global domains names.
WAB.service_get.url	String	The API URL to the resource.
WAB.service_get.multi_tunneling.enabled	Boolean	The multi-tunneling is enabled.
WAB.service_get.multi_tunneling.additional_interfaces.ip	String	The ip address.
WAB.service_get.multi_tunneling.additional_interfaces.port	Number	The port address.
WAB.service_get.seamless_connection	Boolean	The seamless connection.

wab-edit-service-of-device

---

Edit a service of a device
category: Device Services

Base Command

wab-edit-service-of-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
service_id	The service id or name to edit.	Required
force	The default value is false. When it is set to true the values of the subprotocols, global_domains and additional_interfaces are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
service_put_port	The port number.	Optional
service_put_subprotocols	The sub protocols. Comma-separated list (use [] for an empty list). Possible values: RDP_AUDIO_INPUT,RDP_AUDIO_OUTPUT,RDP_CLIPBOARD_DOWN,RDP_CLIPBOARD_FILE,RDP_CLIPBOARD_UP,RDP_COM_PORT,RDP_DRIVE,RDP_PRINTER,RDP_SMARTCARD,SFTP_SESSION,SSH_AUTH_AGENT,SSH_DIRECT_TCPIP,SSH_DIRECT_UNIXSOCK,SSH_REMOTE_COMMAND,SSH_REVERSE_TCPIP,SSH_REVERSE_UNIXSOCK,SSH_SCP_DOWN,SSH_SCP_UP,SSH_SHELL_SESSION,SSH_X11.	Optional
service_put_connection_policy	The connection policy name.	Optional
service_put_global_domains	The global domains names. Comma-separated list (use [] for an empty list).	Optional
service_put_seamless_connection	The seamless connection. Possible values are: true, false.	Optional

Context Output

There is no context output for this command.

wab-delete-service-from-device

---

Delete a service from a device
category: Device Services

Base Command

wab-delete-service-from-device

Input

Argument Name	Description	Required
device_id	The device id or name.	Required
service_id	The service id or name.	Required

Context Output

There is no context output for this command.

wab-get-devices

---

Get the devices
category: Devices

Base Command

wab-get-devices

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘device_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.device_get.id	String	The device id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.device_name	String	The device name. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.description	String	The device description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.alias	String	The device alias. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.host	String	The device host address. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.last_connection	String	The last connection on this device.(format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.local_domains.id	String	The domain id. Usable in the “q” parameter.
WAB.device_get.local_domains.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.local_domains.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.local_domains.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.device_get.local_domains.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.device_get.local_domains.password_change_policy	String	The name of password change policy for this domain.
WAB.device_get.local_domains.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.device_get.local_domains.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.device_get.local_domains.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.device_get.local_domains.url	String	The API URL to the resource.
WAB.device_get.services.id	String	The service id. Usable in the “sort” parameter.
WAB.device_get.services.service_name	String	The service name. Must start with a letter; only letters, digits and -are allowed. Usable in the “sort” parameter. / The service name. Must start with a letter; only letters, digits and - are allowed. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.protocol	String	The protocol. Usable in the “sort” parameter. / The protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.port	Number	The port number. Usable in the “sort” parameter. / The port number. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.subprotocols	String	The sub protocols.
WAB.device_get.services.connection_policy	String	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.global_domains	String	The global domains names.
WAB.device_get.services.url	String	The API URL to the resource.
WAB.device_get.services.multi_tunneling.enabled	Boolean	The multi-tunneling is enabled.
WAB.device_get.services.multi_tunneling.additional_interfaces.ip	String	The ip address.
WAB.device_get.services.multi_tunneling.additional_interfaces.port	Number	The port address.
WAB.device_get.services.seamless_connection	Boolean	The seamless connection.
WAB.device_get.tags.key	String	The tag key. Must not start or end with a space.
WAB.device_get.tags.value	String	The tag value. Must not start or end with a space.
WAB.device_get.onboard_status	String	Onboarding status of the device Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.first_seen.id	String	The scan job id.
WAB.device_get.first_seen.type	String	Scan type.
WAB.device_get.first_seen.error	String	Error message.
WAB.device_get.first_seen.status	String	Scan job status.
WAB.device_get.first_seen.start	String	Scan job start timestamp.
WAB.device_get.first_seen.end	String	Scan job end timestamp.
WAB.device_get.last_seen.id	String	The scan job id.
WAB.device_get.last_seen.type	String	Scan type.
WAB.device_get.last_seen.error	String	Error message.
WAB.device_get.last_seen.status	String	Scan job status.
WAB.device_get.last_seen.start	String	Scan job start timestamp.
WAB.device_get.last_seen.end	String	Scan job end timestamp.
WAB.device_get.url	String	The API URL to the resource.

wab-add-device

---

Add a device
category: Devices

Base Command

wab-add-device

Input

Argument Name	Description	Required
device_post_device_name	The device name. \ /:*?”<>|@ and space are forbidden.	Required
device_post_description	The device description.	Optional
device_post_alias	The device alias. \ /:*?”<>|@ and space are forbidden.	Optional
device_post_host	The device host address.	Required

Context Output

Path	Type	Description
WAB.add_device.id	String	id of the created object.

wab-get-device

---

Get the device
category: Devices

Base Command

wab-get-device

Input

Argument Name	Description	Required
device_id	A device id or name. If specified, only this device is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.device_get.id	String	The device id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.device_name	String	The device name. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.description	String	The device description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.alias	String	The device alias. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.host	String	The device host address. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.last_connection	String	The last connection on this device.(format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.local_domains.id	String	The domain id. Usable in the “q” parameter.
WAB.device_get.local_domains.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.local_domains.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.local_domains.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.device_get.local_domains.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.device_get.local_domains.password_change_policy	String	The name of password change policy for this domain.
WAB.device_get.local_domains.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.device_get.local_domains.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.device_get.local_domains.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.device_get.local_domains.url	String	The API URL to the resource.
WAB.device_get.services.id	String	The service id. Usable in the “sort” parameter.
WAB.device_get.services.service_name	String	The service name. Must start with a letter; only letters, digits and -are allowed. Usable in the “sort” parameter. / The service name. Must start with a letter; only letters, digits and - are allowed. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.protocol	String	The protocol. Usable in the “sort” parameter. / The protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.port	Number	The port number. Usable in the “sort” parameter. / The port number. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.subprotocols	String	The sub protocols.
WAB.device_get.services.connection_policy	String	The connection policy name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.services.global_domains	String	The global domains names.
WAB.device_get.services.url	String	The API URL to the resource.
WAB.device_get.services.multi_tunneling.enabled	Boolean	The multi-tunneling is enabled.
WAB.device_get.services.multi_tunneling.additional_interfaces.ip	String	The ip address.
WAB.device_get.services.multi_tunneling.additional_interfaces.port	Number	The port address.
WAB.device_get.services.seamless_connection	Boolean	The seamless connection.
WAB.device_get.tags.key	String	The tag key. Must not start or end with a space.
WAB.device_get.tags.value	String	The tag value. Must not start or end with a space.
WAB.device_get.onboard_status	String	Onboarding status of the device Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.device_get.first_seen.id	String	The scan job id.
WAB.device_get.first_seen.type	String	Scan type.
WAB.device_get.first_seen.error	String	Error message.
WAB.device_get.first_seen.status	String	Scan job status.
WAB.device_get.first_seen.start	String	Scan job start timestamp.
WAB.device_get.first_seen.end	String	Scan job end timestamp.
WAB.device_get.last_seen.id	String	The scan job id.
WAB.device_get.last_seen.type	String	Scan type.
WAB.device_get.last_seen.error	String	Error message.
WAB.device_get.last_seen.status	String	Scan job status.
WAB.device_get.last_seen.start	String	Scan job start timestamp.
WAB.device_get.last_seen.end	String	Scan job end timestamp.
WAB.device_get.url	String	The API URL to the resource.

wab-edit-device

---

Edit a device
category: Devices

Base Command

wab-edit-device

Input

Argument Name	Description	Required
device_id	The device id or name to edit.	Required
force	The default value is false. When it is set to true the values of the tags are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
device_put_device_name	The device name. \ /:*?”<>|@ and space are forbidden.	Optional
device_put_description	The device description.	Optional
device_put_alias	The device alias. \ /:*?”<>|@ and space are forbidden.	Optional
device_put_host	The device host address.	Optional
device_put_onboard_status	Onboarding status of the device. Possible values are: onboarded, to_onboard, hide, manual.	Optional

Context Output

There is no context output for this command.

wab-delete-device

---

Delete a device
category: Devices

Base Command

wab-delete-device

Input

Argument Name	Description	Required
device_id	The device id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-global-domain-account-credentials

---

Get the credentials of a global domain account
category: Domain Account Credentials

Base Command

wab-get-global-domain-account-credentials

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name.	Required
q	Searches for a resource matching parameters. The search is performed on the field ‘type’ only.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘type’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.credential_get.id	String	The credential id. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.type	String	The credential type. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.credential_get.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.credential_get.public_key	String	The account public key.
WAB.credential_get.key_type	String	The key type.
WAB.credential_get.key_len	Number	The key length.
WAB.credential_get.key_id	String	The key identity: random value used for revocation.
WAB.credential_get.certificate	String	The certificate.
WAB.credential_get.url	String	The API URL to the resource.

wab-get-global-domain-account-credential

---

Get the credential of a global domain account
category: Domain Account Credentials

Base Command

wab-get-global-domain-account-credential

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name.	Required
credential_id	The credential id.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.credential_get.id	String	The credential id. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.type	String	The credential type. Usable in the “sort” parameter. Usable in the “sort” parameter.
WAB.credential_get.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.credential_get.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.credential_get.public_key	String	The account public key.
WAB.credential_get.key_type	String	The key type.
WAB.credential_get.key_len	Number	The key length.
WAB.credential_get.key_id	String	The key identity: random value used for revocation.
WAB.credential_get.certificate	String	The certificate.
WAB.credential_get.url	String	The API URL to the resource.

wab-edit-credential-of-global-domain-account

---

Edit a credential of a global domain account
category: Domain Account Credentials

Base Command

wab-edit-credential-of-global-domain-account

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name.	Required
credential_id	The credential id to edit.	Required
credential_put_type	The credential type. Possible values are: password, ssh_key.	Required
credential_put_password	The account password.	Optional
credential_put_private_key	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.	Optional
credential_put_passphrase	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.	Optional

Context Output

There is no context output for this command.

wab-add-credential-to-global-domain-account

---

Add a credential to a global domain account
category: Domain Account Credentials

Base Command

wab-add-credential-to-global-domain-account

Input

Argument Name	Description	Required
domain_name	The name of the global domain.	Required
account_id	The name or id of the account.	Required
credential_post_type	The credential type. Possible values are: password, ssh_key.	Required
credential_post_password	The account password.	Optional
credential_post_private_key	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.	Optional
credential_post_passphrase	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.	Optional

Context Output

Path	Type	Description
WAB.add_credential_to_global_domain_account.id	String	id of the created object.

wab-get-accounts-of-global-domain

---

Get the accounts of a global domain
category: Domain Accounts

Base Command

wab-get-accounts-of-global-domain

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
q	Searches for a resource matching parameters.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.domain_account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.credentials.id	String	The credential id.
WAB.domain_account_get.credentials.type	String	The credential type.
WAB.domain_account_get.credentials.password	String	The account password.
WAB.domain_account_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.domain_account_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.domain_account_get.credentials.public_key	String	The account public key.
WAB.domain_account_get.credentials.key_type	String	The key type.
WAB.domain_account_get.credentials.key_len	Number	The key length.
WAB.domain_account_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.domain_account_get.credentials.certificate	String	The certificate.
WAB.domain_account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.domain_account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.domain_account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.first_seen.id	String	The scan job id.
WAB.domain_account_get.first_seen.type	String	Scan type.
WAB.domain_account_get.first_seen.error	String	Error message.
WAB.domain_account_get.first_seen.status	String	Scan job status.
WAB.domain_account_get.first_seen.start	String	Scan job start timestamp.
WAB.domain_account_get.first_seen.end	String	Scan job end timestamp.
WAB.domain_account_get.last_seen.id	String	The scan job id.
WAB.domain_account_get.last_seen.type	String	Scan type.
WAB.domain_account_get.last_seen.error	String	Error message.
WAB.domain_account_get.last_seen.status	String	Scan job status.
WAB.domain_account_get.last_seen.start	String	Scan job start timestamp.
WAB.domain_account_get.last_seen.end	String	Scan job end timestamp.
WAB.domain_account_get.url	String	The API URL to the resource.
WAB.domain_account_get.resources	String	The account resources.

wab-add-account-in-global-domain

---

Add an account in a global domain
category: Domain Accounts

Base Command

wab-add-account-in-global-domain

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
domain_account_post_account_name	The account name. /:*?”<>|@ and space are forbidden.	Required
domain_account_post_account_login	The account login.	Required
domain_account_post_description	The account description.	Optional
domain_account_post_auto_change_password	Automatically change the password. It is enabled by default on a new account. Possible values are: true, false.	Optional
domain_account_post_auto_change_ssh_key	Automatically change the ssh key. It is enabled by default on a new account. Possible values are: true, false.	Optional
domain_account_post_checkout_policy	The account checkout policy.	Required
domain_account_post_certificate_validity	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.	Optional
domain_account_post_can_edit_certificate_validity	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise. Possible values are: true, false.	Optional
domain_account_post_resources	The account resources. Comma-separated list (use [] for an empty list).	Optional

Context Output

Path	Type	Description
WAB.add_account_in_global_domain.id	String	id of the created object.

wab-get-account-of-global-domain

---

Get the account of a global domain
category: Domain Accounts

Base Command

wab-get-account-of-global-domain

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.domain_account_get.id	String	The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.description	String	The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.credentials.id	String	The credential id.
WAB.domain_account_get.credentials.type	String	The credential type.
WAB.domain_account_get.credentials.password	String	The account password.
WAB.domain_account_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.domain_account_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.domain_account_get.credentials.public_key	String	The account public key.
WAB.domain_account_get.credentials.key_type	String	The key type.
WAB.domain_account_get.credentials.key_len	Number	The key length.
WAB.domain_account_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.domain_account_get.credentials.certificate	String	The certificate.
WAB.domain_account_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.domain_account_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.domain_account_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.onboard_status	String	Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_account_get.first_seen.id	String	The scan job id.
WAB.domain_account_get.first_seen.type	String	Scan type.
WAB.domain_account_get.first_seen.error	String	Error message.
WAB.domain_account_get.first_seen.status	String	Scan job status.
WAB.domain_account_get.first_seen.start	String	Scan job start timestamp.
WAB.domain_account_get.first_seen.end	String	Scan job end timestamp.
WAB.domain_account_get.last_seen.id	String	The scan job id.
WAB.domain_account_get.last_seen.type	String	Scan type.
WAB.domain_account_get.last_seen.error	String	Error message.
WAB.domain_account_get.last_seen.status	String	Scan job status.
WAB.domain_account_get.last_seen.start	String	Scan job start timestamp.
WAB.domain_account_get.last_seen.end	String	Scan job end timestamp.
WAB.domain_account_get.url	String	The API URL to the resource.
WAB.domain_account_get.resources	String	The account resources.

wab-edit-account-in-global-domain

---

Edit an account in a global domain
category: Domain Accounts

Base Command

wab-edit-account-in-global-domain

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name to edit.	Required
force	The default value is false. When it is set to true the values of the credentials and services, if they are supplied, are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
domain_account_put_account_name	The account name. /:*?”<>|@ and space are forbidden.	Optional
domain_account_put_account_login	The account login.	Optional
domain_account_put_description	The account description.	Optional
domain_account_put_auto_change_password	Automatically change the password. It is enabled by default on a new account. Possible values are: true, false.	Optional
domain_account_put_auto_change_ssh_key	Automatically change the ssh key. It is enabled by default on a new account. Possible values are: true, false.	Optional
domain_account_put_checkout_policy	The account checkout policy.	Optional
domain_account_put_certificate_validity	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.	Optional
domain_account_put_can_edit_certificate_validity	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise. Possible values are: true, false.	Optional
domain_account_put_onboard_status	Onboarding status of the account. Possible values are: onboarded, to_onboard, hide, manual.	Optional
domain_account_put_resources	The account resources. Comma-separated list (use [] for an empty list).	Optional

