VMware Cloud Foundation Operations API Operations Index

VMware Cloud Foundation Operations API Operations Index

All available VMware Cloud Foundation Operations API Operations

Actions
GET
Get All Actions

Performing a GET /api/actiondefinitions call will query for
available Actions defined in the system. This includes the data needed
to populate an Action in the system.

POST
Perform Action


Performing a POST /api/actions/{id} will attempt to trigger the
action with specified id. It is considered a best practice to use the actionExecution field from the
POST /api/action/{id}/query that has been previously executed to populate
the body of the request. Please note that additional values may be required in order to make
the populateAction response body valid.

GET
Get Action Status

The response contains information about the action status by the given taskId

Adapter Kinds
GET
Get Adapter Types

Get Adapter Types identified by the specified identifiers or all if 'null' is specified

GET
Get Resource Type For Adapter Type

Get a specific Resource Kind supported by a specific Adapter Kind

GET
Get Resource Identifiers Details

Get details for resource identifiers, with provided adapter kind and resource kind.

GET
Get Resource Type Properties For Adapter Type

Supports optional parameters to get specific Resource Type Properties

GET
Get Resources With Adapter And Resource Kind

Optionally filter these resources based on resource name. The resource name (specified as a query parameter) will be used for doing a partial match. However, if the resource identifiers and their values are specified, name is ignored and the API enforces all the mandatory (both uniquely identifying and required) identifiers are specified. This allows for looking up a single resource using a ResourceKey and allows the translation between a ResourceKey and a Resource UUID.

Example how to use the identifiers parameter (currently it cannot be used in our Swagger documentation):
/api/adapterkinds/{adapterKindKey}/resourcekinds/{resourceKindKey}/resources?identifiers[key1]=value1&identifiers[key2]=value2

GET
Get Resource Type Attributes For Adapter Type

Supports optional parameters to get specific Resource Type Attributes

GET
Get Resources With Adapter Kind

This API provides the Resources by passing specified Adapter Kind Key

GET
Get Adapter Type

This API provides the Adapter Kinds by passing specified identifier

GET
Get Resource Types For Adapter Type

Contains optional parameter that specifies whether there is a need to report names in all localizations

Adapters
GET
Enumerate Adapter Instances

If Adapter Kind is passed as parameter, the API returns only the instances of that Adapter Kind

PATCH
Patch Adapter Instance

This is typically used to indicate VMware Cloud Foundation operations that the certificates presented by
the (data source for which the adapter instance) was created are indeed valid
certificates.
Typically the response of the POST /api/adapters API in its entirety needs to be
sent as request body when making this PATCH /api/adapters API invocation.
NOTE: In case the provided certificate list is empty, the adapter instance self-signed certificates will be reset.
NOTE: for VCF and vCenter cloud accounts please use /api/integrations/vcenters and /api/integrations/vcf APIs respectively

POST
Create Adapter Instance

Pass the not-required parameters to indicate whether need to return default value or null in a result for identifiers that have no/null value in request body and continue instantiating adapter even if no connection is established.
In case of VCenter adapter instance, UI/license extension registration should be run separately.
NOTE: for VCF and vCenter cloud accounts please use /api/integrations/vcenters and /api/integrations/vcf APIs respectively

PUT
Update Adapter Instance

The request body can accept a collectorId or a collectorGroupId, but not both.
NOTE: for VCF and vCenter cloud accounts please use /api/integrations/vcenters and /api/integrations/vcf APIs respectively

PATCH
Patch Test Connection

This is typically used to indicate VMware Cloud Foundation operations that the certificates presented by
the (data source for which the adapter instance) was tested are indeed valid
certificates.
Typically the response of the POST /api/adapters API in its entirety needs to be
sent as request body when making this PATCH /api/adapters API invocation.
NOTE: for VCF and vCenter cloud accounts please use /api/integrations/vcenters/testConnection and /api/integrations/vcf/testConnection APIs respectively

POST
Test Connection

Test Adapter Instance connection
NOTE: for VCF and vCenter cloud accounts please use /api/integrations/vcenters/testConnection and /api/integrations/vcf/testConnection APIs respectively

DELETE
Delete Adapter Instance

NOTE: Deleting an adapter instance is not synchronous. In case of VCenter adapter instance, UI/license extension un-registration should be run separately.

GET
Get Adapter Instance

Returns a specific adapter instance identified by the specified UUID.

DELETE
Unmark Adapter Instance As Being Maintained

Removes the adapter instance from being in an maintenance window. The adapter instance will be notified to start collection process immediately.

PUT
Mark Adapter Instance As Being Maintained

After the duration expires, the adapter instance state is automatically set to STARTED.

PUT
Start Monitoring Resources Of Adapter Instance

Start the adapter instance from monitoring its resources

PUT
Stop Monitoring Resources Of Adapter Instance

Stop the adapter instance from monitoring its resources

GET
Get Resources Of Adapter Instance

Get all resources that are managed by specific Adapter Instance

Alert Plugins
GET
Get Alert Plugins Of Type

Get Notification Plugins, optionally filtered for a specific type

PATCH
Patch Alert Plugin

Patch a new Notification Plugin Instance

POST
Create Alert Plugin

If the Notification plugin is a standard email plugin, then any untrusted certificates from the secure SMTP server
is returned as part of the response, the api client should invoke a PATCH call to store these certificates.
By default the notification plugin is in disabled state after being created.
Use the modifyAlertPluginState API to enable the plugin.

PUT
Update Alert Plugin

Before updating a notification plugin, the plugin should be disabled. During the update process
if there are any untrusted certificates returned by the server the patchAlertPlugin call should be made.
Once the update is successfully completed, use modifyAlertPluginState API to enable the plugin.

GET
Get Alert Plugin Types

Get the available Notification Plugin Types

GET
Get Alert Plugin Type With Id

Get the Notification Plugin Type Metadata specified by Plugin Type ID

DELETE
Delete Alert Plugin

The field checkDependencies is added to preserve the initial behavior. By default it is set to false.

Case 1: When checkDependencies is false, the API has the following behavior:
Dependent Notification Rules are cascade deleted.
Dependent Report Schedules are unreferenced.
Dependent Tenant Email Configurations are always checked. If any then deletion is failed.

Case 2: When checkDependencies is true, the API has the following behavior:
All dependencies are checked. If any then deletion is failed.

To successfully delete the notification plugin, all conflicting dependencies must be removed.

