DisableUserWrapper
This script allows disabling a specified user using one or more of the following integrations: SailPointIdentityIQ, ActiveDirectoryQuery, Okta, MicrosoftGraphUser, and IAM.
python · Common Scripts
Details
| ID | DisableUserWrapper |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.10404775 |
| Tags | basescript |
README
This script allows disabling a specified user using one or more of the following integrations: SailPointIdentityIQ, ActiveDirectoryQuery, Okta, MicrosoftGraphUser, and IAM.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | basescript |
| Cortex XSOAR Version | 6.0.0 |
Inputs
| Argument Name | Description |
|---|---|
| username | The username of the user to disable. |
| approve_action | Whether to run the command. This is used to prevent unwanted calls to the command. |
Outputs
| Path | Description | Type |
|---|---|---|
| IdentityIQ.AccountDisable.active | Indicates the status of account (should be false after request is successfully completed). | Boolean |
| IAM.UserProfile | The user profile. | Unknown |
| IAM.Vendor.active | Gives the active status of user. Can be true or false. | Boolean |
| IAM.Vendor.brand | The integration name. | String |
| IAM.Vendor.details | Tells the user if the API was successful, otherwise provides error information. | Unknown |
| IAM.Vendor.email | The employee email address. | String |
| IAM.Vendor.errorCode | The HTTP error response code. | Number |
| IAM.Vendor.errorMessage | The reason the API failed. | String |
| IAM.Vendor.id | The employee user ID in the app. | String |
| IAM.Vendor.instanceName | The integration instance name. | Unknown |
| IAM.Vendor.success | If true, the command was executed successfully. | Boolean |
| IAM.Vendor.username | The employee username in the app. | String |
| IAM.Vendor.action | The command name. | String |
args: - description: The username of the user to disable. name: username required: true - description: Whether to run the command. This is used to prevent unwanted calls to the command. name: approve_action defaultValue: No predefined: - Yes - No comment: "This script allows disabling a specified user using one or more of the following integrations: SailPointIdentityIQ, ActiveDirectoryQuery, Okta, MicrosoftGraphUser, and IAM." commonfields: id: DisableUserWrapper version: -1 name: DisableUserWrapper outputs: # IdentityIQ outputs - contextPath: IdentityIQ.AccountDisable.active description: Indicates the status of account (should be false after request is successfully completed). type: Boolean # IAM outputs - contextPath: IAM.UserProfile description: The user profile. type: Unknown - contextPath: IAM.Vendor.active description: Gives the active status of user. Can be true or false. type: Boolean - contextPath: IAM.Vendor.brand description: The integration name. type: String - contextPath: IAM.Vendor.details description: Tells the user if the API was successful, otherwise provides error information. type: Unknown - contextPath: IAM.Vendor.email description: The employee email address. type: String - contextPath: IAM.Vendor.errorCode description: The HTTP error response code. type: Number - contextPath: IAM.Vendor.errorMessage description: The reason the API failed. type: String - contextPath: IAM.Vendor.id description: The employee user ID in the app. type: String - contextPath: IAM.Vendor.instanceName description: The integration instance name. type: Unknown - contextPath: IAM.Vendor.success description: If true, the command was executed successfully. type: Boolean - contextPath: IAM.Vendor.username description: The employee username in the app. type: String - contextPath: IAM.Vendor.action description: The command name. type: String script: '-' tags: - basescript timeout: '0' type: python subtype: python3 dockerimage: demisto/python3:3.12.13.10404775 fromversion: 6.0.0 tests: - No tests (auto formatted)