Context Output

There is no context output for this command.

wab-delete-account-from-global-domain

---

Delete an account from a global domain
category: Domain Accounts

Base Command

wab-delete-account-from-global-domain

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name to delete.	Required

Context Output

There is no context output for this command.

wab-delete-resource-from-global-domain-account

---

delete a resource from the global domain account
category: Domain Accounts

Base Command

wab-delete-resource-from-global-domain-account

Input

Argument Name	Description	Required
domain_id	The global domain id or name.	Required
account_id	The account id or name.	Required
resource_name	The name of the resource to remove from the account.	Required

Context Output

There is no context output for this command.

wab-get-global-domains

---

Get the global domains
category: Domains

Base Command

wab-get-global-domains

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘domain_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.domain_get.id	String	The domain id. Usable in the “q” parameter.
WAB.domain_get.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_get.domain_real_name	String	The domain name used for connection to a target. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_get.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.domain_get.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.domain_get.kerberos.kdc	String	IP address or hostname the KDC.
WAB.domain_get.kerberos.realm	String	The Kerberos realm.
WAB.domain_get.kerberos.port	Number	The Kerberos port (88 by default).
WAB.domain_get.password_change_policy	String	The name of password change policy for this domain.
WAB.domain_get.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.domain_get.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.domain_get.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.domain_get.vault_plugin	String	The name of vault plugin used to manage all accounts defined on this domain.
WAB.domain_get.is_editable	Boolean	True if the domain is editable by the user who made the query. This might be slow to compute for a domain with many accounts if the user has limitations.
WAB.domain_get.url	String	The API URL to the resource.

wab-get-global-domain

---

Get the global domain
category: Domains

Base Command

wab-get-global-domain

Input

Argument Name	Description	Required
domain_id	A global domain id or name. If specified, only this domain is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.domain_get.id	String	The domain id. Usable in the “q” parameter.
WAB.domain_get.domain_name	String	The domain name. /:*?”<>	@ are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_get.domain_real_name	String	The domain name used for connection to a target. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_get.description	String	The domain description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.domain_get.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.domain_get.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.domain_get.kerberos.kdc	String	IP address or hostname the KDC.
WAB.domain_get.kerberos.realm	String	The Kerberos realm.
WAB.domain_get.kerberos.port	Number	The Kerberos port (88 by default).
WAB.domain_get.password_change_policy	String	The name of password change policy for this domain.
WAB.domain_get.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.domain_get.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.domain_get.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.domain_get.vault_plugin	String	The name of vault plugin used to manage all accounts defined on this domain.
WAB.domain_get.is_editable	Boolean	True if the domain is editable by the user who made the query. This might be slow to compute for a domain with many accounts if the user has limitations.
WAB.domain_get.url	String	The API URL to the resource.

wab-delete-global-domain

---

Delete a global domain
category: Domains

Base Command

wab-delete-global-domain

Input

Argument Name	Description	Required
domain_id	The global domain id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-external-authentications

---

Get the external authentications
category: External Authentications

Base Command

wab-get-external-authentications

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘authentication_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.externalauth_get.id	String	The authentication id. Usable in the “sort” parameter.
WAB.externalauth_get.authentication_name	String	The authentication name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.type	String	Protocol used for authentication. Usable in the “q” parameter. Usable in the “sort” parameter. / Protocol used for authentication. Usable in the “sort” parameter.
WAB.externalauth_get.description	String	Description of the authentication. Usable in the “q” parameter. Usable in the “sort” parameter. / Description of the authentication. Usable in the “sort” parameter.
WAB.externalauth_get.port	Number	The port number. Usable in the “q” parameter. Usable in the “sort” parameter. / The port number. Usable in the “sort” parameter.
WAB.externalauth_get.host	String	The host name. Usable in the “q” parameter. Usable in the “sort” parameter. / The host name. Usable in the “sort” parameter.
WAB.externalauth_get.ker_dom_controller	String	Kerberos domain controller whose role is to recognize the tickets issued by the Key Distribution Center. Usable in the “sort” parameter. / Kerberos domain controller whose role is torecognizes the tickets issued bythe Key Distribution Center. Usable in the “sort” parameter.
WAB.externalauth_get.use_primary_auth_domain	Boolean	Use the primary auth domain.
WAB.externalauth_get.keytab	String	The keytab file, containing pairs of principal and encrypted keys. / The keytab file, containing pairs of principal and encrypted keys. The content of the file needed must be converted to base64 before being sent.
WAB.externalauth_get.grouping_id	String	The grouping id. Usable in the “q” parameter.
WAB.externalauth_get.principal_list	String	The list of principals contained in keytab.
WAB.externalauth_get.url	String	The API URL to the resource.
WAB.externalauth_get.timeout	Number	LDAP timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / Server timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / PINGID timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / SAML request timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / OIDC request timeout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_active_directory	Boolean	This LDAP uses an active directory. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_protected_user	Boolean	The AD user is protected. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_ssl	Boolean	This LDAP is secure (with SSL/TLS). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_starttls	Boolean	This LDAP uses STARTTLS Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.certificate	String	Client certificate. / The certificate of the Service Provider.
WAB.externalauth_get.private_key	String	Client key. / The private key of the Service Provider.
WAB.externalauth_get.ca_certificate	String	CA certificate.
WAB.externalauth_get.is_anonymous_access	Boolean	The user is anonymous. Usable in the “sort” parameter.
WAB.externalauth_get.login	String	The login.
WAB.externalauth_get.login_attribute	String	The login attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.cn_attribute	String	The username attribute Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.password	String	The password.
WAB.externalauth_get.ldap_base	String	The LDAP base scheme. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.passphrase	String	The Passphrase for the private key (only for an encrypted private key).
WAB.externalauth_get.secret	String	The secret.
WAB.externalauth_get.use_mobile_device	Boolean	Use mobile device to authenticate.
WAB.externalauth_get.settings_file	String	File containing several account-specific settings, needed when creating a PingID API request message. Usable in the “q” parameter.
WAB.externalauth_get.force_otp	Boolean	Force OTP authentication.
WAB.externalauth_get.application_logo_url	String	URL pointing to an image file of the service provider’s logo (PNG file), which is displayed within the PingID application during authentication. Usable in the “q” parameter.
WAB.externalauth_get.service_name	String	Name of the service requesting authentication, which is displayed within the PingID app during authentication. Usable in the “q” parameter.
WAB.externalauth_get.organization_logo_url	String	URL pointing to an image to use as the organization logo (the company icon at the top of the PingID authentication screen). Usable in the “q” parameter.
WAB.externalauth_get.background_color	String	HEX color code for the PingID authentication screen background color Usable in the “q” parameter.
WAB.externalauth_get.background_image_url	String	URL pointing to an image to use as the background of the PingID authentication screen. Usable in the “q” parameter.
WAB.externalauth_get.first_time_after_pairing	Boolean	Indicates whether this is the first time that authentication is requested after a device was paired with this user. This flag can be used to display a ‘successful pairing’ message during authentication. Usable in the “q” parameter.
WAB.externalauth_get.idp_metadata	String	Identity Provider metadata (XML format).
WAB.externalauth_get.idp_entity_id	String	Identifier of the IdP entity.
WAB.externalauth_get.saml_request_url	String	Single Sign-On URL.
WAB.externalauth_get.saml_request_method	String	Single Sign-On binding.
WAB.externalauth_get.sp_metadata	String	Service Provider metadata (XML format).
WAB.externalauth_get.sp_entity_id	String	Identifier of the SP entity.
WAB.externalauth_get.sp_assertion_consumer_service	String	Assertion Consumer Service URL (Service Provider).
WAB.externalauth_get.sp_single_logout_service	String	Single Logout Service URL (Service Provider).
WAB.externalauth_get.client_id	String	The client id. Usable in the “sort” parameter.
WAB.externalauth_get.client_secret	String	The client secret.
WAB.externalauth_get.discovery_url	String	URL where the OpenID server publishes its metadata Usable in the “sort” parameter.
WAB.externalauth_get.redirect_uri	String	Redirection URI to which the response will be sent.
WAB.externalauth_get.oidc_advanced_attributes.issuer	String	Unique URL identifying the entity delivering the tokens.
WAB.externalauth_get.oidc_advanced_attributes.scope	String	The permissions given to the token.
WAB.externalauth_get.oidc_advanced_attributes.authorization_endpoint	String	Endpoint performing the end-user authentication.
WAB.externalauth_get.oidc_advanced_attributes.token_endpoint	String	Endpoint to obtain an Access Token, an ID Token, and optionally a Refresh Token.
WAB.externalauth_get.oidc_advanced_attributes.userinfo_url_endpoint	String	Endpoint that returns Claims about the authenticated End-User.
WAB.externalauth_get.oidc_advanced_attributes.grant_type	String	Authorization type.
WAB.externalauth_get.oidc_advanced_attributes.response_type	String	Informs the Autorization Server of the desired authorization processing flow.
WAB.externalauth_get.oidc_advanced_attributes.jwks_uri	String	URL of the OpenID Provider.
WAB.externalauth_get.oidc_advanced_attributes.id_token_signing_alg_values_supported	String	JSON array containing a list of the JWS signing algorithms.
WAB.externalauth_get.x509_certificate	String	The certificate of the Service Provider.

wab-get-external-authentication

---

Get the external authentication
category: External Authentications

Base Command

wab-get-external-authentication

Input

Argument Name	Description	Required
authentication_id	An external authentication id or name. If specified, only this external authentication is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.externalauth_get.id	String	The authentication id. Usable in the “sort” parameter.
WAB.externalauth_get.authentication_name	String	The authentication name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.type	String	Protocol used for authentication. Usable in the “q” parameter. Usable in the “sort” parameter. / Protocol used for authentication. Usable in the “sort” parameter.
WAB.externalauth_get.description	String	Description of the authentication. Usable in the “q” parameter. Usable in the “sort” parameter. / Description of the authentication. Usable in the “sort” parameter.
WAB.externalauth_get.port	Number	The port number. Usable in the “q” parameter. Usable in the “sort” parameter. / The port number. Usable in the “sort” parameter.
WAB.externalauth_get.host	String	The host name. Usable in the “q” parameter. Usable in the “sort” parameter. / The host name. Usable in the “sort” parameter.
WAB.externalauth_get.ker_dom_controller	String	Kerberos domain controller whose role is to recognize the tickets issued by the Key Distribution Center. Usable in the “sort” parameter. / Kerberos domain controller whose role is torecognizes the tickets issued bythe Key Distribution Center. Usable in the “sort” parameter.
WAB.externalauth_get.use_primary_auth_domain	Boolean	Use the primary auth domain.
WAB.externalauth_get.keytab	String	The keytab file, containing pairs of principal and encrypted keys. / The keytab file, containing pairs of principal and encrypted keys. The content of the file needed must be converted to base64 before being sent.
WAB.externalauth_get.grouping_id	String	The grouping id. Usable in the “q” parameter.
WAB.externalauth_get.principal_list	String	The list of principals contained in keytab.
WAB.externalauth_get.url	String	The API URL to the resource.
WAB.externalauth_get.timeout	Number	LDAP timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / Server timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / PINGID timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / SAML request timeout. Usable in the “q” parameter. Usable in the “sort” parameter. / OIDC request timeout. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_active_directory	Boolean	This LDAP uses an active directory. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_protected_user	Boolean	The AD user is protected. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_ssl	Boolean	This LDAP is secure (with SSL/TLS). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.is_starttls	Boolean	This LDAP uses STARTTLS Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.certificate	String	Client certificate. / The certificate of the Service Provider.
WAB.externalauth_get.private_key	String	Client key. / The private key of the Service Provider.
WAB.externalauth_get.ca_certificate	String	CA certificate.
WAB.externalauth_get.is_anonymous_access	Boolean	The user is anonymous. Usable in the “sort” parameter.
WAB.externalauth_get.login	String	The login.
WAB.externalauth_get.login_attribute	String	The login attribute. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.cn_attribute	String	The username attribute Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.password	String	The password.
WAB.externalauth_get.ldap_base	String	The LDAP base scheme. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.externalauth_get.passphrase	String	The Passphrase for the private key (only for an encrypted private key).
WAB.externalauth_get.secret	String	The secret.
WAB.externalauth_get.use_mobile_device	Boolean	Use mobile device to authenticate.
WAB.externalauth_get.settings_file	String	File containing several account-specific settings, needed when creating a PingID API request message. Usable in the “q” parameter.
WAB.externalauth_get.force_otp	Boolean	Force OTP authentication.
WAB.externalauth_get.application_logo_url	String	URL pointing to an image file of the service provider’s logo (PNG file), which is displayed within the PingID application during authentication. Usable in the “q” parameter.
WAB.externalauth_get.service_name	String	Name of the service requesting authentication, which is displayed within the PingID app during authentication. Usable in the “q” parameter.
WAB.externalauth_get.organization_logo_url	String	URL pointing to an image to use as the organization logo (the company icon at the top of the PingID authentication screen). Usable in the “q” parameter.
WAB.externalauth_get.background_color	String	HEX color code for the PingID authentication screen background color Usable in the “q” parameter.
WAB.externalauth_get.background_image_url	String	URL pointing to an image to use as the background of the PingID authentication screen. Usable in the “q” parameter.
WAB.externalauth_get.first_time_after_pairing	Boolean	Indicates whether this is the first time that authentication is requested after a device was paired with this user. This flag can be used to display a ‘successful pairing’ message during authentication. Usable in the “q” parameter.
WAB.externalauth_get.idp_metadata	String	Identity Provider metadata (XML format).
WAB.externalauth_get.idp_entity_id	String	Identifier of the IdP entity.
WAB.externalauth_get.saml_request_url	String	Single Sign-On URL.
WAB.externalauth_get.saml_request_method	String	Single Sign-On binding.
WAB.externalauth_get.sp_metadata	String	Service Provider metadata (XML format).
WAB.externalauth_get.sp_entity_id	String	Identifier of the SP entity.
WAB.externalauth_get.sp_assertion_consumer_service	String	Assertion Consumer Service URL (Service Provider).
WAB.externalauth_get.sp_single_logout_service	String	Single Logout Service URL (Service Provider).
WAB.externalauth_get.client_id	String	The client id. Usable in the “sort” parameter.
WAB.externalauth_get.client_secret	String	The client secret.
WAB.externalauth_get.discovery_url	String	URL where the OpenID server publishes its metadata Usable in the “sort” parameter.
WAB.externalauth_get.redirect_uri	String	Redirection URI to which the response will be sent.
WAB.externalauth_get.oidc_advanced_attributes.issuer	String	Unique URL identifying the entity delivering the tokens.
WAB.externalauth_get.oidc_advanced_attributes.scope	String	The permissions given to the token.
WAB.externalauth_get.oidc_advanced_attributes.authorization_endpoint	String	Endpoint performing the end-user authentication.
WAB.externalauth_get.oidc_advanced_attributes.token_endpoint	String	Endpoint to obtain an Access Token, an ID Token, and optionally a Refresh Token.
WAB.externalauth_get.oidc_advanced_attributes.userinfo_url_endpoint	String	Endpoint that returns Claims about the authenticated End-User.
WAB.externalauth_get.oidc_advanced_attributes.grant_type	String	Authorization type.
WAB.externalauth_get.oidc_advanced_attributes.response_type	String	Informs the Autorization Server of the desired authorization processing flow.
WAB.externalauth_get.oidc_advanced_attributes.jwks_uri	String	URL of the OpenID Provider.
WAB.externalauth_get.oidc_advanced_attributes.id_token_signing_alg_values_supported	String	JSON array containing a list of the JWS signing algorithms.
WAB.externalauth_get.x509_certificate	String	The certificate of the Service Provider.