GET
Get Alert Plugin Instance

Get Notification Plugin specified by Plugin ID

PUT
Modify Alert Plugin State

Start or stop an existing Notification Plugin Instance

GET
Get Rules Of Plugin

Retrieve all the notification rules of the plugin instance

POST
Test Alert Plugin

Test existing Notification Plugin Instance connectivity

Alerts
GET
Get Alert Definitions

If the search criteria is not satisfied, the API will return all Alert Definitions

POST
Create Alert Definition

Once the Alert Definition is created, a unique identifier will be generated by the system for the Alert Definition

PUT
Update Alert Definition

Update an existing Alert Definition

POST
Query Alert Definitions

Query collection of alert definitions matching the search criteria specified

DELETE
Delete Alert Definition

Using this method, you can delete a particular alert definition

GET
Get Alert Definition By Id

Using this method, you can look up details about a particular alert definition

PUT
Disable Alert Definition In Policies

Disable alert definition in policies

PUT
Enable Alert Definition In Policies

Enable alert definition in policies

GET
Get Alerts

Example: GET /api/alerts?id={id1}&id={id2}&resourceId={resId1}&resourceId={resId2}

POST
Modify Alerts

Modify multiple Alerts by looking them up using their identifiers and performing one of the following actions - Suspend, Cancel,Take Ownership, Release Ownership
Examples:
POST /api/alerts?action=suspend&minutes=1
POST /api/alerts?action=cancel
POST /api/alerts?action=takeownership
POST /api/alerts?action=releaseownership
POST /api/alerts?action=assignownership

DELETE
Delete Canceled Alerts


Example: DELETE /api/alerts/bulk

GET
Get Alert Contributing Symptoms

Get the list of triggered symptoms for the requested alerts
NOTE: This API only reports the symptoms that are defined on 'SELF'.

POST
Query Alert Groups

Example: POST /api/alerts/group/{groupingCondition}/query

POST
Query Alert Notes

Data returned includes a Collection of Alert Notes

POST
Query Alert

Data returned includes a Collection of Alert Notes.
Example: POST /api/alerts/query

GET
Get Alert Types


Examples:

GET /api/alerts/types returns the Problem Alerts specific Alert Types & Subtypes
GET /api/alerts/types?ignoreLegacy=false returns all the Alert Types & Subtypes

GET
Get Alert

Example: GET /api/alerts/{id}

GET
Get Alert Notes

Data includes a Collection of Alert Notes
Example: GET /api/alerts/{id}/notes

POST
Add Alert Note

Data returned is the Alert Note created in the system.
Example: POST /api/alerts/{id}/notes

DELETE
Delete Alert Note

Example: DELETE /api/alerts/{id}/notes/{noteId}

GET
Get Alert Note

Example: GET /api/alerts/{id}/notes/{noteId}

Applications
GET
Get Configuration Details

Get all the created application monitoring configurations

DELETE
Uninstall Agent

Uninstall app monitoring agent from the specified resource

POST
Install Agent


Install app monitoring agent on specified resource.
vCenters mapping should be present for this API to work.

Correct configuration for vCenters mapping -
vCenter is mapped to individual CP or CP part of non HA collector group.
vCenter is mapped to HA enabled collector group.

vCenters mapping APIs -
Create vCenters mappings API POST /api/applications/vccpmappings.
Delete vCenters mapping API DELETE /api/applications/vccpmappings.

POST
Renew Clients Certificate

Renew client certificate

POST
Get Renew Clients Certificate Status

Status of renew client certificate operations.

POST
Activate Services

Save application service configuration on multiple resources.

GET
Get Service Operation Status

The response contains information about the application action status by the given taskId.

PUT
Start Agent

Start agent on the specified resources

PUT
Stop Agent

Stop agent on the specified resources

PUT
Upgrade Agent

Upgrade app monitoring agent on the specified resources

POST
Renew Client Certificate

Renew endPoint's certificate

GET
Get Renew Client Certificate Status

Status of renew client certificate operation.

DELETE
Remove Services Configurations

Remove application service configuration from the specified resource

GET
Get Services Configurations

Get all services on a specified resource

POST
Save Services Configurations

Save application service configuration on the specified resource

PUT
Update Services Configurations

Update application service configuration on the specified resource

GET
Get Service Configurations

Get all configurations by service name on a specified resource

GET
Get Agent Operation Status

The response contains information about the bootstrap action status by the given taskId.

POST
Sign Client Certificate

Query to sign the Arc Client certificate

GET
Download Client Certificate

Download Client Certificates

GET
Get Application Resources

Get all available resources for application monitoring

GET
Get Service Configuration Template

Provides a template for the specified service

PUT
Subscribe

Bootstrap Bundle primarily contains client certificates, Grains File containing configuration of
ARC Agent Components (ucp-minion, salt-minion, Telegraf) and seeder script.
This API also presets salt minion keys in ARC.

PUT
Unsubscribe

Bootstrap Bundle primarily contains client certificates, Grains File containing configuration of
ARC Agent Components (ucp-minion, salt-minion, Telegraf) and seeder script.

DELETE
Delete V Center Mapping

Delete vCenters mapping info

POST
Create V Center Mapping

Create mappings between collector or collectorGroup and vCenters

POST
Query V Center Mappings Info

Get vCenter mappings based on the specified query

PUT
Add Vcenter To Configuration Deprecated

Add a vCenter for monitoring with specified application monitoring configuration

PUT
Remove Vcenter From Configuration Deprecated

NOTE: Application Monitoring configuration will be deleted after removing last mapped vCenter from it.

Audit
GET
Get System Audit

Get system audit report

Auth
GET
Get Current User

Using this method, one can look up the details of a user initiated this API method.


Note: The provided hrefs are functional for the users with 'administration.accesscontrol.viewpage' (View Access Control Page) privilege.

GET
Get Assigned Role Permissions For Current User



Note: The provided hrefs are functional for the users with 'administration.accesscontrol.viewpage' (View Access Control Page) privilege.

GET
Get Current User Role Privileges

Note:The provided hrefs are functional for the users with 'administration.accesscontrol.viewpage' (View Access Control Page) privilege.

GET
Get Available Privilege Groups

If no privilege key is set, all available Privilege Groups will be granted

GET
Get Available Privileges

If no privilege key is set, all available Privileges will be granted

GET
Get Roles

Find list of application roles using the role names

POST
Create User Role

Create a user role

PUT
Update User Role

Name of the role cannot be changed.

DELETE
Delete User Role

Remove role with given role name

GET
Get Role By Name

Look up a role with the given name

DELETE
Remove Role Privileges

Remove specified privileges from the user role

GET
Get Role Privileges

Get the privileges for a user role

POST
Add Role Privileges

New privileges union with any previous privileges.

PUT
Set Role Privileges

Replaces any previous privileges.

DELETE
Delete Scopes

Delete scopes.

GET
Get All Object Scopes

Get all scopes available in the environment

POST
Create Scope

Create a new Scope.

PUT
Modify Scope

Modify a Scope

GET
Get Scope

Get the scope by its id

GET
Get Auth Sources

Get all the available authentication sources in the system.
NOTE: This API works both for authenticated and un-authenticated access. In case of authenticated access (by providing the Authorization header) it will return more information including auth source properties. Please also note that while triggering the API through Swagger interface it will work in un-authenticated scenario (Swagger will not send the Authorization header).

PATCH
Patch Auth Source With Certificate Details

Patch an already added authentication source with the certificate data

POST
Add Auth Source

If the authentication source is of type LDAP or AD and if ssl is enabled, the response object will contain a list of certificates found matching with the provided host.If the authentication source is not of type LDAP or AD (or) if ssl is not enabled, then the authentication source is available for use as soon as the api call is successful.It is the duty of the caller to call the PATCH (/sources) api with the certificate details. Once the PATCH api call is successful, the authentication source is available for use.

