NSX-T Data Center REST API

Associated URIs:

API Description	API Path
List feature permissions List features	GET /policy/api/v1/aaa/features-with-properties GET /api/v1/aaa/features-with-properties
Get all users and groups with their roles Get all users and groups with their roles.	GET /policy/api/v1/aaa/role-bindings GET /api/v1/aaa/role-bindings
Delete all stale role assignments	POST /policy/api/v1/aaa/role-bindings?action=delete_stale_bindings POST /api/v1/aaa/role-bindings?action=delete_stale_bindings
Assign roles to User or Group This API is used to assign a user/group any role(s) of choice. User has union of all the roles assigned to it. User name is dealt case-insensitively.	POST /policy/api/v1/aaa/role-bindings POST /api/v1/aaa/role-bindings
Delete user/group's roles assignment Delete the user/group's role assignment.	DELETE /policy/api/v1/aaa/role-bindings/<binding-id> DELETE /api/v1/aaa/role-bindings/<binding-id>
Get user/group's role information	GET /policy/api/v1/aaa/role-bindings/<binding-id> GET /api/v1/aaa/role-bindings/<binding-id>
Update User or Group's roles This API is used to update a user/group any role(s) of choice. User name is dealt case-insensitively.	PUT /policy/api/v1/aaa/role-bindings/<binding-id> PUT /api/v1/aaa/role-bindings/<binding-id>
Get information about all roles	GET /policy/api/v1/aaa/roles GET /api/v1/aaa/roles
Validate a new feature permission set Validate the permissions of an incoming role. Also, recommend the permissions which need to be corrected.	POST /policy/api/v1/aaa/roles?action=validate POST /api/v1/aaa/roles?action=validate
Get information about all roles with features and their permissions	GET /policy/api/v1/aaa/roles-with-feature-permissions GET /api/v1/aaa/roles-with-feature-permissions
Delete custom role If a role is assigned to a role binding then the deletion of the role is not allowed. Precanned roles cannot be deleted.	DELETE /policy/api/v1/aaa/roles/<role> DELETE /api/v1/aaa/roles/<role>
Get role information	GET /policy/api/v1/aaa/roles/<role> GET /api/v1/aaa/roles/<role>
Clone an already present role The role with id <role> is cloned and the new id, name and description are the ones provided in the request body.	POST /policy/api/v1/aaa/roles/<role>?action=clone POST /api/v1/aaa/roles/<role>?action=clone
Update custom role Creates a new role with id as <role> if there does not exist any role with id <role>, else updates the existing role.	PUT /policy/api/v1/aaa/roles/<role> PUT /api/v1/aaa/roles/<role>