wab-get-external-authentication-group-mappings

---

Get the external authentication group mappings
category: Ldap Mappings

Base Command

wab-get-external-authentication-group-mappings

Input

Argument Name	Description	Required
group_by	Group the result-set by one property. Can take one of the values ‘user_group’ or ‘domain’.	Optional
q	Searches for a resource matching parameters. Used only if “group_by” is not set.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘domain,user_group’. Used only if “group_by” is not set.	Optional
offset	The index of first item to retrieve (starts and defaults to 0). Used only if “group_by” is not set.	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option. Used only if “group_by” is not set.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authmappings_get.domain	String	The name of the domain for which the mapping is defined. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authmappings_get.user_group	String	The name of the Bastion users group. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authmappings_get.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping. Usable in the “q” parameter. Usable in the “sort” parameter.

wab-get-ldap-users-of-domain

---

Get the LDAP users of a given domain
category: Ldap Users

Base Command

wab-get-ldap-users-of-domain

Input

Argument Name	Description	Required
domain	A LDAP domain name. All users in this domain are returned.	Required
last_connection	If set to true, the date of last connection is returned for each user returned. Be careful: this can slow down the request if a lot of users are returned. Possible values are: true, false.	Optional
q	Searches for a resource matching parameters.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.ldapuser_get.user_name	String	The user name.
WAB.ldapuser_get.login	String	The user login.
WAB.ldapuser_get.display_name	String	The displayed name. Usable in the “sort” parameter.
WAB.ldapuser_get.email	String	The email address.
WAB.ldapuser_get.preferred_language	String	The preferred language.
WAB.ldapuser_get.groups	String	The groups containing this user.
WAB.ldapuser_get.domain	String	The domain name.
WAB.ldapuser_get.password	String	The password (hidden with stars or empty).
WAB.ldapuser_get.ssh_public_key	String	The SSH public key.
WAB.ldapuser_get.last_connection	String	The last connection of this user (format: “yyyy-mm-dd hh:mm:ss”, returned only if query string parameter “last_connection” is set to true).
WAB.ldapuser_get.url	String	The API URL to the resource.

wab-get-ldap-user-of-domain

---

Get the LDAP user of a given domain
category: Ldap Users

Base Command

wab-get-ldap-user-of-domain

Input

Argument Name	Description	Required
domain	A LDAP domain name. All users in this domain are returned.	Required
user_name	A user name. If specified, only this user is returned.	Required
last_connection	If set to true, the date of last connection is returned for each user returned. Be careful: this can slow down the request if a lot of users are returned. Possible values are: true, false.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.ldapuser_get.user_name	String	The user name.
WAB.ldapuser_get.login	String	The user login.
WAB.ldapuser_get.display_name	String	The displayed name. Usable in the “sort” parameter.
WAB.ldapuser_get.email	String	The email address.
WAB.ldapuser_get.preferred_language	String	The preferred language.
WAB.ldapuser_get.groups	String	The groups containing this user.
WAB.ldapuser_get.domain	String	The domain name.
WAB.ldapuser_get.password	String	The password (hidden with stars or empty).
WAB.ldapuser_get.ssh_public_key	String	The SSH public key.
WAB.ldapuser_get.last_connection	String	The last connection of this user (format: “yyyy-mm-dd hh:mm:ss”, returned only if query string parameter “last_connection” is set to true).
WAB.ldapuser_get.url	String	The API URL to the resource.

wab-get-information-about-wallix-bastion-license

---

Get information about the WALLIX Bastion license
category: License Info

Base Command

wab-get-information-about-wallix-bastion-license

Input

There are no input arguments for this command.

Context Output

Path	Type	Description
WAB.licenseinfo_get.evaluation	Boolean	License is the default evaluation license.
WAB.licenseinfo_get.revoked	Boolean	Licenses are revoked.
WAB.licenseinfo_get.legacy	Boolean	License is of legacy type.
WAB.licenseinfo_get.product_name	String	Licensed product name.
WAB.licenseinfo_get.functional_pack	String	Name of the license type.
WAB.licenseinfo_get.add_ons	String	List of Add-ons.
WAB.licenseinfo_get.universal_tunneling	Boolean	RAWTCP protocol usage is enabled.
WAB.licenseinfo_get.ha	Boolean	High Availibility (2 nodes) option is enabled.
WAB.licenseinfo_get.clustering	Boolean	Clustering 3+ nodes option is enabled.
WAB.licenseinfo_get.data_leak_prevention	Boolean	Data leak prevention option is enabled.
WAB.licenseinfo_get.itsm	Boolean	Information technology service management option is enabled.
WAB.licenseinfo_get.enterprise	Boolean	Enterprise license.
WAB.licenseinfo_get.password_manager	Boolean	Password manager is enabled.
WAB.licenseinfo_get.session_manager	Boolean	Session manager is enabled.
WAB.licenseinfo_get.siem_enabled	Boolean	SIEM / Remote Syslog option is enabled.
WAB.licenseinfo_get.externvault_enabled	Boolean	External Vaults option is enabled.
WAB.licenseinfo_get.expiration_date	String	The license expiration date.
WAB.licenseinfo_get.is_valid	Boolean	License is valid.
WAB.licenseinfo_get.primary	Number	The current number of primary connections.
WAB.licenseinfo_get.primary_max	Number	The max number of primary connections allowed by the license.
WAB.licenseinfo_get.secondary	Number	The current number of secondary connections.
WAB.licenseinfo_get.secondary_max	Number	The max number of secondary connections allowed by the license.
WAB.licenseinfo_get.named_user	Number	The current number of named users.
WAB.licenseinfo_get.named_user_max	Number	The maximum number of named users allowed by the license.
WAB.licenseinfo_get.resource	Number	The current number of resources defined.
WAB.licenseinfo_get.resource_max	Number	The max number of resources allowed by the license.
WAB.licenseinfo_get.web_jumphost_concurrent_users	Number	The current number of concurrent jumphost users.
WAB.licenseinfo_get.web_jumphost_concurrent_users_max	Number	The max number of concurrent jumphost users allowed by the license.
WAB.licenseinfo_get.waapm	Number	The current number of WAAPM license used on the last 30 days.
WAB.licenseinfo_get.waapm_max	Number	The max number of WAAPM license useable on one month.
WAB.licenseinfo_get.pm_target	Number	The current number of PM targets.
WAB.licenseinfo_get.pm_target_max	Number	The max number of PM targets allowed by the license.
WAB.licenseinfo_get.sm_target	Number	The current number of SM targets.
WAB.licenseinfo_get.sm_target_max	Number	The max number of SM targets allowed by the license.

wab-post-logsiem

---

Write a message in /var/log/wabaudit.log and send it to the SIEM (if configured)
category: Log Siem

Base Command

wab-post-logsiem

Input

Argument Name	Description	Required
logsiem_post_application	The application name.	Required
logsiem_post_message	The message to write.	Required

Context Output

Path	Type	Description
WAB.post_logsiem.id	String	id of the created object.

wab-get-notifications

---

Get the notifications
category: Notifications

Base Command

wab-get-notifications

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘notification_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional

Context Output

Path	Type	Description
WAB.notification_get.id	String	The notification id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.notification_name	String	The notification name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.description	String	The notification description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.enabled	Boolean	Notification is enabled. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.type	String	Notification type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.destination	String	Destination for notification; for the type “email”, this is a list of recipient emails separated by “;”. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.language	String	The notification language (in email). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.events	String	The list of events that will trigger a notification.
WAB.notification_get.url	String	The API URL to the resource.

wab-add-notification

---

Add a notification
category: Notifications

Base Command

wab-add-notification

Input

Argument Name	Description	Required
notification_post_notification_name	The notification name.	Required
notification_post_description	The notification description.	Optional
notification_post_enabled	Notification is enabled. Possible values are: true, false.	Required
notification_post_destination	Destination for notification; for the type “email”, this is a list of recipient emails separated by “;”.	Required
notification_post_language	The notification language (in email). Possible values are: de, en, es, fr, ru.	Required
notification_post_events	The list of events that will trigger a notification. Comma-separated list (use [] for an empty list). Possible values: cx_equipment,daily_reporting,external_storage_full,filesystem_full,integrity_error,licence_notifications,new_fingerprint,password_expired,pattern_found,primary_cx_failed,raid_error,rdp_outcxn_found,rdp_pattern_found,rdp_process_found,secondary_cx_failed,sessionlog_purge,watchdog_notifications,wrong_fingerprint.	Optional

Context Output

Path	Type	Description
WAB.add_notification.id	String	id of the created object.

wab-get-notification

---

Get the notification
category: Notifications

Base Command

wab-get-notification

Input

Argument Name	Description	Required
notification_id	A notification id or name. If specified, only this notification is returned.	Required

Context Output

Path	Type	Description
WAB.notification_get.id	String	The notification id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.notification_name	String	The notification name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.description	String	The notification description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.enabled	Boolean	Notification is enabled. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.type	String	Notification type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.destination	String	Destination for notification; for the type “email”, this is a list of recipient emails separated by “;”. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.language	String	The notification language (in email). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.notification_get.events	String	The list of events that will trigger a notification.
WAB.notification_get.url	String	The API URL to the resource.

wab-edit-notification

---

Edit a notification
category: Notifications

Base Command

wab-edit-notification

Input

Argument Name	Description	Required
notification_id	The notification id or name to edit.	Required
force	The default value is false. When it is set to true the values of the events are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
notification_put_notification_name	The notification name.	Optional
notification_put_description	The notification description.	Optional
notification_put_enabled	Notification is enabled. Possible values are: true, false.	Optional
notification_put_destination	Destination for notification; for the type “email”, this is a list of recipient emails separated by “;”.	Optional
notification_put_language	The notification language (in email). Possible values are: de, en, es, fr, ru.	Optional
notification_put_events	The list of events that will trigger a notification. Comma-separated list (use [] for an empty list). Possible values: cx_equipment,daily_reporting,external_storage_full,filesystem_full,integrity_error,licence_notifications,new_fingerprint,password_expired,pattern_found,primary_cx_failed,raid_error,rdp_outcxn_found,rdp_pattern_found,rdp_process_found,secondary_cx_failed,sessionlog_purge,watchdog_notifications,wrong_fingerprint.	Optional

Context Output

There is no context output for this command.

wab-delete-notification

---

Delete a notification
category: Notifications

Base Command

wab-delete-notification

Input

Argument Name	Description	Required
notification_id	The notification id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-object-to-onboard

---

Get object to onboard, by type (either devices with their linked accounts or global accounts alone)
category: Onboarding Objects

Base Command

wab-get-object-to-onboard

Input

Argument Name	Description	Required
object_type	The type of object, one of : ‘devices’, ‘global_accounts’.	Required
object_status	The desired object status, one of: ‘to_onboard’, ‘hide’.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘object name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.onboarding_objects_get.id	String	The device id. Usable in the “q” parameter. Usable in the “sort” parameter. / The account id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.device_name	String	The device name. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.description	String	The device description. Usable in the “q” parameter. Usable in the “sort” parameter. / The account description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.alias	String	The device alias. \ /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.host	String	The device host address. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.last_connection	String	The last connection on this device.(format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.local_domains.id	String	The domain id.
WAB.onboarding_objects_get.local_domains.domain_name	String	The domain name. /:*?”<>	@ are forbidden.
WAB.onboarding_objects_get.local_domains.description	String	The domain description.
WAB.onboarding_objects_get.local_domains.enable_password_change	Boolean	Enable the change of password on this domain.
WAB.onboarding_objects_get.local_domains.admin_account	String	The administrator account used to change passwords on this domain (format: “account_name”).
WAB.onboarding_objects_get.local_domains.password_change_policy	String	The name of password change policy for this domain.
WAB.onboarding_objects_get.local_domains.password_change_plugin	String	The name of plugin used to change passwords on this domain.
WAB.onboarding_objects_get.local_domains.ca_private_key	String	The ssh private key of the signing authority for the ssh keys for accounts in the domain. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.onboarding_objects_get.local_domains.ca_public_key	String	The ssh public key of the signing authority for the ssh keys for accounts in the domain.
WAB.onboarding_objects_get.local_domains.url	String	The API URL to the resource.
WAB.onboarding_objects_get.tags.key	String	The tag key. Must not start or end with a space.
WAB.onboarding_objects_get.tags.value	String	The tag value. Must not start or end with a space.
WAB.onboarding_objects_get.onboard_status	String	Onboarding status of the device Usable in the “q” parameter. Usable in the “sort” parameter. / Onboarding status of the account Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.first_seen.id	String	The scan job id.
WAB.onboarding_objects_get.first_seen.type	String	Scan type.
WAB.onboarding_objects_get.first_seen.error	String	Error message.
WAB.onboarding_objects_get.first_seen.status	String	Scan job status.
WAB.onboarding_objects_get.first_seen.start	String	Scan job start timestamp.
WAB.onboarding_objects_get.first_seen.end	String	Scan job end timestamp.
WAB.onboarding_objects_get.last_seen.id	String	The scan job id.
WAB.onboarding_objects_get.last_seen.type	String	Scan type.
WAB.onboarding_objects_get.last_seen.error	String	Error message.
WAB.onboarding_objects_get.last_seen.status	String	Scan job status.
WAB.onboarding_objects_get.last_seen.start	String	Scan job start timestamp.
WAB.onboarding_objects_get.last_seen.end	String	Scan job end timestamp.
WAB.onboarding_objects_get.url	String	The API URL to the resource.
WAB.onboarding_objects_get.accounts.id	String	The mapping id.
WAB.onboarding_objects_get.accounts.account_name	String	The account name. /:*?”<>	@ and space are forbidden.
WAB.onboarding_objects_get.accounts.account_login	String	The account login.
WAB.onboarding_objects_get.accounts.description	String	The account description.
WAB.onboarding_objects_get.accounts.credentials.id	String	The credential id.
WAB.onboarding_objects_get.accounts.credentials.type	String	The credential type.
WAB.onboarding_objects_get.accounts.credentials.password	String	The account password.
WAB.onboarding_objects_get.accounts.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.onboarding_objects_get.accounts.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.onboarding_objects_get.accounts.credentials.public_key	String	The account public key.
WAB.onboarding_objects_get.accounts.credentials.key_type	String	The key type.
WAB.onboarding_objects_get.accounts.credentials.key_len	Number	The key length.
WAB.onboarding_objects_get.accounts.credentials.key_id	String	The key identity: random value used for revocation.
WAB.onboarding_objects_get.accounts.credentials.certificate	String	The certificate.
WAB.onboarding_objects_get.accounts.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.onboarding_objects_get.accounts.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account.
WAB.onboarding_objects_get.accounts.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account.
WAB.onboarding_objects_get.accounts.checkout_policy	String	The account checkout policy.
WAB.onboarding_objects_get.accounts.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain.
WAB.onboarding_objects_get.accounts.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise.
WAB.onboarding_objects_get.accounts.onboard_status	String	Onboarding status of the account.
WAB.onboarding_objects_get.accounts.first_seen.id	String	The scan job id.
WAB.onboarding_objects_get.accounts.first_seen.type	String	Scan type.
WAB.onboarding_objects_get.accounts.first_seen.error	String	Error message.
WAB.onboarding_objects_get.accounts.first_seen.status	String	Scan job status.
WAB.onboarding_objects_get.accounts.first_seen.start	String	Scan job start timestamp.
WAB.onboarding_objects_get.accounts.first_seen.end	String	Scan job end timestamp.
WAB.onboarding_objects_get.accounts.last_seen.id	String	The scan job id.
WAB.onboarding_objects_get.accounts.last_seen.type	String	Scan type.
WAB.onboarding_objects_get.accounts.last_seen.error	String	Error message.
WAB.onboarding_objects_get.accounts.last_seen.status	String	Scan job status.
WAB.onboarding_objects_get.accounts.last_seen.start	String	Scan job start timestamp.
WAB.onboarding_objects_get.accounts.last_seen.end	String	Scan job end timestamp.
WAB.onboarding_objects_get.accounts.url	String	The API URL to the resource.
WAB.onboarding_objects_get.accounts.last_login	String	Last login time (format: “yyyy-mm-dd hh:mm:ss”).
WAB.onboarding_objects_get.accounts.is_admin	Boolean	True if the account was used to log on the device.
WAB.onboarding_objects_get.accounts.scanned_groups	String	The groups to which the user belong to, on the scanned device.
WAB.onboarding_objects_get.account_name	String	The account name. /:*?”<>	@ and space are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.account_login	String	The account login. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.credentials.id	String	The credential id.
WAB.onboarding_objects_get.credentials.type	String	The credential type.
WAB.onboarding_objects_get.credentials.password	String	The account password.
WAB.onboarding_objects_get.credentials.private_key	String	The account private key. Special values are allowed to automatically generate SSH key: “generate:RSA_1024”, “generate:RSA_2048”, “generate:RSA_4096”, “generate:RSA_8192”, “generate:DSA_1024”, “generate:ECDSA_256”, “generate:ECDSA_384”, “generate:ECDSA_521”, “generate:ED25519”.
WAB.onboarding_objects_get.credentials.passphrase	String	The passphrase for the private key (only for an encrypted private key). If provided, it must be between 4 and 1024 characters long.
WAB.onboarding_objects_get.credentials.public_key	String	The account public key.
WAB.onboarding_objects_get.credentials.key_type	String	The key type.
WAB.onboarding_objects_get.credentials.key_len	Number	The key length.
WAB.onboarding_objects_get.credentials.key_id	String	The key identity: random value used for revocation.
WAB.onboarding_objects_get.credentials.certificate	String	The certificate.
WAB.onboarding_objects_get.domain_password_change	Boolean	True if the password change is configured on the domain (change policy and plugin are set).
WAB.onboarding_objects_get.auto_change_password	Boolean	Automatically change the password. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.auto_change_ssh_key	Boolean	Automatically change the ssh key. It is enabled by default on a new account. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.checkout_policy	String	The account checkout policy. Usable in the “q” parameter.
WAB.onboarding_objects_get.certificate_validity	String	The validity duration of the signed ssh public key in the case a Certificate Authority is defined for the account’s domain Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.can_edit_certificate_validity	Boolean	True if the field ‘certificate_validity’ can be edited based the availibility of CA certificate on the account’s domain, false otherwise Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.onboarding_objects_get.resources	String	The account resources.