PUT
Update Auth Source

If the host is an ldap host and if host/port is changed, then the response will contain a list of certificates found matching with the host. It is the duty of the caller to call the PATCH (/sources) api with the certificate details. Once the PATCH api call is successful, the authentication source is available for use.

PATCH
Patch Test Auth Source

Patch an already tested authentication source with the certificate data

POST
Test Auth Source

Test a new or an existing authentication source in the system

GET
Get VIDB Well Known URL

Get VIDB well-known URL

POST
Search User Groups For Auth Source

The auth source can be SSO/VIDM/LDAP/AD.
For the LDAP/AD auth source, the request should contain the name of the group.
For the SSO/VIDM auth source, request should contain the name of the group and the SSO/VIDM domain.
User-group's name can contain wildcards. Maximum of 25 user-groups are returned for SSO auth source.

PUT
Synchronize User Groups

Synchronize user groups by specified Auth Source ID

POST
Import Users

Auth source can be SSO/VIDM/LDAP/AD/VIDB.
When a user is being re-imported, make sure to populate the "id" field of the user.
NOTE: In the case of vIDB users, the import occurs based on the provided externalId. If other provided details are incorrect, they will be asynchronously updated with the correct values right after the import operation is completed.

POST
Search Users For Auth Source

The auth source can be SSO/LDAP/AD/VIDM.
For the LDAP/AD auth source, the request should contain the name of the user.
For the SSO/VIDM auth source, request should contain the name of the user and the SSO/VIDM domain.
Username can contain wildcards. Maximum of 25 users are returned for SSO auth source.

DELETE
Delete Auth Source

During the deletion of the SSO SAML/VCF SSO auth source, the same 'username' and 'password' which has been used while the creating this sso auth source, should be sent to the payload object.
Note: Force flag is applicable only for VCF SSO auth source. If force is true, VMware Cloud Foundation Operations continues to attempt to delete the VCF SSO auth source even when errors occur.
If you set it to false, VMware Cloud Foundation Operations stops attempting to removethe auth source if VCF SSO server fails

GET
Get Auth Source

The auth source can be SSO/LDAP/AD.
For the LDAP/AD auth source, the request should contain the name of the user.
For the SSO auth source, request should contain the name of the user and the sso domain.
User-group's username can contain wildcards. Maximum of 25 user-groups are returned for SSO auth source.

GET
Get Auth Source Types

Get all the available authentication source types

GET
Get Auth Source Type

Retrieve information about a particular authentication source type

POST
Acquire Token

Performing a POST /api/auth/token/acquire would yield a response object that includes token and its validity.
HTTP Status 401 will be sent back if the authentication operation has failed.
NOTE: The validity of the acquired token is extended after each call and is set to 6 hours from the last call.

POST
Exchange Ops Token With Jwt Token

Exchange current user token with jwt token

POST
Release Token

Terminate the current Session ID

GET
Get Traversal Specs

If no optional parameters passed, the API will return all traversal specification templates in the system

DELETE
Delete User Groups

Delete a list of user groups using their identifiers

GET
Get User Groups

If none of the parameters are specified, all the user groups in the system are returned.

POST
Create User Group

If the authSourceId is specified(in the request), then the user group will be imported from the corresponding auth source (LDAP/AD/SSO/VIDM/VIDB).Note that the id of the user group has to be null.
For LDAP/AD groups the distinguishedName should be provided in the name field.
The value of displayName is used only while importing LDAP/AD groups, and if it is not provided then the value of name will be assigned to it. For SSO/VIDM groups the value of name is assigned to displayName.
NOTE: Before importing please make sure that the group exists in the specified authSource by using the following API - /api/auth/sources/{id}/usergroups/search . Otherwise, if you try to import a non-existing group, a new one will be created with the specified authSourceId.
NOTE: In the case of vIDB user group, the import occurs based on the provided externalId. If other provided details are incorrect, they will be asynchronously updated with the correct values right after the import operation is completed.

PUT
Modify User Group

You can add or remove users from the group. Name and id of the group cannot be changed.

GET
Get Assigned Role Permissions For User Group

Get assigned role permissions for the specified user group

PUT
Assign Role Permission To User Group

Replaces existing role permission entirety if it exists already for the named role.

DELETE
Unassigned Role Permission From User Group

Unassign role permission from a user group

PUT
Assign Traversal Spec To User Group Deprecated

Traversal specifications assigned through this API will add the specified traversal specification to a role permission for the ReadOnly role. It will also update the user's existing role permissions with this traversal specification.
This API is replaced by the assignRolePermissionToUser and unassignRolePermissionFromUser APIs which are PUT and DELETE operations respectively at the /auth/usergroups/{groupId}/permissions endpoint.Note: mixing current and deprecated APIs is not recommended and may result in undefined behavior.

DELETE
Delete User Group

Delete a local user group

GET
Get User Group

Look up a local user group using its identifier

DELETE
Delete Users

If the user which is being deleted is an SSO/LDAP/AD user, then it gets deleted(removed) from VMware Cloud Foundation Operations ONLY and does not get actually deleted.

GET
Get Users

If both ids and roleNames are not specified, information about all the local users are being returned.

POST
Create User

Create a new user

PUT
Modify User

Modify the details of a particular user

PUT
Change Password

Change the password of the active user

DELETE
Delete User

If the user being deleted is an SSO/LDAP/AD user, the user gets deleted(removed) from VMware Cloud Foundation Operations ONLY and does not get actually deleted.

GET
Get User

Using this method, you can look up details about a particular local user

GET
Get Assigned Role Permissions For User

Get assigned role permissions for a specified user

PUT
Assign Role Permission To User

Replaces the existing role permission entirety if it exists already for the named role.

DELETE
Unassigned Role Permission From User

Unassign role permission from a user

PUT
Assign Traversal Spec To User Deprecated

Traversal specifications assigned through this API will add the specified traversal specification to a role permission for the ReadOnly role. It will also update the user's existing role permissions with this traversal specification.
This API is replaced by the assignRolePermissionToUser and unassignRolePermissionFromUser APIs which are PUT and DELETE operations respectively at the /auth/usergroups/{groupId}/permissions endpoint.Note: mixing current and deprecated APIs is not recommended and may result in undefined behavior.

Certificate
DELETE
Delete Certificate

Delete a certificate

GET
Get All Certificates

Get all certificates

POST
Import Certificate

Import the given certificate file.

Collector Groups
GET
Get Collector Groups

Get all the Collector Groups defined in the system

POST
Create Collector Group

Create a new Collector Group in the system

PUT
Update Collector Group

This Replaces all existing configuration of a Collector Group
with the data specified as part of the Request.

