NSX-T Data Center REST API

Get list of Object-level RBAC entries. (Experimental)

This API is available when using VMware Cloud (AWS, Dell-EMC, Outpost, Hyperscalers) or VMware NSX-T.

Request:

Method:

GET

URI Path(s):

/policy/api/v1/aaa/object-permissions

Request Headers:

n/a

Query Parameters:

ObjectRolePermissionGroupListRequestParameters+

ObjectRolePermissionGroupListRequestParameters (schema)

Name	Description	Type	Notes
cursor	Opaque cursor to be used for getting next page of records (supplied by current result page)	string
include_mark_for_delete_objects	Include objects that are marked for deletion in results If true, resources that are marked for deletion will be included in the results. By default, these resources are not included.	boolean	Default: "False"
included_fields	Comma separated list of fields that should be included in query result Note - this parameter currently only works when used with the search APIs /policy/api/v1/search/query and /policy/api/v1/search/dsl. It is ignored for other list APIs.	string
inheritance_disabled	Does children of this object inherit this rule	boolean	Default: "False"
page_size	Maximum number of results to return in this page (server may return fewer)	integer	Minimum: 0 Maximum: 1000 Default: "1000"
path_prefix	Path prefix	string
role_name	Role name	string
sort_ascending		boolean
sort_by	Field by which records are sorted	string

Request Body:

n/a

Example Request:

GET https://<policy-mgr>/policy/api/v1/aaa/object-permissions?path_prefix=infra/domains/MGW

Successful Response:

Response Code:

200 OK

Response Headers:

Content-type: application/json

Response Body:

ObjectRolePermissionGroupListResult+

ObjectRolePermissionGroupListResult (schema)

Name	Description	Type	Notes
_links	References related to this resource The server will populate this field when returing the resource. Ignored on PUT and POST.	array of ResourceLink	Readonly
_schema	Schema for this resource	string	Readonly
_self	Link to this resource	SelfResourceLink	Readonly
cursor	Opaque cursor to be used for getting next page of records (supplied by current result page)	string	Readonly
result_count	Count of results found (across all pages), set only on first page	integer	Readonly
results	ObjectRolePermissionGroup list results	array of ObjectRolePermissionGroup	Required
sort_ascending	If true, results are sorted in ascending order	boolean	Readonly
sort_by	Field by which records are sorted	string	Readonly

Example Response:

{ "result_count": 2, "results": [ { "role_name": "cloud_admin", "operation": "crud", "path_prefix": "infra/domains/MGW" }, { "role_name": "cloud_auditor", "operation": "none", "path_prefix": "infra/domains/MGW/CommunicationProfile1" } ] }

Required Permissions:

read

Feature:

policy_rbac

Additional Errors:

• 301 Moved Permanently
• 307 Temporary Redirect
• 400 Bad Request
• 403 Forbidden
• 409 Conflict
• 412 Precondition Failed
• 500 Internal Server Error
• 503 Service Unavailable