wab-get-password-change-policies

---

Get the password change policies
category: Password Change Policies

Base Command

wab-get-password-change-policies

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘password_change_policy_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional

Context Output

| Path | Type | Description |
| — | — | — |
| WAB.passwordchangepolicy_get.id | String | The password change policy id. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.password_change_policy_name | String | The password change policy name. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.description | String | The password change policy description. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.password_length | Number | Number of chars in password. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.special_chars | Number | The minimum number of special chars in password (0 = no minimum, null = no special chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.lower_chars | Number | The minimum number of lower case chars in password (0 = no minimum, null = no lower case chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.upper_chars | Number | The minimum number of upper case chars in password (0 = no minimum, null = no upper case chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.digit_chars | Number | The minimum number of digit chars in password (0 = no minimum, null = no digit chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.exclude_chars | String | Characters to exclude in password. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.ssh_key_type | String | The SSH key type. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.ssh_key_size | Number | The SSH key size (in bits). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.change_period | String |
The period to change password.

String value must be a valid cron syntax (e.g. ‘\* \* \* \* \*’).

Aliases are allowed:

@hourly → 0 \* \* \* \*
@daily → 0 0 \* \* \*
@weekly → 0 0 \* \* 0
@monthly → 0 0 1 \* \*
@yearly → 0 0 1 1 \*

Note: An empty string (or null) will deactivate the change password schedule.
Moreover, @reboot is not allowed.
Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.url | String | The API URL to the resource. |

wab-add-password-change-policy

---

Add a password change policy. Note: at least password or SSH options must be given in the policy (and both can be used at same time)
category: Password Change Policies

Base Command

wab-add-password-change-policy

Input

Argument Name	Description	Required
passwordchangepolicy_post_password_change_policy_name	The password change policy name.	Required
passwordchangepolicy_post_description	The password change policy description.	Optional
passwordchangepolicy_post_password_length	Number of chars in password. (enter null for null value).	Optional
passwordchangepolicy_post_special_chars	The minimum number of special chars in password (0 = no minimum, null = no special chars at all). (enter null for null value).	Optional
passwordchangepolicy_post_lower_chars	The minimum number of lower case chars in password (0 = no minimum, null = no lower case chars at all). (enter null for null value).	Optional
passwordchangepolicy_post_upper_chars	The minimum number of upper case chars in password (0 = no minimum, null = no upper case chars at all). (enter null for null value).	Optional
passwordchangepolicy_post_digit_chars	The minimum number of digit chars in password (0 = no minimum, null = no digit chars at all). (enter null for null value).	Optional
passwordchangepolicy_post_exclude_chars	Characters to exclude in password. (enter null for null value).	Optional
passwordchangepolicy_post_ssh_key_type	The SSH key type. (enter null for null value).	Optional
passwordchangepolicy_post_ssh_key_size	The SSH key size (in bits). (enter null for null value).	Optional
passwordchangepolicy_post_change_period	The period to change password. String value must be a valid cron syntax (e.g. ‘* * * * *’). Aliases are allowed: @hourly → 0 * * * * @daily → 0 0 * * * @weekly → 0 0 * * 0 @monthly → 0 0 1 * * @yearly → 0 0 1 1 * Note: An empty string (or null) will deactivate the change password schedule. Moreover, @reboot is not allowed. (enter null for null value).	Optional

Context Output

Path	Type	Description
WAB.add_password_change_policy.id	String	id of the created object.

wab-get-password-change-policy

---

Get the password change policy
category: Password Change Policies

Base Command

wab-get-password-change-policy

Input

Argument Name	Description	Required
policy_id	A password change policy id or name. If specified, only this password change policy is returned.	Required

Context Output

| Path | Type | Description |
| — | — | — |
| WAB.passwordchangepolicy_get.id | String | The password change policy id. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.password_change_policy_name | String | The password change policy name. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.description | String | The password change policy description. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.password_length | Number | Number of chars in password. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.special_chars | Number | The minimum number of special chars in password (0 = no minimum, null = no special chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.lower_chars | Number | The minimum number of lower case chars in password (0 = no minimum, null = no lower case chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.upper_chars | Number | The minimum number of upper case chars in password (0 = no minimum, null = no upper case chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.digit_chars | Number | The minimum number of digit chars in password (0 = no minimum, null = no digit chars at all). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.exclude_chars | String | Characters to exclude in password. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.ssh_key_type | String | The SSH key type. Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.ssh_key_size | Number | The SSH key size (in bits). Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.change_period | String |
The period to change password.

String value must be a valid cron syntax (e.g. ‘\* \* \* \* \*’).

Aliases are allowed:

@hourly → 0 \* \* \* \*
@daily → 0 0 \* \* \*
@weekly → 0 0 \* \* 0
@monthly → 0 0 1 \* \*
@yearly → 0 0 1 1 \*

Note: An empty string (or null) will deactivate the change password schedule.
Moreover, @reboot is not allowed.
Usable in the “q” parameter. Usable in the “sort” parameter. |
| WAB.passwordchangepolicy_get.url | String | The API URL to the resource. |

wab-edit-password-change-policy

---

Edit a password change policy
category: Password Change Policies

Base Command

wab-edit-password-change-policy

Input

Argument Name	Description	Required
policy_id	The password change policy id or name to edit.	Required
passwordchangepolicy_put_password_change_policy_name	The password change policy name.	Optional
passwordchangepolicy_put_description	The password change policy description.	Optional
passwordchangepolicy_put_password_length	Number of chars in password. (enter null for null value).	Optional
passwordchangepolicy_put_special_chars	The minimum number of special chars in password (0 = no minimum, null = no special chars at all). (enter null for null value).	Optional
passwordchangepolicy_put_lower_chars	The minimum number of lower case chars in password (0 = no minimum, null = no lower case chars at all). (enter null for null value).	Optional
passwordchangepolicy_put_upper_chars	The minimum number of upper case chars in password (0 = no minimum, null = no upper case chars at all). (enter null for null value).	Optional
passwordchangepolicy_put_digit_chars	The minimum number of digit chars in password (0 = no minimum, null = no digit chars at all). (enter null for null value).	Optional
passwordchangepolicy_put_exclude_chars	Characters to exclude in password. (enter null for null value).	Optional
passwordchangepolicy_put_ssh_key_type	The SSH key type. (enter null for null value).	Optional
passwordchangepolicy_put_ssh_key_size	The SSH key size (in bits). (enter null for null value).	Optional
passwordchangepolicy_put_change_period	The period to change password. String value must be a valid cron syntax (e.g. ‘* * * * *’). Aliases are allowed: @hourly → 0 * * * * @daily → 0 0 * * * @weekly → 0 0 * * 0 @monthly → 0 0 1 * * @yearly → 0 0 1 1 * Note: An empty string (or null) will deactivate the change password schedule. Moreover, @reboot is not allowed. (enter null for null value).	Optional

Context Output

There is no context output for this command.

wab-delete-password-change-policy

---

Delete a password change policy
category: Password Change Policies

Base Command

wab-delete-password-change-policy

Input

Argument Name	Description	Required
policy_id	The password change policy id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-passwordrights

---

Get current user’s or the user ‘user_name’ password rights on accounts (for checkout/checkin)
category: Password Rights

Base Command

wab-get-passwordrights

Input

Argument Name	Description	Required
count	The default value is false. When it is set to true, the headers x-total-count and x-filtered-count are returned. Possible values are: true, false.	Optional
q	Only a simple string to search is allowed in this resource (for example: ‘q=windows’). The search is performed on the following fields only: account, account_description, device, device_alias, device_description, application, application_description, domain, domain_description, authorization, authorization_description.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘account,domain,device,application’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.passwordrights_get.type	String	The account type.
WAB.passwordrights_get.target	String	The complete target identifier which can be used in resource /targetpasswords (format: “account_name@global_domain_name”). / The complete target identifier which can be used in resource /targetpasswords (example: “account@domain@device”). / The complete target identifier which can be used in resource /targetpasswords (format: “account_name@local_domain_name@application_name”).
WAB.passwordrights_get.account	String	The account name. Usable in the “sort” parameter.
WAB.passwordrights_get.account_description	String	The account description. Usable in the “sort” parameter.
WAB.passwordrights_get.domain	String	The global domain name. Usable in the “sort” parameter. / The local domain name on device. Usable in the “sort” parameter. / The local domain name on application. Usable in the “sort” parameter.
WAB.passwordrights_get.domain_description	String	The domain description. Usable in the “sort” parameter.
WAB.passwordrights_get.domain_vault	Boolean	The domain accounts are stored on an external vault. Usable in the “sort” parameter.
WAB.passwordrights_get.authorization_approval	Boolean	True if an approval workflow is defined in the authorization, otherwise False. Usable in the “sort” parameter.
WAB.passwordrights_get.authorization	String	The authorization name. Usable in the “sort” parameter.
WAB.passwordrights_get.authorization_description	String	The authorization description. Usable in the “sort” parameter.
WAB.passwordrights_get.right_fingerprint	String	The fingerprint of the right (hash of authorization and target uid).
WAB.passwordrights_get.timeframes	String	The group timeframe(s).
WAB.passwordrights_get.device	String	The device name. Usable in the “sort” parameter.
WAB.passwordrights_get.device_alias	String	The device alias. Usable in the “sort” parameter.
WAB.passwordrights_get.device_host	String	The device hostname or IP address. Usable in the “sort” parameter.
WAB.passwordrights_get.device_description	String	The device description. Usable in the “sort” parameter.
WAB.passwordrights_get.device_tags.id	String	The tag id.
WAB.passwordrights_get.device_tags.key	String	The tag key. Must not start or end with a space.
WAB.passwordrights_get.device_tags.value	String	The tag value. Must not start or end with a space.
WAB.passwordrights_get.application	String	The application name. Usable in the “sort” parameter.
WAB.passwordrights_get.application_description	String	The application description. Usable in the “sort” parameter.
WAB.passwordrights_get.application_tags.id	String	The tag id.
WAB.passwordrights_get.application_tags.key	String	The tag key. Must not start or end with a space.
WAB.passwordrights_get.application_tags.value	String	The tag value. Must not start or end with a space.
WAB.passwordrights_get.group_timeframes	String	The group timeframe(s).

wab-get-passwordrights-user-name

---

Get current user’s or the user ‘user_name’ password rights on accounts (for checkout/checkin)
category: Password Rights

Base Command

wab-get-passwordrights-user-name

Input

Argument Name	Description	Required
user_name	If specified, the user_name password rights is returned.	Required
count	The default value is false. When it is set to true, the headers x-total-count and x-filtered-count are returned. Possible values are: true, false.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.passwordrights_get.type	String	The account type.
WAB.passwordrights_get.target	String	The complete target identifier which can be used in resource /targetpasswords (format: “account_name@global_domain_name”). / The complete target identifier which can be used in resource /targetpasswords (example: “account@domain@device”). / The complete target identifier which can be used in resource /targetpasswords (format: “account_name@local_domain_name@application_name”).
WAB.passwordrights_get.account	String	The account name. Usable in the “sort” parameter.
WAB.passwordrights_get.account_description	String	The account description. Usable in the “sort” parameter.
WAB.passwordrights_get.domain	String	The global domain name. Usable in the “sort” parameter. / The local domain name on device. Usable in the “sort” parameter. / The local domain name on application. Usable in the “sort” parameter.
WAB.passwordrights_get.domain_description	String	The domain description. Usable in the “sort” parameter.
WAB.passwordrights_get.domain_vault	Boolean	The domain accounts are stored on an external vault. Usable in the “sort” parameter.
WAB.passwordrights_get.authorization_approval	Boolean	True if an approval workflow is defined in the authorization, otherwise False. Usable in the “sort” parameter.
WAB.passwordrights_get.authorization	String	The authorization name. Usable in the “sort” parameter.
WAB.passwordrights_get.authorization_description	String	The authorization description. Usable in the “sort” parameter.
WAB.passwordrights_get.right_fingerprint	String	The fingerprint of the right (hash of authorization and target uid).
WAB.passwordrights_get.timeframes	String	The group timeframe(s).
WAB.passwordrights_get.device	String	The device name. Usable in the “sort” parameter.
WAB.passwordrights_get.device_alias	String	The device alias. Usable in the “sort” parameter.
WAB.passwordrights_get.device_host	String	The device hostname or IP address. Usable in the “sort” parameter.
WAB.passwordrights_get.device_description	String	The device description. Usable in the “sort” parameter.
WAB.passwordrights_get.device_tags.id	String	The tag id.
WAB.passwordrights_get.device_tags.key	String	The tag key. Must not start or end with a space.
WAB.passwordrights_get.device_tags.value	String	The tag value. Must not start or end with a space.
WAB.passwordrights_get.application	String	The application name. Usable in the “sort” parameter.
WAB.passwordrights_get.application_description	String	The application description. Usable in the “sort” parameter.
WAB.passwordrights_get.application_tags.id	String	The tag id.
WAB.passwordrights_get.application_tags.key	String	The tag key. Must not start or end with a space.
WAB.passwordrights_get.application_tags.value	String	The tag value. Must not start or end with a space.
WAB.passwordrights_get.group_timeframes	String	The group timeframe(s).
WAB.passwordrights_get.user_name	String	the user_name.