DELETE
Delete Collector Group

Delete a Collector Group from the system using collector specified identifier

GET
Get Collector Group

Get details of a particular Collector Group in the system

POST
Renew Collector Group Certificate

Renew Collector Group CA Certificate. Note : Communication between Endpoint - Cloud Proxy will be broken post Renewal of CA Certificate. Will attempt to renew Client Certificate on Endpoint

GET
Get Collector Group Certificate Renewal Status

Status of Collector Group CA Certificate renewal action.

DELETE
Remove Collector From Collector Group

Remove a Collector from the specified Collector Group

PUT
Add Collector To Collector Group

Add a Collector to the specified Collector Group

Collectors
GET
Get Collectors

If no filters set, the API returns all the Collectors registered with the VMware Cloud Foundation Operations system

GET
Get Adapters On Collector

Get all the Collectors registered with the VMware Cloud Foundation Operations system

POST
Renew Cloud Proxy Certificate

Renew Cloud Proxy CA Certificate. Note : Communication between Endpoint - Cloud Proxy will be broken post Renewal of CA Certificate. Will attempt to renew Client Certificate on Endpoint.

GET
Get Collector Certificate Renew Status

Status of Collector CA Certificate renewal Operation.

PUT
Disable Data Persistence

Using this method, you can disable data persistence on cloud proxy.

PUT
Enable Data Persistence

Using this method, you can enable data persistence on cloud proxy.

Component Certificate Management
GET
Get VVF Certificates

Get VVF certificates for a service

PUT
Replace VVF Certificate

Replace the certificate of the given ingress component

GET
Get VVF Csrs

Get all Certificate Signing Requests (CSRs) for a service

POST
Generate VVF Csr

Generate a Certificate Signing Request (CSR) for a service

Component Password Management
GET
Get VVF Account List

get the list of accounts

PUT
Update Password System

Update the password for a system account

GET
Get Vvf Task Status

Get the status of a task

Configuration Management
GET
Get

Get details of the specified configuration file.

Content Management
POST
Backup Content Deprecated

Backup content for current user

GET
Download Backup Content Data Deprecated

Download backup for current user

GET
Get Last Export Operation

The response contains information about the last export operation details

POST
Export Content

Export content for current user. This takes scope of the export. The content types that need to be exported can be specified as a list.

GET
Download

Downloads the content data as a file.

GET
Get Last Import Operation

The response contains information about the last import operation details

POST
Import Content

The "Content-Type" of the request is multipart/form-data. If the force option is set to true, content will be overwritten. By default the flag is true.
NOTE: If the content file contains integration accounts, then upon completion of the import process, it is recommended to check them. Some collectors or collector groups may have become unbound from the accounts they serve and should be reconnected. Additionally, you will need to re-accept all untrusted certificates manually. Finally ensure that all your adapter instances are started as some of these may not have been restarted automatically.

GET
Get Content Progress Deprecated

Get content progress

POST
Restore Content Deprecated

The "Content-Type" of the request is multipart/form-data.

GET
Get Restore Content Data Deprecated

Get restore data report for current user

Cost Configuration
GET
Get Currency

Get details of currently selected currency such as display name, code, etc.

POST
Set Currency

Set currency

Credentials
GET
Get Credential Kinds

Gets all the Credential Kinds defined in the system. Optionally filter by adapter kind keys.

GET
Get Credentials

Gets all the Credential Instances in the system. Optionally filter by adapter kind keys or credential instance identifiers.

PATCH
Partial Update Credential

Partial update an existing Credential Instance

POST
Create Credential

Create a new Credential Instance

PUT
Update Credential

Update an existing Credential Instance

DELETE
Delete Credential

Delete a Credential Instance using the identifier specified. Requires the authenticated user to have correct privilege.

GET
Get Credential

Get a Credential Instance using the identifier specified

GET
Get Adapter Instances Using Credential

Gets the Adapter Instances using the Credential Instance specified by the identifier.

GET
Get Resources Using Credential

Gets the Objects using the Credential Instance specified by the identifier.

Deployment
PUT
Manage DT

Currently one can Start or Stop a DT Run.
Sample URI:
PUT /api/deployment/cluster/dt?action=start
PUT /api/deployment/cluster/dt?action=stop

GET
Get Global Settings

The deprecation info and all key-name mappings can be found in the /api/deployment/config/globalsettings/metadata API's description.

GET
Get Global Setting Metadata

Find all the name-key mappings here:

Action History - ACTION_RETENTION_IN_DAYS,
Deleted Objects - DELETED_OBJECTS_RETENTION_IN_HOURS,
Deletion Scheduling Interval - DELETION_SCHEDULING_INTERVAL_IN_HOURS,
Object History - OBJECT_HISTORY_RETENTION_IN_DAYS,
Generated Reports Retention - GENERATED_REPORTS_RETENTION_TIME_IN_MONTHS,
Session Timeout - SESSION_TIMEOUT_IN_MINUTES,
Symptoms/Alerts - CANCELLED_ALERTS_SYMPTOMS_RETENTION_TIME_IN_DAYS,
Time Series Data Retention - TIME_SERIES_DATA_RETENTION_IN_MONTHS,
Additional Time Series Retention - ROLLUP_TIME_SERIES_DATA_RETENTION_IN_MONTHS,
Deleted Users - DELETED_USERS_RETENTION_IN_DAYS,
External Event Based Active Symptoms - OUTDATED_EVENT_BASED_SYMPTOMS_CANCELING_ENABLED,
External Event Based Active Symptoms - ACTIVE_EVENT_BASED_SYMPTOMS_RETENTION_TIME_IN_DAYS,
Dynamic Threshold Calculation - DYNAMIC_THRESHOLDING_UPDATE_TIME_IN_MINUTES,
Cost Calculation - COST_CALCULATION_TIME_IN_MINUTES,
Deprecated from VMware Aria Operations 8.14: Customer Experience Improvement Program - TELEMETRY_ENABLED,
Allow vCenter users to log into VMware Cloud Foundation Operations from vCenter clients - VC_USER_LOGIN_FROM_VC_WEBUI_ALLOWED,
System access URL - BASE_URL,
Automated Actions - AUTOMATED_ACTIONS_ENABLED,
Enable Standard Certification Validation - ENABLE_CERTIFICATE_VALIDATION_STANDARD_WAY,
Concurrent UI login sessions - ALLOW_CONCURRENT_LOGIN_SESSIONS,
Allow non-imported vIDM user access - ALLOW_NON_IMPORTED_VIDM_USERS_ACCESS,
Dynamic Threshold Calculation - DYNAMIC_THRESHOLDING_ENABLED,
Cost Calculation - COST_CALCULATION_ENABLED,
Deleted Objects - DELETED_OBJECTS_RETENTION_IN_HOURS_EXPANSION,
Generated Reports Retention - GENERATED_REPORTS_RETENTION_ENABLED,
Docker image default registry URL - DOCKER_IMAGE_REGISTRY_URL,
Tag Based Pricing Metrics - PRICING_TAG_DETAILED_METRICS,
Tag based Costing Metrics - COSTING_TAG_DETAILED_METRICS,
Cluster Utilization Ceiling Factor - CLUSTER_UTILIZATION_ROUND_OFF,
Generated Reports Retention - GENERATED_REPORTS_RETENTION_TIME_IN_DAYS,
Threshold For Adapters Certificate Expiration Alert - CERTIFICATE_ALARM_DAYS,
Show Cost Savings - SHOW_COST_SAVINGS_RECLAMATION_SETTING,
Include Powered off VMs for Reclamation (flag) - RECLAIM_POWERED_OFF_VMS_ENABLED,
Include Powered off VMs for Reclamation (days) - RECLAIM_POWERED_OFF_VMS_DAYS,
Include Idle VMs for Reclamation - RECLAIM_IDLE_VMS_ENABLED,
Minimum number of days that VM has been idle for - RECLAIM_IDLE_VMS_DAYS,
Exclude VM provisioned in last - EXCLUDE_IDLE_VMS_PROVISIONED_IN_LAST_DAYS,
VM Idleness Criteria (MHz) - IDLENESS_INDICATOR_THRESHOLD_MHZ,
VM Idleness Criteria (%) - IDLENESS_INDICATOR_THRESHOLD_PERCENT,
Include Snapshots for Reclamation (flag) - RECLAIM_SNAPSHOTS_ENABLED,
Include Snapshots for Reclamation (days) - RECLAIM_SNAPSHOTS_DAYS,
Include Orphaned Disks for Reclamation (flag) - RECLAIM_ORPHANED_DISKS_ENABLED,
Include Orphaned Disks for Reclamation (days) - RECLAIM_ORPHANED_DISKS_DAYS,
Orphaned Disks Collection Time - ORPHANED_VMDK_COLLECTION_TIME_IN_MINUTES,
Generated Tenant Reports Retention (flag) - GENERATED_TENANT_REPORTS_RETENTION_ENABLED,
Generated Tenant Reports Retention (days) - GENERATED_TENANT_REPORTS_RETENTION_TIME_IN_DAYS,
Credential Ownership Enforcement - ACTIVATE_CREDENTIAL_OWNERSHIP.

