category: Identity and Access Management provider: Palo Alto Networks sectionorder: - Connect - Collect commonfields: id: PrismaCloud IAM version: -1 configuration: - display: Base URL name: url required: true type: 0 section: Connect - display: Username name: credentials required: true type: 9 section: Connect - display: Customer name additionalinfo: If you are a multi-tenant user you will also need to provide the customerName. name: customer_name type: 0 section: Connect advanced: true required: false - display: Trust any certificate (not secure) name: insecure type: 8 section: Connect advanced: true required: false - display: Use system proxy settings name: proxy type: 8 section: Connect advanced: true required: false - defaultvalue: 'true' display: Allow creating users name: create_user_enabled type: 8 section: Collect advanced: true required: false - defaultvalue: 'true' display: Allow updating users name: update_user_enabled type: 8 section: Collect advanced: true required: false - defaultvalue: 'true' display: Allow enabling users name: enable_user_enabled type: 8 section: Collect advanced: true required: false - defaultvalue: 'true' display: Allow disabling users name: disable_user_enabled type: 8 section: Collect advanced: true required: false - defaultvalue: 'true' display: Automatically create user if not found in update command name: create_if_not_exists type: 8 section: Collect advanced: true required: false - defaultvalue: User Profile - PrismaCloud (Incoming) display: Incoming Mapper name: mapper_in required: true type: 0 section: Connect - defaultvalue: User Profile - PrismaCloud (Outgoing) display: Outgoing Mapper name: mapper_out required: false type: 0 section: Connect hidden: - marketplacev2 - platform additionalinfo: Cortex XSOAR only parameter. description: 'The Prisma Cloud IAM API consists of a set of API endpoints that allow customers to perform CRUD operation on their user profiles.' display: PrismaCloud IAM name: PrismaCloud IAM script: commands: - arguments: - description: User Profile indicator details. name: user-profile required: true - auto: PREDEFINED defaultValue: 'true' description: When set to true, after the command execution the status of the user in the 3rd-party integration will be active. name: allow-enable predefined: - 'true' - 'false' description: Creates a user. execution: true name: iam-create-user outputs: - contextPath: IAM.Vendor.active description: When true, indicates that the employee's status is active in the 3rd-party integration. type: Boolean - contextPath: IAM.Vendor.brand description: Name of the integration. type: String - contextPath: IAM.Vendor.details description: Provides the raw data from the 3rd-party integration. type: string - contextPath: IAM.Vendor.email description: The employee's email address. type: String - contextPath: IAM.Vendor.errorCode description: HTTP error response code. type: Number - contextPath: IAM.Vendor.errorMessage description: Reason why the API failed. type: String - contextPath: IAM.Vendor.id description: The employee's user ID in the app. type: String - contextPath: IAM.Vendor.instanceName description: Name of the integration instance. type: string - contextPath: IAM.Vendor.success description: When true, indicates that the command was executed successfully. type: Boolean - contextPath: IAM.Vendor.username description: The employee's username in the app. type: String - arguments: - description: A User Profile indicator. name: user-profile required: true - auto: PREDEFINED defaultValue: 'true' description: When set to true, after the command execution the status of the user in the 3rd-party integration will be active. name: allow-enable predefined: - 'true' - 'false' description: Updates an existing user with the data passed in the user-profile argument. execution: true name: iam-update-user outputs: - contextPath: IAM.Vendor.active description: When true, indicates that the employee's status is active in the 3rd-party integration. type: Boolean - contextPath: IAM.Vendor.brand description: Name of the integration. type: String - contextPath: IAM.Vendor.details description: Provides the raw data from the 3rd-party integration. type: string - contextPath: IAM.Vendor.email description: The employee's email address. type: String - contextPath: IAM.Vendor.errorCode description: HTTP error response code. type: Number - contextPath: IAM.Vendor.errorMessage description: Reason why the API failed. type: String - contextPath: IAM.Vendor.id description: The employee's user ID in the app. type: String - contextPath: IAM.Vendor.instanceName description: Name of the integration instance. type: string - contextPath: IAM.Vendor.success description: When true, indicates that the command was executed successfully. type: Boolean - contextPath: IAM.Vendor.username description: The employee's username in the app. type: String compliantpolicies: - User Hard Remediation - arguments: - description: A User Profile indicator. name: user-profile required: true description: Retrieves a single user resource. name: iam-get-user outputs: - contextPath: IAM.Vendor.active description: When true, indicates that the employee's status is active in the 3rd-party integration. type: Boolean - contextPath: IAM.Vendor.brand description: Name of the integration. type: String - contextPath: IAM.Vendor.details description: Provides the raw data from the 3rd-party integration. type: string - contextPath: IAM.Vendor.email description: The employee's email address. type: String - contextPath: IAM.Vendor.errorCode description: HTTP error response code. type: Number - contextPath: IAM.Vendor.errorMessage description: Reason why the API failed. type: String - contextPath: IAM.Vendor.id description: The employee's user ID in the app. type: String - contextPath: IAM.Vendor.instanceName description: Name of the integration instance. type: string - contextPath: IAM.Vendor.success description: When true, indicates that the command was executed successfully. type: Boolean - contextPath: IAM.Vendor.username description: The employee's username in the app. type: String - arguments: - description: A User Profile indicator. name: user-profile required: true description: Disable an active user. execution: true name: iam-disable-user outputs: - contextPath: IAM.Vendor.active description: When true, indicates that the employee's status is active in the 3rd-party integration. type: Boolean - contextPath: IAM.Vendor.brand description: Name of the integration. type: String - contextPath: IAM.Vendor.details description: Provides the raw data from the 3rd-party integration. type: string - contextPath: IAM.Vendor.email description: The employee's email address. type: String - contextPath: IAM.Vendor.errorCode description: HTTP error response code. type: Number - contextPath: IAM.Vendor.errorMessage description: Reason why the API failed. type: String - contextPath: IAM.Vendor.id description: The employee's user ID in the app. type: String - contextPath: IAM.Vendor.instanceName description: Name of the integration instance. type: string - contextPath: IAM.Vendor.success description: When true, indicates that the command was executed successfully. type: Boolean - contextPath: IAM.Vendor.username description: The employee's username in the app. type: String compliantpolicies: - User Hard Remediation - description: Retrieves a User Profile schema, which holds all of the user fields within the application. Used for outgoing-mapping through the Get Schema option. name: get-mapping-fields dockerimage: demisto/python3:3.12.13.10116658 runonce: false script: '-' subtype: python3 type: python ismappable: true isremotesyncout: true tests: - No tests fromversion: 6.0.0