wab-get-profiles

---

Get the profiles
category: Profiles

Base Command

wab-get-profiles

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘profile_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.profile_get.id	String	The profile id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.profile_name	String	The profile name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.editable	Boolean	Profile is editable. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.description	String	The target group description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.gui_features.wab_audit	String	wab audit.
WAB.profile_get.gui_features.system_audit	String	system audit.
WAB.profile_get.gui_features.users	String	users.
WAB.profile_get.gui_features.user_groups	String	user groups.
WAB.profile_get.gui_features.devices	String	devices.
WAB.profile_get.gui_features.target_groups	String	target groups.
WAB.profile_get.gui_features.authorizations	String	authorizations.
WAB.profile_get.gui_features.profiles	String	profiles.
WAB.profile_get.gui_features.wab_settings	String	wab settings.
WAB.profile_get.gui_features.system_settings	String	system settings.
WAB.profile_get.gui_features.backup	String	backup.
WAB.profile_get.gui_features.approval	String	approval.
WAB.profile_get.gui_features.credential_recovery	String	credential recovery.
WAB.profile_get.gui_transmission.system_audit	String	system audit.
WAB.profile_get.gui_transmission.users	String	users.
WAB.profile_get.gui_transmission.user_groups	String	user groups.
WAB.profile_get.gui_transmission.devices	String	devices.
WAB.profile_get.gui_transmission.target_groups	String	target groups.
WAB.profile_get.gui_transmission.authorizations	String	authorizations.
WAB.profile_get.gui_transmission.profiles	String	profiles.
WAB.profile_get.gui_transmission.wab_settings	String	wab settings.
WAB.profile_get.gui_transmission.system_settings	String	system settings.
WAB.profile_get.gui_transmission.backup	String	backup.
WAB.profile_get.gui_transmission.approval	String	approval.
WAB.profile_get.gui_transmission.credential_recovery	String	credential recovery.
WAB.profile_get.ip_limitation	String	The profile ip limitation. Format is an IPv4 address, subnet or host name, for example: 192.168.1.10/24 Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.target_access	Boolean	Target access.
WAB.profile_get.dashboards	String	Ordered list of dashboards names. Usable in the “q” parameter.
WAB.profile_get.url	String	The API URL to the resource.

wab-get-profile

---

Get the profile
category: Profiles

Base Command

wab-get-profile

Input

Argument Name	Description	Required
profile_id	A profile id or name. If specified, only this profile is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.profile_get.id	String	The profile id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.profile_name	String	The profile name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.editable	Boolean	Profile is editable. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.description	String	The target group description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.gui_features.wab_audit	String	wab audit.
WAB.profile_get.gui_features.system_audit	String	system audit.
WAB.profile_get.gui_features.users	String	users.
WAB.profile_get.gui_features.user_groups	String	user groups.
WAB.profile_get.gui_features.devices	String	devices.
WAB.profile_get.gui_features.target_groups	String	target groups.
WAB.profile_get.gui_features.authorizations	String	authorizations.
WAB.profile_get.gui_features.profiles	String	profiles.
WAB.profile_get.gui_features.wab_settings	String	wab settings.
WAB.profile_get.gui_features.system_settings	String	system settings.
WAB.profile_get.gui_features.backup	String	backup.
WAB.profile_get.gui_features.approval	String	approval.
WAB.profile_get.gui_features.credential_recovery	String	credential recovery.
WAB.profile_get.gui_transmission.system_audit	String	system audit.
WAB.profile_get.gui_transmission.users	String	users.
WAB.profile_get.gui_transmission.user_groups	String	user groups.
WAB.profile_get.gui_transmission.devices	String	devices.
WAB.profile_get.gui_transmission.target_groups	String	target groups.
WAB.profile_get.gui_transmission.authorizations	String	authorizations.
WAB.profile_get.gui_transmission.profiles	String	profiles.
WAB.profile_get.gui_transmission.wab_settings	String	wab settings.
WAB.profile_get.gui_transmission.system_settings	String	system settings.
WAB.profile_get.gui_transmission.backup	String	backup.
WAB.profile_get.gui_transmission.approval	String	approval.
WAB.profile_get.gui_transmission.credential_recovery	String	credential recovery.
WAB.profile_get.ip_limitation	String	The profile ip limitation. Format is an IPv4 address, subnet or host name, for example: 192.168.1.10/24 Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.profile_get.target_access	Boolean	Target access.
WAB.profile_get.dashboards	String	Ordered list of dashboards names. Usable in the “q” parameter.
WAB.profile_get.url	String	The API URL to the resource.

wab-get-scanjobs

---

Get the scanjobs
category: Scan Jobs

Base Command

wab-get-scanjobs

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘scan_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.scanjob_get.id	String	The scan job id. Usable in the “sort” parameter.
WAB.scanjob_get.type	String	Scan type Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scanjob_get.error	String	Error message.
WAB.scanjob_get.status	String	Scan job status Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scanjob_get.start	String	Scan job start timestamp. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scanjob_get.end	String	Scan job end timestamp Usable in the “q” parameter. Usable in the “sort” parameter.

wab-start-scan-job-manually

---

Start a scan job manually
category: Scan Jobs

Base Command

wab-start-scan-job-manually

Input

Argument Name	Description	Required
scanjob_post_scan_id	Scan definition id.	Required

Context Output

Path	Type	Description
WAB.start_scan_job_manually.id	String	id of the created object.

wab-get-scanjob

---

Get the scanjob
category: Scan Jobs

Base Command

wab-get-scanjob

Input

Argument Name	Description	Required
scanjob_id	A scan job id or name. If specified, only this scan job is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.scanjob_get.id	String	The scan job id. Usable in the “sort” parameter.
WAB.scanjob_get.type	String	Scan type Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scanjob_get.error	String	Error message.
WAB.scanjob_get.status	String	Scan job status Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scanjob_get.start	String	Scan job start timestamp. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scanjob_get.end	String	Scan job end timestamp Usable in the “q” parameter. Usable in the “sort” parameter.

wab-cancel-scan-job

---

Cancel a scan job
category: Scan Jobs

Base Command

wab-cancel-scan-job

Input

Argument Name	Description	Required
scanjob_id	The scan id or name to edit.	Required

Context Output

There is no context output for this command.

wab-get-scans

---

Get the scans
category: Scans

Base Command

wab-get-scans

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘scan_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.scan_get.id	String	The scan id. Usable in the “sort” parameter.
WAB.scan_get.name	String	Scan name Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.active	Boolean	State of the job schedule. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.periodicity	String	Periodicity of the scan, in cron notation. Usable in the “q” parameter.
WAB.scan_get.description	String	Description of the scan. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.emails	String	Emails to notify when a job is finished.
WAB.scan_get.last_job.id	String	UID of the job.
WAB.scan_get.last_job.status	String	status.
WAB.scan_get.last_job.start	String	Timestamp of the job start.
WAB.scan_get.last_job.end	String	Timestamp of the job end.
WAB.scan_get.type	String	Scan type Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.subnets	String	List of subnets to scan. Usable in the “q” parameter.
WAB.scan_get.protocols.protocol	String	protocol.
WAB.scan_get.protocols.port	Number	The port number.
WAB.scan_get.banner_regex	String	Regexes to mach on SSH banner.
WAB.scan_get.scan_for_accounts	Boolean	Scan for accounts on discovered devices. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.master_accounts	String	The master accounts used to log and the devices empty if scan_for_accounts is false.
WAB.scan_get.url	String	The API URL to the resource.
WAB.scan_get.search_filter	String	Active Directory search filter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.userauth.auth_id	String	ID of the Active Directory user authentication.
WAB.scan_get.userauth.auth_name	String	Name of the authentication.
WAB.scan_get.dn_list	String	List of Distinguished Names to search. Usable in the “q” parameter.
WAB.scan_get.devices	String	The devices to scan.
WAB.scan_get.protocol.protocol	String	protocol.
WAB.scan_get.protocol.port	Number	The port number.

wab-get-scan

---

Get the scan
category: Scans

Base Command

wab-get-scan

Input

Argument Name	Description	Required
scan_id	A scan id or name. If specified, only this scan is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.scan_get.id	String	The scan id. Usable in the “sort” parameter.
WAB.scan_get.name	String	Scan name Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.active	Boolean	State of the job schedule. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.periodicity	String	Periodicity of the scan, in cron notation. Usable in the “q” parameter.
WAB.scan_get.description	String	Description of the scan. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.emails	String	Emails to notify when a job is finished.
WAB.scan_get.last_job.id	String	UID of the job.
WAB.scan_get.last_job.status	String	status.
WAB.scan_get.last_job.start	String	Timestamp of the job start.
WAB.scan_get.last_job.end	String	Timestamp of the job end.
WAB.scan_get.type	String	Scan type Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.subnets	String	List of subnets to scan. Usable in the “q” parameter.
WAB.scan_get.protocols.protocol	String	protocol.
WAB.scan_get.protocols.port	Number	The port number.
WAB.scan_get.banner_regex	String	Regexes to mach on SSH banner.
WAB.scan_get.scan_for_accounts	Boolean	Scan for accounts on discovered devices. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.master_accounts	String	The master accounts used to log and the devices empty if scan_for_accounts is false.
WAB.scan_get.url	String	The API URL to the resource.
WAB.scan_get.search_filter	String	Active Directory search filter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.scan_get.userauth.auth_id	String	ID of the Active Directory user authentication.
WAB.scan_get.userauth.auth_name	String	Name of the authentication.
WAB.scan_get.dn_list	String	List of Distinguished Names to search. Usable in the “q” parameter.
WAB.scan_get.devices	String	The devices to scan.
WAB.scan_get.protocol.protocol	String	protocol.
WAB.scan_get.protocol.port	Number	The port number.

wab-edit-scan

---

Edit a scan
category: Scans

Base Command

wab-edit-scan

Input

Argument Name	Description	Required
scan_id	The scan id or name to edit.	Required
scan_put_name	Scan name.	Optional
scan_put_active	State of the job schedule. Possible values are: true, false.	Optional
scan_put_periodicity	Periodicity of the scan, in cron notation.	Optional
scan_put_description	Description of the scan.	Optional
scan_put_emails	Emails to notify when a job is finished. Comma-separated list (use [] for an empty list).	Optional
scan_put_subnets	List of subnets to scan. Comma-separated list (use [] for an empty list).	Optional
scan_put_banner_regex	Regexes to mach on SSH banner. Comma-separated list (use [] for an empty list).	Optional
scan_put_scan_for_accounts	Scan for accounts on discovered devices. Possible values are: true, false.	Optional
scan_put_master_accounts	The master accounts used to log and the devices empty if scan_for_accounts is false. Comma-separated list (use [] for an empty list).	Optional
scan_put_search_filter	Active Directory search filter.	Optional
scan_put_dn_list	List of Distinguished Names to search. Comma-separated list (use [] for an empty list).	Optional
scan_put_devices	The devices to scan. Comma-separated list (use [] for an empty list).	Optional

Context Output

There is no context output for this command.

wab-delete-scan

---

Delete a scan
category: Scans

Base Command

wab-delete-scan

Input

Argument Name	Description	Required
scan_id	The scan id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-sessionrights

---

Get current user’s or the user ‘user_name’ session rights (connections via proxies)
category: Session Rights

Base Command

wab-get-sessionrights

Input

Argument Name	Description	Required
count	The default value is false. When set to true, the headers x-total-count and x-filtered-count are returned. Possible values are: true, false.	Optional
last_connection	The default value is false. When set to true, the last connection date is returned for each authorizations. Possible values are: true, false.	Optional
q	Only a simple string to search is allowed in this resource (for exemple: ‘q=windows’). The search is performed on the following fields only: account, account_description, device, device_alias, device_description, application, application_description, service_protocol, domain, domain_description, authorization, authorization_description.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘account,domain,device, ‘ ‘application’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.sessionrights_get.type	String	The resource type.
WAB.sessionrights_get.account	String	The account name. Usable in the “sort” parameter.
WAB.sessionrights_get.account_description	String	The account description. Usable in the “sort” parameter.
WAB.sessionrights_get.domain	String	The domain name. Usable in the “sort” parameter.
WAB.sessionrights_get.domain_description	String	The domain description. Usable in the “sort” parameter.
WAB.sessionrights_get.device	String	The device name. Usable in the “sort” parameter.
WAB.sessionrights_get.device_alias	String	The device alias. Usable in the “sort” parameter.
WAB.sessionrights_get.device_host	String	The device hostname or IP address. Usable in the “sort” parameter.
WAB.sessionrights_get.device_description	String	The device description. Usable in the “sort” parameter.
WAB.sessionrights_get.service	String	The service name. Usable in the “sort” parameter.
WAB.sessionrights_get.service_port	Number	The service port. Usable in the “sort” parameter.
WAB.sessionrights_get.service_protocol	String	The protocol name. Usable in the “sort” parameter.
WAB.sessionrights_get.subprotocols	String	The sub protocols.
WAB.sessionrights_get.authorization_approval	Boolean	True if an approval workflow is defined in the authorization, otherwise False. Usable in the “sort” parameter.
WAB.sessionrights_get.authorization	String	The authorization name. Usable in the “sort” parameter.
WAB.sessionrights_get.authorization_description	String	The authorization description. Usable in the “sort” parameter.
WAB.sessionrights_get.session_sharing	String	Value of Session Sharing option for the corresponding authorization.
WAB.sessionrights_get.account_mapping	Boolean	Account mapping.
WAB.sessionrights_get.account_mapping_vault	Boolean	Account mapping with a vault account.
WAB.sessionrights_get.interactive_login	Boolean	Interactive login.
WAB.sessionrights_get.authentication_methods	String	The authentication methods allowed by the connection policy.
WAB.sessionrights_get.device_tags.id	String	The tag id.
WAB.sessionrights_get.device_tags.key	String	The tag key. Must not start or end with a space.
WAB.sessionrights_get.device_tags.value	String	The tag value. Must not start or end with a space.
WAB.sessionrights_get.right_fingerprint	String	The fingerprint of the right (hash of authorization and target uid).
WAB.sessionrights_get.timeframes	String	The timeframes during which the user can access the target.
WAB.sessionrights_get.last_connection	String	The date of the last connection (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “sort” parameter.
WAB.sessionrights_get.service_options.multi_tunneling.enabled	Boolean	The multi-tunneling is enabled.
WAB.sessionrights_get.service_options.multi_tunneling.additional_interfaces.ip	String	The ip address.
WAB.sessionrights_get.service_options.multi_tunneling.additional_interfaces.port	Number	The port address.
WAB.sessionrights_get.service_options.seamless_connection	Boolean	The seamless connection.
WAB.sessionrights_get.application	String	The application name. Usable in the “sort” parameter.
WAB.sessionrights_get.application_description	String	The application description. Usable in the “sort” parameter.
WAB.sessionrights_get.application_tags.id	String	The tag id.
WAB.sessionrights_get.application_tags.key	String	The tag key. Must not start or end with a space.
WAB.sessionrights_get.application_tags.value	String	The tag value. Must not start or end with a space.

wab-get-sessionrights-user-name

---

Get current user’s or the user ‘user_name’ session rights (connections via proxies)
category: Session Rights