GET
Get Global Setting Value

The deprecation info and all key-name mappings can be found in the /api/deployment/config/globalsettings/metadata API's description.

PUT
Update Global Setting Value

The deprecation info and all key-name mappings can be found in the /api/deployment/config/globalsettings/metadata API's description.

GET
Get Services Info

The information returned includes the Health of the Service, uptime, when the service was started and etc.
Specifically the Health of the Service is 'OK', when the Service is running and responsive, otherwise it is 'Error'.

GET
Get Service Info

The information returned includes the Health of the Service, uptime, start time of the service and etc.
Specifically the Health of the Service is 'OK', when the Service is running and responsive, otherwise it is 'Error'.

GET
Get Node Status

The status is ONLINE, if all the services are running and responsive, else status is OFFLINE.

Events
POST
Push Event

Push a single Event into the system

POST
Push Event By Adapter Kind Key

If the adapter kind specified is not present in the system, it will be created dynamically. However,
if the adapter kind specified does already exist, then it must be of OPENAPI adapter kind type.
Also the API sanitizes the Push Adapter Kind key by removing invalid characters (e.g.: Embedded HTML & JS)

POST
Push Events

Push one or more Events into the system

POST
Push Events By Adapter Kind Key

If the adapter kind specified is not present in the system, it will be created dynamically. However,
if the adapter kind specified does already exist, then it must be of OPENAPI adapter kind type.
Also the API sanitizes the Push Adapter Kind key by removing invalid characters (e.g.: Embedded HTML & JS)

Findings
POST
Query Findings

If no filters are set, the API returns all the findings in the system

POST
Query Affected Objects

If no filters are set, the API returns all the affected objects for the rule in the system

Fleet Certificate Management
GET
Get Vcf Certificate Authorities

This API will be invoked by VCF UI to show Configured CA

PUT
Configure Vcf Certificate Authorities

This API will be invoked by UI to update /save the CA configurations

POST
Get Vcf Certificates

Get paginated list of certificates based on query parameters

GET
Get Vcf Certificate

Get certificate info for the given Certificate Id

PUT
Replace Certificate

Replace the certificate of the given appliance

GET
Fetch CS Rs

Return list of Certificate CSRs.

POST
Generate Csr

Generate Certificate Signing Request (CSR) for the given VCF component

Fleet Password Management
POST
Get Vcf Password Accounts

Get paginated list of password accounts based on query parameters

PUT
Update Password

Update the password for given account

Iam Apis
GET
Get Eligible Components

Retrieves a list of all VCF components (vCenter) that are eligible for custom role provisioning. Use this API to discover available components in your environment where you can create and apply custom roles for fine-grained access control.

DELETE
Delete Iam Component Auth Source

Delete Iam Component Auth Source by either VCF Component ID or Component Type. Exactly one parameter (componentId or componentType) must be provided.

POST
Create Iam Component Auth Source

Creates Iam Component Auth Source. Can be based on a VCF Component or a Management Component type.

POST
Get Iam Component Auth Sources

Fetch Iam Component Auth Source. If no filterType and filterValue provided, returns all. If provided, fetch by filterType (VCF_COMPONENT, MANAGEMENT_COMPONENT, or VCF_INSTANCE) and corresponding filterValue. filterValue must be a valid UUID for VCF_COMPONENT and VCF_INSTANCE, or a valid ComponentType enum value for MANAGEMENT_COMPONENT.

GET
Get Component Roles

Retrieves a list of all custom component roles that have been created and provisioned across VCF components. This API supports filtering by component role name and component type to find specific custom roles. Use this endpoint to view all custom roles and their provisioning status across your VCF environment.

POST
Provision Component Role

Creates new custom component roles and provisions them to specified target components.The operation is asynchronous and returns a task ID to track the provisioning progress.

PUT
Update Component Role

Updates an existing custom component role definition. The operation is asynchronous and returns a task ID.

GET
Get Component Role Summaries

Retrieves a list of available component roles for VCF components with optional filtering by component type. This API returns the built-in/custom roles available for each VCF component (vCenter, NSX Manager, VCF Operations, etc.) that can be used when creating custom VCF roles.

DELETE
Delete Component Role

This operation will remove the role definition from VCF Operations. The role will not be de-provisioned from the components

GET
Get Component Role

Retrieves detailed information about a specific custom component role including its definition, permissions, and current provisioning status across all target components. This API provides comprehensive details needed to understand and manage a custom role.

POST
Trigger Drift Check

Initiates a drift detection check for a custom role on specified target components. Drift detection identifies differences between the intended role definition in VCF Operations and the actual role configuration on target components (vCenter, NSX Manager, etc.). Use this to ensure roles are properly synchronized across your environment.

POST
Retry Apply For Role

Retries provisioning of a custom role on specified target components where previous provisioning attempts failed. Use this API to remediate failed provisioning operations without having to recreate or modify the role definition. The operation is asynchronous and returns a task ID to track retry progress.

