pdp roles

General Syntax

pdp roles

      extract

      fetch <options>

The 'pdp roles extract' command

Description

Extracts and shows the roles from the file $FWDIR/tmp/roles_command_output.txt that was created with the "pdp roles fetch" command.

Syntax

pdp roles extract

The 'pdp roles fetch' command

Description

Fetches the roles that match the provided Access Role information and saves the output in the $FWDIR/tmp/roles_command_output.txt file.

Syntax

pdp roles fetch [-ip <IP Address>]

      -u "<Username>" -is "<Identity Source>"

      -ug "<User Group 1>","<User Group 2>",...

      -mg "<Machine Group 1>","<Machine Group 2>",...

Parameters

Parameter

Description

-ip <IP Address>

Optional.

Specifies the IP address of identity, host, or session to calculate and fetch Access Roles that also contain explicitly selected objects in the Networks pane.

Example for an Access Role object, in which a Host object with the IPv4 address 5.5.5.5 was selected in the Networks pane:

pdp roles fetch -i 5.5.5.5 -u "user_1" -is "AD_Query"

-u "<Username>" -is "<Identity Source>"

Specifies the username and the identity source.

The available identity sources are (case-sensitive):

  • portal

  • Identity_Agent

  • Remote_Access

  • AD_Query

  • IFMAP

  • Terminal_Server_Identity_Agent

  • Radius_Accounting

Important - If in the Access Role object you explicitly selected objects in the Networks and Users panes, you must also use the parameter "-ip <IP Address>".

Examples:

pdp roles fetch -u "user_1" -is "AD_Query"

pdp roles fetch -i 5.5.5.5 -u "user_1" -is "AD_Query"

-ug "<User Group 1>","<User Group 2>",...

Specifies the user group.

Enter the comma separated list of group names.

For Active Directory groups, you must enter the prefix "ad_group_".

Example for an AD group called "LaptopUsers":

pdp roles fetch -ug "ad_group_LaptopUsers"

-mg "<Machine Group 1>","<Machine Group 2>", ...

Specifies the machine group.

Enter the comma separated list of group names.

For Active Directory groups, you must enter the prefix "ad_group_".

Example for an AD group called "Laptops":

pdp roles fetch -mg "ad_group_Laptops"