Base Command

wab-get-sessionrights-user-name

Input

Argument Name	Description	Required
user_name	If specified, the user_name session rights is returned.	Required
count	The default value is false. When set to true, the headers x-total-count and x-filtered-count are returned. Possible values are: true, false.	Optional
last_connection	The default value is false. When set to true, the last connection date is returned for each authorizations. Possible values are: true, false.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.sessionrights_get.type	String	The resource type.
WAB.sessionrights_get.account	String	The account name. Usable in the “sort” parameter.
WAB.sessionrights_get.account_description	String	The account description. Usable in the “sort” parameter.
WAB.sessionrights_get.domain	String	The domain name. Usable in the “sort” parameter.
WAB.sessionrights_get.domain_description	String	The domain description. Usable in the “sort” parameter.
WAB.sessionrights_get.device	String	The device name. Usable in the “sort” parameter.
WAB.sessionrights_get.device_alias	String	The device alias. Usable in the “sort” parameter.
WAB.sessionrights_get.device_host	String	The device hostname or IP address. Usable in the “sort” parameter.
WAB.sessionrights_get.device_description	String	The device description. Usable in the “sort” parameter.
WAB.sessionrights_get.service	String	The service name. Usable in the “sort” parameter.
WAB.sessionrights_get.service_port	Number	The service port. Usable in the “sort” parameter.
WAB.sessionrights_get.service_protocol	String	The protocol name. Usable in the “sort” parameter.
WAB.sessionrights_get.subprotocols	String	The sub protocols.
WAB.sessionrights_get.authorization_approval	Boolean	True if an approval workflow is defined in the authorization, otherwise False. Usable in the “sort” parameter.
WAB.sessionrights_get.authorization	String	The authorization name. Usable in the “sort” parameter.
WAB.sessionrights_get.authorization_description	String	The authorization description. Usable in the “sort” parameter.
WAB.sessionrights_get.session_sharing	String	Value of Session Sharing option for the corresponding authorization.
WAB.sessionrights_get.account_mapping	Boolean	Account mapping.
WAB.sessionrights_get.account_mapping_vault	Boolean	Account mapping with a vault account.
WAB.sessionrights_get.interactive_login	Boolean	Interactive login.
WAB.sessionrights_get.authentication_methods	String	The authentication methods allowed by the connection policy.
WAB.sessionrights_get.device_tags.id	String	The tag id.
WAB.sessionrights_get.device_tags.key	String	The tag key. Must not start or end with a space.
WAB.sessionrights_get.device_tags.value	String	The tag value. Must not start or end with a space.
WAB.sessionrights_get.right_fingerprint	String	The fingerprint of the right (hash of authorization and target uid).
WAB.sessionrights_get.timeframes	String	The timeframes during which the user can access the target.
WAB.sessionrights_get.last_connection	String	The date of the last connection (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “sort” parameter.
WAB.sessionrights_get.service_options.multi_tunneling.enabled	Boolean	The multi-tunneling is enabled.
WAB.sessionrights_get.service_options.multi_tunneling.additional_interfaces.ip	String	The ip address.
WAB.sessionrights_get.service_options.multi_tunneling.additional_interfaces.port	Number	The port address.
WAB.sessionrights_get.service_options.seamless_connection	Boolean	The seamless connection.
WAB.sessionrights_get.application	String	The application name. Usable in the “sort” parameter.
WAB.sessionrights_get.application_description	String	The application description. Usable in the “sort” parameter.
WAB.sessionrights_get.application_tags.id	String	The tag id.
WAB.sessionrights_get.application_tags.key	String	The tag key. Must not start or end with a space.
WAB.sessionrights_get.application_tags.value	String	The tag value. Must not start or end with a space.
WAB.sessionrights_get.user_name	String	the user_name.

wab-get-sessions

---

Get the sessions
category: Sessions

Base Command

wab-get-sessions

Input

Argument Name	Description	Required
session_id	A session id. If specified, only this session is returned.	Optional
otp	User’s OTP (One Time Password) If specified, only the session initiated with the provided OTP is returned.	Optional
status	Status of sessions to return: “closed” for closed sessions (default) or “current” for current sessions.	Optional
from_date	Return sessions from this date/time (format: “yyyy-mm-dd” or “yyyy-mm-dd hh:mm:ss”).	Optional
to_date	Return sessions until this date/time (format: “yyyy-mm-dd” or “yyyy-mm-dd hh:mm:ss”).	Optional
date_field	The field used for date comparison: “begin” for the start of session, “end” for the end of session.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘end,id’ when status is ‘closed’, ‘begin,id’ when status is ‘current’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.session_get.id	String	The session id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.begin	String	The beginning date/time of the session (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.end	String	The end date/time of the session (format: “yyyy-mm-dd hh:mm:ss”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.username	String	The primary user name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.source_ip	String	The source IP. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.source_protocol	String	The source protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_account	String	The target account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_effective_login	String	The effective login.
WAB.session_get.target_account_domain	String	The target account domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_device	String	The target device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_port	Number	The target port number Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_host	String	The target hostname or IP. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_effective_host	String	The effective target IP.
WAB.session_get.target_service	String	The target service name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_protocol	String	The target protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.target_sub_protocol	String	The target sub-protocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.is_application	Boolean	The session is on an application.
WAB.session_get.result	Boolean	The session is successful. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.killed	Boolean	The session has been killed.
WAB.session_get.diagnostic	String	The diagnostic message. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.description	String	The session description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.title	String	The session title. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.is_recorded	Boolean	The session is recorded. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.is_critical	Boolean	The session is critical. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.session_trace_size	Number	Size of the session trace file, in bytes (if -1, there is no trace file).
WAB.session_get.session_log_size	Number	Size of the session log file (metadata), in bytes (if -1, there is no metadata file).
WAB.session_get.approval.id	String	The approval id.
WAB.session_get.approval.user_name	String	The user name.
WAB.session_get.approval.target_name	String	The target name.(example: account@domain@device:service).
WAB.session_get.approval.creation	String	The creation date.(format: “yyyy-mm-dd hh:mm”).
WAB.session_get.approval.begin	String	The start date/time for connection.(format: “yyyy-mm-dd hh:mm”).
WAB.session_get.approval.end	String	The end date/time for connection.(format: “yyyy-mm-dd hh:mm”).
WAB.session_get.approval.duration	Number	The allowed connection time, in minutes.
WAB.session_get.approval.ticket	String	The ticket reference.
WAB.session_get.approval.comment	String	The request description.
WAB.session_get.approval.email	String	The user email.
WAB.session_get.approval.language	String	The user language code (en, fr, …).
WAB.session_get.approval.status	String	The approval status.
WAB.session_get.approval.quorum	Number	The quorum to reach.
WAB.session_get.approval.answers.approver_name	String	The user name of approver.
WAB.session_get.approval.answers.date	String	The answer date (format: “yyyy-mm-dd hh:mm”).
WAB.session_get.approval.answers.comment	String	The answer comment.
WAB.session_get.approval.answers.approved	Boolean	Request approval (true = accepted, false = rejected).
WAB.session_get.approval.timeout	Number	Timeout to initiate the first connection (in minutes). After that, the approval will be automatically closed. 0: no timeout.
WAB.session_get.approval.authorization_name	String	The authorization name.
WAB.session_get.approval.is_active	Boolean	The approval is active.
WAB.session_get.approval.account	String	The account name.
WAB.session_get.approval.domain	String	The domain name.
WAB.session_get.approval.device	String	The device name.
WAB.session_get.approval.application	String	The application name.
WAB.session_get.approval.service	String	The service name.
WAB.session_get.approval.url	String	The API URL to the resource.
WAB.session_get.user_group	String	Name of the user group in authorization used to make the session. Usable in the “sort” parameter.
WAB.session_get.target_group	String	Name of the target group in authorization used to make the session. Usable in the “sort” parameter.
WAB.session_get.owner	String	The node id which own this session. Usable in the “sort” parameter.
WAB.session_get.target_session_id	String	The RDP target session id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.session_get.shared_session.id	String	The session id.
WAB.session_get.shared_session.url	String	The API URL to the resource.
WAB.session_get.auditor_sessions.id	String	The session id.
WAB.session_get.auditor_sessions.url	String	The API URL to the resource.
WAB.session_get.url	String	The API URL to the resource.

wab-edit-session

---

Edit a session
category: Sessions

Base Command

wab-edit-session

Input

Argument Name	Description	Required
session_id	The session id to edit.	Required
action	The action on the session: ‘edit’ to edit the session (default), ‘kill’ to kill the session.	Optional
session_put_edit_description	The new session description.	Required

Context Output

There is no context output for this command.

wab-get-session-metadata

---

Get the metadata of one or multiple sessions
category: Sessions Metadata

Base Command

wab-get-session-metadata

Input

Argument Name	Description	Required
session_ids	The session id, multiple IDs can be separated by commas.	Required
download	The default value is false. When it is set to true, the session metadata is sent as a file instead of JSON (recommended for large metadata). The download is possible only with a single session id. Possible values are: true, false.	Optional

Context Output

Path	Type	Description
WAB.session_metadata_get.session_id	String	The session id.
WAB.session_metadata_get.metadata	String	The session metadata content.

wab-get-session-sharing-requests

---

Get session sharing requests
category: Sessions Requests

Base Command

wab-get-session-sharing-requests

Input

Argument Name	Description	Required
request_id	A request id. If specified, only this request is returned.	Optional
session_id	A session id. If specified, only the request linked to this session is returned.	Optional

Context Output

Path	Type	Description
WAB.session_request_get.id	String	The request id. Usable in the “sort” parameter.
WAB.session_request_get.session_id	String	The session id. Usable in the “sort” parameter.
WAB.session_request_get.mode	String	The session sharing mode.
WAB.session_request_get.context	String	The request context.
WAB.session_request_get.status	String	The request status.
WAB.session_request_get.creation_date	String	The request creation date/time (format: “yyyy-mm-dd hh:mm:ss”).
WAB.session_request_get.expiration_date	String	The request expiration date/time (format: “yyyy-mm-dd hh:mm:ss”).
WAB.session_request_get.guest_session_id	String	The guest session id. Usable in the “sort” parameter.
WAB.session_request_get.guest_id	String	A Guest ID (random if unknown invited guest) or a username (if known Bastion user). Usable in the “sort” parameter.

wab-create-session-request

---

Create a session request
category: Sessions Requests

Base Command

wab-create-session-request

Input

Argument Name	Description	Required
session_request_post_session_id	The session id.	Required
session_request_post_mode	The session sharing mode. Possible values are: view_only, view_control.	Required

Context Output

There is no context output for this command.

wab-delete-pending-or-live-session-request

---

Delete a pending or a live session request
category: Sessions Requests

Base Command

wab-delete-pending-or-live-session-request

Input

Argument Name	Description	Required
request_id	The session sharing request to delete.	Required

Context Output

There is no context output for this command.

wab-get-latest-snapshot-of-running-session

---

Get the latest snapshot of a running session
category: Sessions Snapshots

Base Command

wab-get-latest-snapshot-of-running-session

Input

Argument Name	Description	Required
session_id	The session id.	Required

Context Output

There is no context output for this command.

wab-get-status-of-trace-generation

---

Get the status of a trace generation
category: Sessions Traces

Base Command

wab-get-status-of-trace-generation

Input

Argument Name	Description	Required
session_id	The session id.	Required
date	Generate the trace from this date/time (format: “yyyy-mm-dd hh:mm:ss”).	Optional
duration	Duration of the trace to generate (in seconds).	Optional
download	The default value is false. When it is set to true, the session trace is sent as a file instead of JSON output with the generation status. Possible values are: true, false.	Optional

Context Output

Path	Type	Description
WAB.session_trace_get.session_id	String	The session id.
WAB.session_trace_get.date	String	The starting date/time (format: “yyyy-mm-dd hh:mm:ss”).
WAB.session_trace_get.duration	Number	The duration (in seconds).
WAB.session_trace_get.status	String	The generation status.
WAB.session_trace_get.reason	String	The error description (only in case of error).
WAB.session_trace_get.progress_pct	Number	Progress (percent).
WAB.session_trace_get.eta	Number	Estimated time before end of generation (in seconds).

wab-generate-trace-for-session

---

Generate a trace for a session
category: Sessions Traces

Base Command

wab-generate-trace-for-session

Input

Argument Name	Description	Required
session_trace_post_session_id	The session id.	Required
session_trace_post_date	The starting date/time (format: “yyyy-mm-dd hh:mm:ss”).	Optional
session_trace_post_duration	The duration (in seconds).	Optional

Context Output

Path	Type	Description
WAB.generate_trace_for_session.id	String	id of the created object.

wab-get-wallix-bastion-usage-statistics

---

Get the WALLIX Bastion usage statistics. If no from_date or to_date are supplied it will return the statistics for the last full calendar month
category: Statistics

Base Command

wab-get-wallix-bastion-usage-statistics

Input

Argument Name	Description	Required
from_date	Get statistics from this date at midnight (format: “yyyy-mm-dd”).	Optional
to_date	Get statistics until this date at 23:59:59 (format: “yyyy-mm-dd”).	Optional

Context Output

Path	Type	Description
WAB.statistics_get.from_date	String	Beginning of the interval (format: “yyyy-mm-dd”).
WAB.statistics_get.to_date	String	End of the interval (format: “yyyy-mm-dd”).
WAB.statistics_get.primary_connections.min	Number	Lowest simultaneous objects.
WAB.statistics_get.primary_connections.average	Number	Average simultaneous objects.
WAB.statistics_get.primary_connections.max	Number	Maximum simultaneous objects.
WAB.statistics_get.secondary_connections.min	Number	Lowest simultaneous objects.
WAB.statistics_get.secondary_connections.average	Number	Average simultaneous objects.
WAB.statistics_get.secondary_connections.max	Number	Maximum simultaneous objects.
WAB.statistics_get.device_count.min	Number	Lowest simultaneous objects.
WAB.statistics_get.device_count.average	Number	Average simultaneous objects.
WAB.statistics_get.device_count.max	Number	Maximum simultaneous objects.
WAB.statistics_get.application_count.min	Number	Lowest simultaneous objects.
WAB.statistics_get.application_count.average	Number	Average simultaneous objects.
WAB.statistics_get.application_count.max	Number	Maximum simultaneous objects.

wab-get-target-groups

---

Get the target groups
category: Target Groups

Base Command

wab-get-target-groups

Input

Argument Name	Description	Required
device	Return only the targetgroups this device belongs to.	Optional
application	Return only the targetgroups this application belongs to.	Optional
domain	Return only the targetgroups this domain belongs to.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘group_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.targetgroups_get.id	String	The target group id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.targetgroups_get.group_name	String	The target group name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.targetgroups_get.description	String	The target group description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.targetgroups_get.session.accounts.id	String	The target id.
WAB.targetgroups_get.session.accounts.account	String	The account name.
WAB.targetgroups_get.session.accounts.domain	String	The domain name.
WAB.targetgroups_get.session.accounts.domain_type	String	The domain type: local or global.
WAB.targetgroups_get.session.accounts.device	String	The device name (null for an application or a global domain).
WAB.targetgroups_get.session.accounts.service	String	The service name (null for an application or a global domain).
WAB.targetgroups_get.session.accounts.application	String	The application name (null for a device or a global domain).
WAB.targetgroups_get.session.account_mappings.id	String	The target id.
WAB.targetgroups_get.session.account_mappings.device	String	The device name (null for an application).
WAB.targetgroups_get.session.account_mappings.service	String	The service name (null for an application).
WAB.targetgroups_get.session.account_mappings.application	String	The application name (null for a device).
WAB.targetgroups_get.session.interactive_logins.id	String	The target id.
WAB.targetgroups_get.session.interactive_logins.device	String	The device name (null for an application).
WAB.targetgroups_get.session.interactive_logins.service	String	The service name (null for an application).
WAB.targetgroups_get.session.interactive_logins.application	String	The application name (null for a device).
WAB.targetgroups_get.session.scenario_accounts.id	String	The target id.
WAB.targetgroups_get.session.scenario_accounts.account	String	The account name.
WAB.targetgroups_get.session.scenario_accounts.domain	String	The domain name.
WAB.targetgroups_get.session.scenario_accounts.domain_type	String	The domain type: local or global.
WAB.targetgroups_get.session.scenario_accounts.device	String	The device name (null for an application or a global domain).
WAB.targetgroups_get.session.scenario_accounts.application	String	The application name (null for a device or a global domain).
WAB.targetgroups_get.password_retrieval.accounts.id	String	The target id.
WAB.targetgroups_get.password_retrieval.accounts.account	String	The account name.
WAB.targetgroups_get.password_retrieval.accounts.domain	String	The domain name.
WAB.targetgroups_get.password_retrieval.accounts.domain_type	String	The domain type: local or global.
WAB.targetgroups_get.password_retrieval.accounts.device	String	The device name (null for an application or a global domain).
WAB.targetgroups_get.password_retrieval.accounts.application	String	The application name (null for a device or a global domain).
WAB.targetgroups_get.restrictions.id	String	The restriction id.
WAB.targetgroups_get.restrictions.action	String	The restriction type.
WAB.targetgroups_get.restrictions.rules	String	The restriction rules.
WAB.targetgroups_get.restrictions.subprotocol	String	The restriction subprotocol.
WAB.targetgroups_get.url	String	The API URL to the resource.