GET
Get Component Role Definitions

Retrieves the current custom role definitions from a specific component (vCenter). This API returns all custom roles that have been provisioned to the specified component

POST
Configure IDP

Creates a new Identity Provider configuration supporting OIDC, SAML, or LDAP BIND protocols. Supports JIT, SCIM, or LDAP provisioning types.

PUT
Update IDP Configuration

Updates an existing Identity Provider configuration. All configuration fields can be modified.

DELETE
Delete IDP Configuration

Deletes an Identity Provider configuration. If force is true, also removes associated components.

GET
Get IDP Configuration

Retrieves the complete Identity Provider configuration details by IDP configuration ID.

GET
Get Scim Sync Client Info

Retrieves basic information about the OAuth2 SCIM sync client configured for the specified directory.

POST
Generate Scim Sync Client

Creates a new OAuth2 SCIM sync client for the specified directory. Optionally generates a bearer access token with configurable TTL (default 6 months).

GET
Get Ldap Directories

Retrieves all LDAP directory information objects associated with the specified Identity Provider.

POST
Lookup Ldap Groups

Performs a search query to find groups in the specified LDAP directory based on search criteria.

POST
Execute Ldap Sync

Initiates a manual LDAP synchronization operation for the specified identity provider and directory.

GET
Get Ldap Sync Logs

Retrieves paginated list of LDAP synchronization execution logs. Can fetch all logs or only the last sync log using the 'last' parameter.

GET
Get Ldap Sync Log By Id

Retrieves detailed information about a specific LDAP synchronization execution by sync log ID.

GET
Get Ldap Sync Profile

Retrieves the LDAP synchronization profile configuration for a specific directory.

PUT
Update Ldap Sync Profile

Updates the LDAP synchronization profile configuration for a specific directory.

POST
Lookup Ldap Users

Performs a search query to find users in the specified LDAP directory based on search criteria.

GET
Get VCF Roles Paginated

Retrieves a Paginated list of VCF roles with optional filtering by role typeThis API supports filtering to find specific roles based on type criteria or returns both built-in and custom roles.

POST
Create Role

Creates a new custom VCF role with specified component roles and permissions. Custom roles allow fine-grained access control by combining component-specific roles from different VCF components. The role name must be unique and will be validated for conflicts with existing roles.

PUT
Update Role Definition

Updates an existing custom VCF role definition with new component roles and permissions. This operation allows modification of role assignments, descriptions, and component role mappings. Built-in roles cannot be updated, only custom roles are supported for updates.

DELETE
Delete Role

Permanently deletes a custom VCF role definition from the system. Built-in roles cannot be deleted. Before deletion, ensure that no users, groups or api-clients are assigned to this role. This operation cannot be undone

GET
Get Role

Retrieves the complete definition of a specific VCF role including its component roles

POST
Validate Saml Metadata

Validates SAML metadata provided as XML content or URL. Returns validation results and parsed metadata information.

GET
Get Iam Settings

Retrieves the current IAM Global Settings configuration including API token TTL, access token TTL, and API token retention period. These settings control the lifetime and retention policies for authentication tokens used in the VCF

PUT
Update Iam Settings

Updates the IAM Global Settings configuration including API token TTL, access token TTL, and API token retention period. These settings control the lifetime and retention policies for authentication tokens used in the VCF.

GET
Get Sso Realm List

Retrieves a summary list of all configured SSO Realms in the system.

POST
Create Sso Realm

Creates a new SSO Realm configuration for identity management.

DELETE
Delete Sso Realm

Deletes an SSO Realm configuration.

GET
Get Sso Realm

Retrieves complete SSO Realm configuration details by SSO Realm identifier.

PATCH
Update Api Client

Updates specific fields of an API Client.

POST
Create Api Client

Creates a new API Client in the specified SSO Realm for API access.

POST
Query Api Clients

Queries API Clients in an SSO Realm with search filters and pagination support. Results can be sorted by expiration date, creation date, last used date, or access token TTL.

DELETE
Delete Api Client

Deletes an API Client and all associated tokens from the SSO Realm.

GET
Get Api Client

Retrieves complete details of a specific API Client by client ID.

PATCH
Update Api Token

Updates specific fields of an API Token configuration.

POST
Generate Api Token

Generates a new API Token for an existing API Client. Returns the token with its secret value (displayed only once).

POST
Query Api Tokens

Queries API Tokens in an SSO Realm with search filters and pagination support. Results can be sorted by expiration date, creation date, last used date, or access token TTL.

DELETE
Delete Api Token

Deletes a specific API Token from the SSO Realm by token ID.

GET
Get Api Token

Retrieves complete details of a specific API Token by token ID.

POST
Re Generate Api Token

Regenerates the secret value for an existing API Token. The new secret is returned and should be stored securely.

GET
List Emergency Clients

Retrieves a list of all Emergency Clients configured in the specified SSO Realm.

POST
Create Emergency Client

Creates an Emergency Client with an automatically generated token. Emergency clients are used for critical access scenarios.

DELETE
Delete Emergency Client

Deletes an Emergency Client and its associated token from the SSO Realm.

GET
Get Emergency Client

Retrieves complete details of a specific Emergency Client by client ID.

POST
Regenerate Emergency Client

Regenerates the token secret for an existing Emergency Client. The new secret is returned and should be stored securely.

POST
Get Groups List

Retrieves a paginated list of provisioned groups in an SSO Realm. Supports filtering, sorting, and pagination parameters.

POST
Get Group Members List

Retrieves a paginated list of user members belonging to a specific group. Supports filtering, sorting, and pagination parameters.

GET
List O Auth Apps

Retrieves a list of all OAuth App instances explicitly created for external integrations in the specified SSO Realm.System-generated OAuth Apps used for internal authentication source configurations are excluded.

POST
Create O Auth App

Creates a new OAuth App instance in the specified SSO Realm for OAuth-based authentication. This is needed for external integrations in the SSO Realm

PUT
Update O Auth App

Updates an OAuth App configuration.

DELETE
Delete O Auth App

Deletes an OAuth App instance from the SSO Realm by OAuth App ID.

GET
Get O Auth App

Retrieves complete details of a specific OAuth App by OAuth App ID.

POST
Rotate O Auth App Secret

Rotates the client secret for an OAuth App. The new secret is generated and returned in the response.

DELETE
Delete Role Assignments

Removes all role assignments from a user or group or api client.

GET
Get Role Assignment

Retrieves all existing role assignments for a user or group or api client.

PUT
Update Role Assignment

Replaces all existing role assignments for a user or group or api client with the new set of role assignments provided in the request.

POST
Get Users List

Retrieves a paginated list of provisioned users in an SSO Realm. Supports filtering, sorting, and pagination parameters.

GET
Get Iam Task Details

Retrieves IAM task details by taskId received after initiating any task such as DELETE SSO Realm or IDP

GET
Get Eligible Vidbs

Retrieves list of identity broker instances available for Identity Provider configuration. Can be filtered by VCF Instance ID and deployment type.

PATCH
Update Vidb Metadata

Updates metadata for an identity broker resource, such as display name or other descriptive information.