wab-add-target-group

---

Add a target group
category: Target Groups

Base Command

wab-add-target-group

Input

Argument Name	Description	Required
targetgroups_post_group_name	The target group name.	Required
targetgroups_post_description	The target group description.	Optional

Context Output

Path	Type	Description
WAB.add_target_group.id	String	id of the created object.

wab-get-target-group

---

Get the target group
category: Target Groups

Base Command

wab-get-target-group

Input

Argument Name	Description	Required
group_id	A target group id or name. If specified, only this target group is returned.	Required
device	Return only the targetgroups this device belongs to.	Optional
application	Return only the targetgroups this application belongs to.	Optional
domain	Return only the targetgroups this domain belongs to.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.targetgroups_get.id	String	The target group id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.targetgroups_get.group_name	String	The target group name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.targetgroups_get.description	String	The target group description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.targetgroups_get.session.accounts.id	String	The target id.
WAB.targetgroups_get.session.accounts.account	String	The account name.
WAB.targetgroups_get.session.accounts.domain	String	The domain name.
WAB.targetgroups_get.session.accounts.domain_type	String	The domain type: local or global.
WAB.targetgroups_get.session.accounts.device	String	The device name (null for an application or a global domain).
WAB.targetgroups_get.session.accounts.service	String	The service name (null for an application or a global domain).
WAB.targetgroups_get.session.accounts.application	String	The application name (null for a device or a global domain).
WAB.targetgroups_get.session.account_mappings.id	String	The target id.
WAB.targetgroups_get.session.account_mappings.device	String	The device name (null for an application).
WAB.targetgroups_get.session.account_mappings.service	String	The service name (null for an application).
WAB.targetgroups_get.session.account_mappings.application	String	The application name (null for a device).
WAB.targetgroups_get.session.interactive_logins.id	String	The target id.
WAB.targetgroups_get.session.interactive_logins.device	String	The device name (null for an application).
WAB.targetgroups_get.session.interactive_logins.service	String	The service name (null for an application).
WAB.targetgroups_get.session.interactive_logins.application	String	The application name (null for a device).
WAB.targetgroups_get.session.scenario_accounts.id	String	The target id.
WAB.targetgroups_get.session.scenario_accounts.account	String	The account name.
WAB.targetgroups_get.session.scenario_accounts.domain	String	The domain name.
WAB.targetgroups_get.session.scenario_accounts.domain_type	String	The domain type: local or global.
WAB.targetgroups_get.session.scenario_accounts.device	String	The device name (null for an application or a global domain).
WAB.targetgroups_get.session.scenario_accounts.application	String	The application name (null for a device or a global domain).
WAB.targetgroups_get.password_retrieval.accounts.id	String	The target id.
WAB.targetgroups_get.password_retrieval.accounts.account	String	The account name.
WAB.targetgroups_get.password_retrieval.accounts.domain	String	The domain name.
WAB.targetgroups_get.password_retrieval.accounts.domain_type	String	The domain type: local or global.
WAB.targetgroups_get.password_retrieval.accounts.device	String	The device name (null for an application or a global domain).
WAB.targetgroups_get.password_retrieval.accounts.application	String	The application name (null for a device or a global domain).
WAB.targetgroups_get.restrictions.id	String	The restriction id.
WAB.targetgroups_get.restrictions.action	String	The restriction type.
WAB.targetgroups_get.restrictions.rules	String	The restriction rules.
WAB.targetgroups_get.restrictions.subprotocol	String	The restriction subprotocol.
WAB.targetgroups_get.url	String	The API URL to the resource.

wab-edit-target-group

---

Edit a target group
category: Target Groups

Base Command

wab-edit-target-group

Input

Argument Name	Description	Required
group_id	The group id or name to edit.	Required
force	The default value is false. When it is set to true the values of the targets are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
targetgroups_put_group_name	The target group name.	Optional
targetgroups_put_description	The target group description.	Optional

Context Output

There is no context output for this command.

wab-delete-target-group

---

Delete a target group
category: Target Groups

Base Command

wab-delete-target-group

Input

Argument Name	Description	Required
group_id	The group id or name to delete.	Required

Context Output

There is no context output for this command.

wab-delete-target-from-group

---

Delete a target from a group
category: Target Groups

Base Command

wab-delete-target-from-group

Input

Argument Name	Description	Required
group_id	The group id or name to delete.	Required
target_type	The type of target group, one of: ‘session_accounts’, ‘session_account_mappings’, ‘session_interactive_logins’, ‘session_scenario_accounts’, ‘password_retrieval_accounts’.	Required
target_id	The target id or name to remove from the group.	Required

Context Output

There is no context output for this command.

wab-get-timeframes

---

Get the timeframes
category: Timeframes

Base Command

wab-get-timeframes

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘timeframe_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.timeframe_get.id	String	The timeframe id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.timeframe_get.timeframe_name	String	The timeframe name. No space is permitted at first or end. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.timeframe_get.description	String	The timeframe description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.timeframe_get.is_overtimable	Boolean	Do not close sessions at the end of the time period.
WAB.timeframe_get.periods.start_date	String	The period start date. Must respect the format “yyyy-mm-dd”.
WAB.timeframe_get.periods.end_date	String	The period end date. Must respect the format “yyyy-mm-dd”.
WAB.timeframe_get.periods.start_time	String	The period start time. Must respect the format “hh:mm”.
WAB.timeframe_get.periods.end_time	String	The period end time. Must respect the format “hh:mm”.
WAB.timeframe_get.periods.week_days	String	The period week days.
WAB.timeframe_get.url	String	The API URL to the resource.

wab-add-timeframe

---

Add a timeframe
category: Timeframes

Base Command

wab-add-timeframe

Input

Argument Name	Description	Required
timeframe_post_timeframe_name	The timeframe name. No space is permitted at first or end.	Required
timeframe_post_description	The timeframe description.	Optional
timeframe_post_is_overtimable	Do not close sessions at the end of the time period. Possible values are: true, false.	Optional

Context Output

Path	Type	Description
WAB.add_timeframe.id	String	id of the created object.

wab-get-timeframe

---

Get the timeframe
category: Timeframes

Base Command

wab-get-timeframe

Input

Argument Name	Description	Required
timeframe_id	A timeframe id or name. If specified, only this timeframe is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.timeframe_get.id	String	The timeframe id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.timeframe_get.timeframe_name	String	The timeframe name. No space is permitted at first or end. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.timeframe_get.description	String	The timeframe description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.timeframe_get.is_overtimable	Boolean	Do not close sessions at the end of the time period.
WAB.timeframe_get.periods.start_date	String	The period start date. Must respect the format “yyyy-mm-dd”.
WAB.timeframe_get.periods.end_date	String	The period end date. Must respect the format “yyyy-mm-dd”.
WAB.timeframe_get.periods.start_time	String	The period start time. Must respect the format “hh:mm”.
WAB.timeframe_get.periods.end_time	String	The period end time. Must respect the format “hh:mm”.
WAB.timeframe_get.periods.week_days	String	The period week days.
WAB.timeframe_get.url	String	The API URL to the resource.

wab-edit-timeframe

---

Edit a timeframe
category: Timeframes

Base Command

wab-edit-timeframe

Input

Argument Name	Description	Required
timeframe_id	The timeframe id or name to edit.	Required
timeframe_put_timeframe_name	The timeframe name. No space is permitted at first or end.	Optional
timeframe_put_description	The timeframe description.	Optional
timeframe_put_is_overtimable	Do not close sessions at the end of the time period. Possible values are: true, false.	Optional

Context Output

There is no context output for this command.

wab-delete-timeframe

---

Delete a timeframe
category: Timeframes

Base Command

wab-delete-timeframe

Input

Argument Name	Description	Required
timeframe_id	The timeframe id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-user-groups

---

Get the user groups
category: User Groups

Base Command

wab-get-user-groups

Input

Argument Name	Description	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘group_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.usergroups_get.id	String	The group id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.group_name	String	The group name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.profile	String	The group profile.
WAB.usergroups_get.description	String	The group description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.timeframes	String	The group timeframe(s).
WAB.usergroups_get.users	String	The users in the group.
WAB.usergroups_get.language	String	Language of the notifications. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.email_list	String	Approvers’ email addresses, separated by semicolons “;”. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.restrictions.id	String	The restriction id.
WAB.usergroups_get.restrictions.action	String	The restriction type.
WAB.usergroups_get.restrictions.rules	String	The restriction rules.
WAB.usergroups_get.restrictions.subprotocol	String	The restriction subprotocol.
WAB.usergroups_get.url	String	The API URL to the resource.

wab-add-user-group

---

Add a user group
category: User Groups

Base Command

wab-add-user-group

Input

Argument Name	Description	Required
usergroups_post_group_name	The group name.	Required
usergroups_post_profile	The group profile. (enter null for null value).	Optional
usergroups_post_description	The group description.	Optional
usergroups_post_timeframes	The group timeframe(s). Comma-separated list (use [] for an empty list).	Required
usergroups_post_users	The users in the group. Comma-separated list (use [] for an empty list).	Optional
usergroups_post_language	Language of the notifications. Possible values are: de, en, es, fr, ru.	Optional
usergroups_post_email_list	Approvers’ email addresses, separated by semicolons “;”.	Optional

Context Output

Path	Type	Description
WAB.add_user_group.id	String	id of the created object.

wab-get-user-group

---

Get the user group
category: User Groups

Base Command

wab-get-user-group

Input

Argument Name	Description	Required
group_id	A user group id or name. If specified, only this user group is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.usergroups_get.id	String	The group id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.group_name	String	The group name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.profile	String	The group profile.
WAB.usergroups_get.description	String	The group description. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.timeframes	String	The group timeframe(s).
WAB.usergroups_get.users	String	The users in the group.
WAB.usergroups_get.language	String	Language of the notifications. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.email_list	String	Approvers’ email addresses, separated by semicolons “;”. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.usergroups_get.restrictions.id	String	The restriction id.
WAB.usergroups_get.restrictions.action	String	The restriction type.
WAB.usergroups_get.restrictions.rules	String	The restriction rules.
WAB.usergroups_get.restrictions.subprotocol	String	The restriction subprotocol.
WAB.usergroups_get.url	String	The API URL to the resource.

wab-edit-user-group

---

Edit a user group
category: User Groups

Base Command

wab-edit-user-group

Input

Argument Name	Description	Required
group_id	The group id or name to edit.	Required
force	The default value is false. When it is set to true the values of the users, timeframes and restrictions are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
usergroups_put_group_name	The group name.	Optional
usergroups_put_profile	The group profile. (enter null for null value).	Optional
usergroups_put_description	The group description.	Optional
usergroups_put_timeframes	The group timeframe(s). Comma-separated list (use [] for an empty list).	Optional
usergroups_put_users	The users in the group. Comma-separated list (use [] for an empty list).	Optional
usergroups_put_language	Language of the notifications. Possible values are: de, en, es, fr, ru.	Optional
usergroups_put_email_list	Approvers’ email addresses, separated by semicolons “;”.	Optional

Context Output

There is no context output for this command.

wab-delete-user-group

---

Delete a user group
category: User Groups

Base Command

wab-delete-user-group

Input

Argument Name	Description	Required
group_id	The group id or name to delete.	Required

Context Output

There is no context output for this command.

wab-get-users

---

Get the users
category: Users

Base Command

wab-get-users

Input

Argument Name	Description	Required
password_hash	Export password hash if true. In Configuration Options menu > REST API then Advanced options, you should set User password hash and change the default Data encryption key. Possible values are: true, false.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘user_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.user_get.user_name	String	The user name. /:*?”<>	are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.display_name	String	The displayed name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.email	String	The email address. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.ip_source	String	The source IP to limit access. Format is a comma-separated list of IPv4 or IPV6 addresses, subnets, ranges or domain, for example: 1.2.3.4,2001:db8::1234:5678,192.168.1.10/24,10.11.12.13-14.15.16.17,example.com Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.preferred_language	String	The preferred language. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.profile	String	The user profile. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.groups	String	The groups containing this user.
WAB.user_get.user_auths	String	The authentication procedures(s).
WAB.user_get.password	String	The password (hidden with stars or empty).
WAB.user_get.force_change_pwd	Boolean	Force password change. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.ssh_public_key	String	The SSH public key.
WAB.user_get.certificate_dn	String	The certificate DN (for X509 authentication). Usable in the “sort” parameter.
WAB.user_get.last_connection	String	The last connection of this user. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.is_locked	Boolean	Account is locked.
WAB.user_get.expiration_date	String	Account expiration date/time (format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.is_disabled	Boolean	Account is disabled. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.url	String	The API URL to the resource.
WAB.user_get.gpg_public_key	String	The GPG public key fingerprint.

wab-add-user

---

Add a user
category: Users

Base Command

wab-add-user

Input

Argument Name	Description	Required
password_hash	Set password hash if true. In Configuration Options menu > REST API then Advanced options, you should set User password hash and change the default Data encryption key. Possible values are: true, false.	Optional
user_post_user_name	The user name. /:*?”<>| are forbidden.	Required
user_post_display_name	The displayed name.	Optional
user_post_email	The email address.	Required
user_post_ip_source	The source IP to limit access. Format is a comma-separated list of IPv4 or IPV6 addresses, subnets, ranges or domain, for example: 1.2.3.4,2001:db8::1234:5678,192.168.1.10/24,10.11.12.13-14.15.16.17,example.com.	Optional
user_post_preferred_language	The preferred language. Possible values are: de, en, es, fr, ru.	Optional
user_post_profile	The user profile.	Required
user_post_groups	The groups containing this user. Comma-separated list (use [] for an empty list).	Optional
user_post_user_auths	The authentication procedures(s). Comma-separated list (use [] for an empty list).	Required
user_post_password	The password.	Optional
user_post_force_change_pwd	Force password change. Possible values are: true, false.	Optional
user_post_ssh_public_key	The SSH public key.	Optional
user_post_certificate_dn	The certificate DN (for X509 authentication).	Optional
user_post_last_connection	The last connection of this user. (enter null for null value).	Optional
user_post_expiration_date	Account expiration date/time (format: “yyyy-mm-dd hh:mm”).	Optional
user_post_is_disabled	Account is disabled. Possible values are: true, false.	Optional
user_post_gpg_public_key	The GPG public key (ascii output from the command: ‘gpg –armor –export [USER_ID]’).	Optional

Context Output

Path	Type	Description
WAB.add_user.id	String	id of the created object.

wab-get-user

---

Get the user
category: Users

Base Command

wab-get-user

Input

Argument Name	Description	Required
name	A user name. If specified, only this user is returned.	Required
password_hash	Export password hash if true. In Configuration Options menu > REST API then Advanced options, you should set User password hash and change the default Data encryption key. Possible values are: true, false.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.user_get.user_name	String	The user name. /:*?”<>	are forbidden. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.display_name	String	The displayed name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.email	String	The email address. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.ip_source	String	The source IP to limit access. Format is a comma-separated list of IPv4 or IPV6 addresses, subnets, ranges or domain, for example: 1.2.3.4,2001:db8::1234:5678,192.168.1.10/24,10.11.12.13-14.15.16.17,example.com Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.preferred_language	String	The preferred language. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.profile	String	The user profile. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.groups	String	The groups containing this user.
WAB.user_get.user_auths	String	The authentication procedures(s).
WAB.user_get.password	String	The password (hidden with stars or empty).
WAB.user_get.force_change_pwd	Boolean	Force password change. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.ssh_public_key	String	The SSH public key.
WAB.user_get.certificate_dn	String	The certificate DN (for X509 authentication). Usable in the “sort” parameter.
WAB.user_get.last_connection	String	The last connection of this user. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.is_locked	Boolean	Account is locked.
WAB.user_get.expiration_date	String	Account expiration date/time (format: “yyyy-mm-dd hh:mm”). Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.is_disabled	Boolean	Account is disabled. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.user_get.url	String	The API URL to the resource.
WAB.user_get.gpg_public_key	String	The GPG public key fingerprint.

wab-edit-user

---

Edit a user
category: Users

Base Command

wab-edit-user

Input

Argument Name	Description	Required
name	The user name to edit.	Required
force	The default value is false. When set to true, the values of the groups and user_auths are replaced, otherwise the values are added to the existing ones. Possible values are: true, false.	Optional
password_hash	Update password hash if true. In Configuration Options menu > REST API then Advanced options, you should set User password hash and change the default Data encryption key. Possible values are: true, false.	Optional
user_put_user_name	The user name. /:*?”<>| are forbidden.	Optional
user_put_display_name	The displayed name.	Optional
user_put_email	The email address.	Optional
user_put_ip_source	The source IP to limit access. Format is a comma-separated list of IPv4 or IPV6 addresses, subnets, ranges or domain, for example: 1.2.3.4,2001:db8::1234:5678,192.168.1.10/24,10.11.12.13-14.15.16.17,example.com.	Optional
user_put_preferred_language	The preferred language. Possible values are: de, en, es, fr, ru.	Optional
user_put_profile	The user profile.	Optional
user_put_groups	The groups containing this user. Comma-separated list (use [] for an empty list).	Optional
user_put_user_auths	The authentication procedures(s). Comma-separated list (use [] for an empty list).	Optional
user_put_password	The password.	Optional
user_put_force_change_pwd	Force password change. Possible values are: true, false.	Optional
user_put_ssh_public_key	The SSH public key.	Optional
user_put_certificate_dn	The certificate DN (for X509 authentication).	Optional
user_put_last_connection	The last connection of this user. (enter null for null value).	Optional
user_put_expiration_date	Account expiration date/time (format: “yyyy-mm-dd hh:mm”).	Optional
user_put_is_disabled	Account is disabled. Possible values are: true, false.	Optional
user_put_gpg_public_key	The GPG public key (ascii output from the command: ‘gpg –armor –export [USER_ID]’).	Optional

Context Output

There is no context output for this command.

wab-get-target-group-restrictions

---

Get target group restrictions
category: Target Group Restrictions

Base Command

wab-get-target-group-restrictions

Input

Argument Name	Description	Required
group_id	A target group id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘group_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.restriction_get.id	String	The restriction id. Usable in the “q” parameter.
WAB.restriction_get.action	String	The restriction type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.rules	String	The restriction rules. Usable in the “sort” parameter.
WAB.restriction_get.subprotocol	String	The restriction subprotocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.url	String	The API URL to the resource.

wab-get-target-group-restriction

---

Get one target group restriction
category: Target Group Restrictions

Base Command

wab-get-target-group-restriction

Input

Argument Name	Description	Required
group_id	A target group id or name.	Required
restriction_id	The identifier of the desired restriction. If specified, only this restriction is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.restriction_get.id	String	The restriction id. Usable in the “q” parameter.
WAB.restriction_get.action	String	The restriction type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.rules	String	The restriction rules. Usable in the “sort” parameter.
WAB.restriction_get.subprotocol	String	The restriction subprotocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.url	String	The API URL to the resource.

wab-edit-restriction-from-targetgroup

---

Edit a restriction from a targetgroup
category: Target Group Restrictions

Base Command

wab-edit-restriction-from-targetgroup

Input

Argument Name	Description	Required
group_id	A target group id or name.	Required
restriction_id	The identifier of the desired restriction.	Required
restriction_put_action	The restriction type. Possible values are: kill, notify.	Optional
restriction_put_rules	The restriction rules.	Optional
restriction_put_subprotocol	The restriction subprotocol. Possible values are: SSH_SHELL_SESSION, SSH_REMOTE_COMMAND, SSH_SCP_UP, SSH_SCP_DOWN, SFTP_SESSION, RLOGIN, TELNET, RDP.	Optional

Context Output

There is no context output for this command.

wab-delete-restriction-from-targetgroup

---

Delete a restriction from a targetgroup
category: Target Group Restrictions

Base Command

wab-delete-restriction-from-targetgroup

Input

Argument Name	Description	Required
group_id	A target group id or name.	Required
restriction_id	The identifier of the desired restriction.	Required

Context Output

There is no context output for this command.

wab-get-password-for-target

---

Get the password for a given target
category: Target Passwords

Base Command

wab-get-password-for-target

Input

Argument Name	Description	Required
account_name	A target name: ‘account@domain@device’ for an account on a device, ‘account@domain@application’ for an account on an application or ‘account@domain’ for an account on a global domain.	Required
key_format	The format of the SSH private key returned: ‘openssh’ (by default), ‘pkcs1’,’pkcs8’ or ‘putty’.	Optional
cert_format	The format of the returned certificate: ‘openssh’ (by default) or ‘ssh.com’.	Optional
authorization	The name of the authorization (in case of multiple authorizations to access the target).	Optional
duration	Optional duration for the checkout (in seconds). It is used only in case of lock in the checkout policy, and it must be less than the checkout policy duration.	Optional

Context Output

Path	Type	Description
WAB.targetpasswords_get_checkout.checkin_time	String	The date/time of automatic checkin on the account (if no manual checkin is made until this date/time).
WAB.targetpasswords_get_checkout.remaining_time	String	Remaining checkout time in seconds.
WAB.targetpasswords_get_checkout.locked	Boolean	True if the account has been locked (a manual or automatic checkin is required), False if the account is not locked (checkin is then forbidden on this account).
WAB.targetpasswords_get_checkout.checkin_change_password	Boolean	True if the password will be automatically changed on checkin, False if the password is unchanged.
WAB.targetpasswords_get_checkout.login	String	The account login.
WAB.targetpasswords_get_checkout.domain	String	The account domain real name.
WAB.targetpasswords_get_checkout.password	String	The account password.
WAB.targetpasswords_get_checkout.ssh_key	String	The account SSH private key.
WAB.targetpasswords_get_checkout.ssh_key_type	String	The type of the SSH private key (either rsa, dsa, ecdsa or ed25519).
WAB.targetpasswords_get_checkout.ssh_certificate	String	The account SSH signed certificate.
WAB.targetpasswords_get_checkout.deconnection_time	String	The date/time of automatic deconnection when the account is used in a proxy session.
WAB.targetpasswords_get_checkout.account_name	String	the account_name.

wab-extend-duration-time-to-get-passwords-for-target

---

Extend the duration time to get the passwords for a given target
category: Target Passwords

Base Command

wab-extend-duration-time-to-get-passwords-for-target

Input

Argument Name	Description	Required
account_name	A target name: ‘account@domain@device’ for an account on a device, ‘account@domain@application’ for an account on an application or ‘account@domain’ for an account on a global domain.	Required
authorization	The name of the authorization (in case of multiple authorizations to access the target).	Optional

Context Output

There is no context output for this command.

wab-release-passwords-for-target

---

Release the passwords for a given target
category: Target Passwords

Base Command

wab-release-passwords-for-target

Input

Argument Name	Description	Required
account_name	A target name: ‘account@domain@device’ for an account on a device, ‘account@domain@application’ for an account on an application or ‘account@domain’ for an account on a global domain.	Required
authorization	The name of the authorization (in case of multiple authorizations to access the target).	Optional
force	The default value is false. When it is set to true, the checkin is forced. The user connected on the REST API must have an auditor profile and the configured limitations don’t prohibit access to the account. Possible values are: true, false.	Optional
comment	A comment that is input by the auditor when an account checkin is forced. This argument is mandatory if the checkin is forced, and is ignored for a standard checkin.	Optional

Context Output

There is no context output for this command.

wab-get-target-by-type

---

Get the target by type
category: Targets

Base Command

wab-get-target-by-type

Input

Argument Name	Description	Required
target_type	The type of target, one of: ‘session_accounts’, ‘session_account_mappings’, ‘session_interactive_logins’, ‘session_scenario_accounts’, ‘password_retrieval_accounts’.	Required
group	Return only the targets in the group with this name.	Optional
group_id	Return only the targets in the group with this id.	Optional
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘account,domain’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.getTargetByType.id	String	The target id. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.getTargetByType.account	String	The device or application account name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.getTargetByType.domain	String	The domain name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.getTargetByType.domain_type	String	The domain type.
WAB.getTargetByType.device	String	The device name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.getTargetByType.service	String	The service name. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.getTargetByType.application	String	The application name. Usable in the “q” parameter. Usable in the “sort” parameter.

wab-get-mappings-of-user-group

---

Get the mappings of a user group
category: User Group Mappings

Base Command

wab-get-mappings-of-user-group

Input

Argument Name	Description	Required
group_id	A user group id or name to retrieve.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘user_group’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authdomain_mapping_get.id	String	The mapping id. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.domain	String	The name of the domain for which the mapping is defined. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.user_group	String	The name of the Bastion users group. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.url	String	The API URL to the resource.

wab-add-mapping-in-group

---

Add a mapping in a group and set mapping fallback. If the field “external_group” is set to “*”, it is used as the fallback mapping, which allows mapping of users in the domain that do not belong to the external_group to be mapped to the user group by default
category: User Group Mappings

Base Command

wab-add-mapping-in-group

Input

Argument Name	Description	Required
group_id	A group id or name.	Required
usergroup_mapping_post_domain	The name of the domain for which the mapping is defined.	Required
usergroup_mapping_post_external_group	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.	Required
usergroup_mapping_post_profile	The name of the profile for which the mapping is defined.	Required

Context Output

Path	Type	Description
WAB.add_mapping_in_group.id	String	id of the created object.

wab-get-mapping-of-user-group

---

Get the mapping of a user group
category: User Group Mappings

Base Command

wab-get-mapping-of-user-group

Input

Argument Name	Description	Required
group_id	A user group id or name to retrieve.	Required
mapping_id	A mapping id to retrieve. If specified, only this mapping information will be retrieved.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.authdomain_mapping_get.id	String	The mapping id. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.domain	String	The name of the domain for which the mapping is defined. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.user_group	String	The name of the Bastion users group. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.external_group	String	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping. Usable in the “q” parameter. Usable in the “sort” parameter. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.authdomain_mapping_get.url	String	The API URL to the resource.

wab-edit-mapping-of-user-group

---

Edit a mapping of a user group
category: User Group Mappings

Base Command

wab-edit-mapping-of-user-group

Input

Argument Name	Description	Required
group_id	A group id or name.	Required
mapping_id	A mapping id to edit.	Required
usergroup_mapping_post_domain	The name of the domain for which the mapping is defined.	Required
usergroup_mapping_post_external_group	The name of the external group (LDAP/AD: Distinguished Name, Azure AD: name or ID), “*” means fallback mapping.	Required
usergroup_mapping_post_profile	The name of the profile for which the mapping is defined.	Required

Context Output

There is no context output for this command.

wab-delete-mapping-of-user-group

---

Delete the mapping of the given user group
category: User Group Mappings

Base Command

wab-delete-mapping-of-user-group

Input

Argument Name	Description	Required
group_id	A group id or name.	Required
mapping_id	A mapping id.	Required

Context Output

There is no context output for this command.

wab-get-user-group-restrictions

---

Get user group restrictions
category: User Group Restrictions

Base Command

wab-get-user-group-restrictions

Input

Argument Name	Description	Required
group_id	A user group id or name.	Required
q	Searches for a resource matching parameters.	Optional
sort	Comma-separated list of fields used to sort results; a field starting “-“ reverses the order. The default sort for this resource is: ‘group_name’.	Optional
offset	The index of first item to retrieve (starts and defaults to 0).	Optional
limit	The number of items to retrieve (100 by default, -1 = no limit). Note: this default value of 100 can be changed in the REST API configuration option.	Optional
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.restriction_get.id	String	The restriction id. Usable in the “q” parameter.
WAB.restriction_get.action	String	The restriction type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.rules	String	The restriction rules. Usable in the “sort” parameter.
WAB.restriction_get.subprotocol	String	The restriction subprotocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.url	String	The API URL to the resource.

wab-add-restriction-to-usergroup

---

Add a restriction to a usergroup
category: User Group Restrictions

Base Command

wab-add-restriction-to-usergroup

Input

Argument Name	Description	Required
group_id	A user group id or name.	Required
restriction_post_action	The restriction type. Possible values are: kill, notify.	Required
restriction_post_rules	The restriction rules.	Required
restriction_post_subprotocol	The restriction subprotocol. Possible values are: SSH_SHELL_SESSION, SSH_REMOTE_COMMAND, SSH_SCP_UP, SSH_SCP_DOWN, SFTP_SESSION, RLOGIN, TELNET, RDP.	Required

Context Output

Path	Type	Description
WAB.add_restriction_to_usergroup.id	String	id of the created object.

wab-get-user-group-restriction

---

Get one user group restriction
category: User Group Restrictions

Base Command

wab-get-user-group-restriction

Input

Argument Name	Description	Required
group_id	A user group id or name.	Required
restriction_id	The identifier of the desired restriction. If specified, only this restriction is returned.	Required
fields	The list of fields to return (separated by commas). By default all fields are returned.	Optional

Context Output

Path	Type	Description
WAB.restriction_get.id	String	The restriction id. Usable in the “q” parameter.
WAB.restriction_get.action	String	The restriction type. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.rules	String	The restriction rules. Usable in the “sort” parameter.
WAB.restriction_get.subprotocol	String	The restriction subprotocol. Usable in the “q” parameter. Usable in the “sort” parameter.
WAB.restriction_get.url	String	The API URL to the resource.

wab-edit-restriction-from-usergroup

---

Edit a restriction from a usergroup
category: User Group Restrictions

Base Command

wab-edit-restriction-from-usergroup

Input

Argument Name	Description	Required
group_id	A user group id or name.	Required
restriction_id	The identifier of the desired restriction.	Required
restriction_put_action	The restriction type. Possible values are: kill, notify.	Optional
restriction_put_rules	The restriction rules.	Optional
restriction_put_subprotocol	The restriction subprotocol. Possible values are: SSH_SHELL_SESSION, SSH_REMOTE_COMMAND, SSH_SCP_UP, SSH_SCP_DOWN, SFTP_SESSION, RLOGIN, TELNET, RDP.	Optional

Context Output

There is no context output for this command.

wab-delete-restriction-from-usergroup

---

Delete a restriction from a usergroup
category: User Group Restrictions

Base Command

wab-delete-restriction-from-usergroup

Input

Argument Name	Description	Required
group_id	A user group id or name.	Required
restriction_id	The identifier of the desired restriction.	Required

Context Output

There is no context output for this command.

wab-get-version

---

Get the REST API and WALLIX Bastion version numbers
category: Version

Base Command

wab-get-version

Input

There are no input arguments for this command.

Context Output

Path	Type	Description
WAB.version_get.version	String	The REST API version.
WAB.version_get.version_decimal	Number	The REST API version as decimal number.
WAB.version_get.wab_version	String	The WALLIX Bastion version (format: X.Y).
WAB.version_get.wab_form_factor	String	The WALLIX Bastion form factor (appliance, cloud). .
WAB.version_get.wab_version_decimal	Number	The WALLIX Bastion version as decimal number.
WAB.version_get.wab_version_hotfix	String	The WALLIX Bastion version with hotfix level (format: X.Y.Z, Z being the hotfix level).
WAB.version_get.wab_version_hotfix_decimal	Number	The WALLIX Bastion version with hotfix level as decimal.
WAB.version_get.wab_complete_version	String	The WALLIX Bastion complete version, with hotfix level and build date.