Integrations
GET
Get Integrated Services

Get registered services details

POST
Create Vcenter Integration

Instances are generated for not just the vCenter adapter but also for vSAN and Service Discovery adapters. If configurations for vSAN or Service Discovery are not provided, the corresponding adapters will not be created.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

PUT
Update Vcenter Integration

Instances are updated for not just the vCenter integration but also for vSAN and Service Discovery adapters. If configurations for vSAN or Service Discovery are not provided, the corresponding adapters will not be updated.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

POST
Test Vcenter Integration

In case if certificate is needed, will return untrusted certificate for acceptance in response.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

DELETE
Delete Vcenter Integration

NOTE: Deletion is not synchronous. As a result, the delete operation may not happen immediately. It is recommended to query back the system with the identifier and ensure that the system returns a 404 error.

GET
Get Vcenter Integration By Id

Get vCenter integration, with vSAN and Service Discovery configs

PUT
Register VC

If force parameter is passed as true, in case if vc is already registered, registration will be overwritten.

PUT
Unregister VC

Unregister vc with provided credentials, and id

POST
Create VCF Integration

vCenter,vSAN and NSXT adapter instances will be generated, upon VCF integration creation, but service discovery is still needed to be enabled manually.
NOTE: If NSX cloud account creation fails due to service account credential creation failure, no error will be thrown. Verify the NSX cloud account after VCF integration creation.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

PUT
Update VCF Integration

NOTE: while providing any certificate via this API, certificateDetails field must be populated.

POST
Test VCF Integration

In case if certificate is needed, will return untrusted certificate for acceptance in response.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

DELETE
Delete Vcf Integration

NOTE: Deletion is not synchronous. As a result, the delete operation may not happen immediately. It is recommended to query back the system with the identifier and ensure that the system returns a 404 error.

GET
Get VCF Integration By Id

Get VCF integration, by specified id

GET
Get Domain Summary

Get all VCF domains summary for VCF by provided id

DELETE
Delete Vcf Domain

NOTE: Deletion is not synchronous. As a result, the delete operation may not happen immediately. It is recommended to query back the system with the identifier and ensure that the system returns a 404 error.

GET
Get Domain Details By Id

Get VCF domain by provided VCF and domain ids

PUT
Update Domain Details

NOTE: This operation will only work for configured domains.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

POST
Test Domain

NOTE: This operation will only work for configured domains.
NOTE: while providing any certificate via this API, certificateDetails field must be populated.

PUT
Register VCF

If force parameter is passed as true, in case if vcf is already registered, registration will be overwritten.

NOTE: The registration of some of the VCs under the VCF may fail because of different issues, e.g. connection issue. In such cases response will be returned with http 200 status code, however the failed resources id's will be reported in the response body. Please check the status field of the response after executing this API, in order to make sure that the operation has fully succeeded.

PUT
Unregister VCF

NOTE: The un-registration of some of the VCs under the VCF may fail because of different issues, e.g. connection issue. In such cases response will be returned with http 200 status code, however the failed resources id's will be reported in the response body. Please check the status field of the response after executing this API, in order to make sure that the operation has fully succeeded.

Logs Management
GET
Get Log Configurations By Type

Get logs configurations of certain type

PUT
Create Or Update Log Configurations

Change level of the logs

DELETE
Delete Log Configuration Settings

Remove the log classes from the log type

GET
Get Log Forwarding Configuration

Returns log forwarding configuration.

PUT
Update Log Forwarding Configuration

NOTE: The "enabled" field should not be specified. Log forwarding will be enabled as a result of this API call. To disable log forwarding use "/api/logforwarding/disable" API

PUT
Disable Log Forwarding

NOTE: While disabling, "entities" will be removed from the log forwarding configuration.

PUT
Enable Log Forwarding

Enables log forwarding and sets the entities to forward the logs from.

GET
Get All LI Query Configs

Get all query configs

POST
Create Query Config

Create query config

PUT
Update Query Config

Update query config

DELETE
Delete LI Query Config

Delete query config with specified id

GET
Get LI Query Config

Get query config with specified id

Maintenance Schedules
DELETE
Delete Maintenance Schedules

Using this method, you can delete a particular maintenance schedules

GET
Get Maintenance Schedules

Using this method, you can get all maintenance schedules with or without specific parameters

POST
Create Maintenance Schedules

Using this method, you can create a particular maintenance schedules

PUT
Update Maintenance Schedules

Using this method, you can update a particular maintenance schedules

Notifications
GET
Get All Notification Rules

Get all the Notification Rules defined in the system

POST
Create Notification Plugin Rule

The Notification Plugin with which the Rule needs to be associated must be specified as part of the request.

PUT
Update Notification Plugin Rule

Update a specific Notification Rule for a Notification Plugin Instance

DELETE
Delete Notification Plugin Rules

Using this method, you can delete a particular notification plugin rule

GET
Get Notification Rule

Get the Notification Rule for the specified identifier

GET
Get Notification Templates

If the search criteria is not satisfied, the API will return all Notification Templates

POST
Create Notification Template

Creates a new notification template.
NOTE: Limit for selected Resource Kinds count is 30.
NOTE: Limit for selected Stats count is 30.

PUT
Update Notification Template

Updates an existing notification template.
NOTE: Limit for selected Resource Kinds count is 30.
NOTE: Limit for selected Stats count is 30.

DELETE
Delete Notification Template

Delete notification template.

GET
Get Notification Template

Returns notification template for the specified id.

Optimization
GET
Get DC Optimization Configuration

Get DC optimization configurations for capacity exclusion

PATCH
Patch DC Optimization Configuration

Update your DC optimization configurations for capacity exclusion partially

PUT
Put DC Optimization Configuration

Create or update your DC optimization configurations for capacity exclusion fully

GET
Get Reclaim Data

Reclaim data for VMs or for orphaned disks

GET
Get Rightsize Data

Rightsize data for VMs

POST
Exclude Orphaned Disks

Exclude orphaned disk

POST
Include Orphaned Disks

Include orphaned disk

POST
Exclude Reclaim V Ms

Exclude reclaimable VM

POST
Include Reclaim V Ms

Include reclaimable VM

POST
Exclude Rightsizing V Ms

Exclude rightsizing VM

POST
Include Rightsizing V Ms

Include rightsizing VM

POST
Get Wlp History

Get WLP History.

PUT
Disable Automation

If you disable automation, the system will still look for optimization opportunities. Any actions will now be manual
NOTE: If you have any scheduled optimizations, they will be re-activated

PUT
Enable Automation

Enabling automation will allow the system to optimize your datacenter by continuously looking for optimization opportunities
NOTE: Any scheduled optimizations will be deactivated during the time

GET
Get Automation Status

Get optimization automation status

PUT
Disable Cross DC Move

Disable cluster-level optimization across datacenter boundaries in a vCenter.
NOTE: This API is only applicable for custom datacenters

PUT
Enable Cross DC Move

If your custom datacenter includes clusters from multiple datacenters within the same vCenter, you can enable cross datacenter move to ensure optimization occurs across datacenter boundaries.
NOTE: This API is only applicable for custom datacenters

GET
Get Cross DC Move Status

Get cross datacenter move allowed status.
NOTE: This API is only applicable for custom datacenters

DELETE
Delete Placement Configuration

NOTE: The current settings will be removed.

GET
Get Placement Settings

Get placement settings

PUT
Set Placement Settings

To set host level placement constraints, VMware Cloud Foundation Operations will automatically create and manage DRS rules. All conflicting user-created DRS rules need to be DEACTIVATED. These include the following:

  • VM-VM affinity / anti-affinity

  • VM-Host affinity / anti-affinity

Policies
GET
Get Policies

Returns all available policies.

POST
Create Policy

Create a new policy.

POST
Apply Policy

Applies policy to the given groups.

PUT
Set Default Policy

Set given policy as default policy.

GET
Export Policies

Exports the content of policies into ZIP archive. The format of the exported data is subject to change and should be used only in the scope of same product version. Note: while exporting an embedded policy its parent will be exported as well.

POST
Import Policies

Imports policy content from an archive of ZIP format.

PUT
Update Priorities

The priorities will be set based on the order of the provided policies. Additionally, it's necessary to include all active policies except for the default policy.

DELETE
Delete Policy

Delete the policy for the specified identifier included descendants if requested

PUT
Assign Policy

Assigns policy to the given groups, and objects.

DELETE
Delete Policy Settings

Make provided settings in the policy inherited from parent policy.
NOTE: Currently, only one resource kind is supported.

GET
Get Policy Settings

Get the policy settings for the specified identifier.
NOTE: Currently, only one resource kind is supported.

PATCH
Patch Policy Settings

Update only provided settings in the policy.

PUT
Unassign Policy

Unassign policy from given groups, and objects.

Product Licensing
GET
Get Product Edition

Get edition of product licensing

GET
Get License Info

Get the license info for VMware Cloud Foundation Operations instance

GET
Get NPC Status

Get native public cloud licensing status

Recommendations
GET
Get Recommendations

If no query set, all recommendations will be returned

POST
Create Recommendation

The recommendation identifier must be unique for the system.

PUT
Update Recommendation

Update an existing recommendation

DELETE
Delete Recommendation

If a recommendation with the specified identifier does not exist no error will be returned

GET
Get Recommendation By Id

Get the recommendation specified by the given identifier

Reports
GET
Get Report Definitions

Get the Report Definitions based on the query specification specified

GET
Get Report Definition

Get a Report Definition by identifier

GET
Get Report Schedules

The date and time values configured within the Report Schedule are converted to GMT time zone.

POST
Create Report Schedule

To specify the time zone add X-Ops-API-Timezone header with value of format e.g. Asia/Yerevan.
All the schedules created using this API will be configured to use GMT time zone.

PUT
Update Report Schedule

The update of a schedule is a "Replace" operation.
If a schedule with the specified
schedule id is present in the system it will be replaced else the API returns a 404 error.

DELETE
Delete Schedule

Delete Report Schedule associated with the specific Report Definition and for the specified Schedule identifier

GET
Get Report Schedule

The date and time values configured within the Report Schedule are converted to GMT time zone.

GET
Get Reports

If the query spec is not provided, all Reports present in the system are returned.

POST
Create Report

Generate (create) a Report using the specified Report Definition and for the specified Resource

DELETE
Delete Report

Delete a report by its identifier

GET
Get Report

Get the detail of a Report given its identifier

GET
Download Report

The supported formats for Reports are PDF, CSV. If the format is not
specified the downloaded report will be in PDF format.
NOTE: In case the Accept header is provided, ensure that its value corresponds to the 'format' request parameter (including the default value when the request parameter is omitted).

Resource
DELETE
Delete Resource

NOTE: Deletion of a Resource is not synchronous. As a result, the delete operation may not happen immediately. It is recommended to query back the system with the resource identifier and ensure that the system returns a 404 error.

GET
Get Resource

Get the Resource for the specified identifier

PUT
Update Geo Location Of Resource

Update the geographical location of the Resource

DELETE
Unmark Resource As Being Maintained

Bring the Resource out of Maintenance manually

PUT
Mark Resource As Being Maintained

The Resource can end up in two maintenance states - MAINTAINED OR MAINTAINED_MANUAL -
depending upon the inputs specified.


  • If duration/end time is specified, the resource will be placed in MAINTAINED
    state and after the duration/end time expires, the resource state is automatically set to the state
    it was in before entering the maintenance window.
  • If duration/end time is not specified, the resource will be placed in MAINTAINED_MANUAL state.
    Callers have to execute DELETE /suite-api/api/resources/{id}/maintained API to set the Resource
    back to whatever state it was in.
  • If both duration and end time are specified, end time takes preference over duration.

PUT
Start Monitoring Resource Deprecated

The optional query parameter adapterId determines which of the Adapters need to be informed to start monitoring the Resource. If this is not specified, then all of the Adapters will start monitoring the Resource.

PUT
Stop Monitoring Resource Deprecated

The optional query parameter adapterId determines which of the Adapters need to be informed to stop monitoring the Resource. If this is not specified, then all of the Adapters will stop monitoring the Resource.

GET
Get Resource Properties

Get all the properties for the specified Resource

POST
Add Properties

In this case, the adapter instance used for pushing data will default to SuiteAPI. It is recommended (though not required) to use this API when the resource was created using the API
POST /api/resources/{id}/adapters/{adapterInstanceId}. Otherwise an additional adapter instance might be created.
Note: Those properties that are specified with old timestamp will be published with current time. As a result, only one of those properties will appear in vROps (e.g. the latest one will overwrite all previous ones).

POST
Add Properties Using Push Adapter Kind

If the adapter kind specified is not present in the system, it will be created dynamically. However if the adapter kind specified already exists, then it must be of OPENAPI adapter kind type.

GET
Get Relationships

If the optional query parameter 'relationshipType' is specified, relations of that particular Relationship Type are returned.
Few sample URLs are shown below.
/api/resources/{resourceId}/relationships?relationshipType=CHILD
/api/resources/{resourceId}/relationships?relationshipType=PARENT

GET
Get Relationship

The URL path variable 'relationshipType' uses the RelationshipType.representation value.
Few sample URLs are shown below.
/api/resources/{resourceId}/relationships/children
/api/resources/{resourceId}/relationships/parents

POST
Add Relationship

  • If at least a few of the Resource that are part of relatedIds list
    are valid resources then the operation is performed.

  • If there are few Resource that are part of relatedIds list
    that will result in a cyclical relationship, then those resources will be skipped.

NOTE: Adding relationship is not synchronous. As a
result, the add operation may not happen immediately. It is recommended
to query the relationships of the specific Resource back to ensure that the
operation was indeed successful.

PUT
Set Relationship

This API exposes replace semantics. Therefore, all the existing relationships of the
specified relationshipType will be removed and replaced with the resources
specified as part of the request body.

  • If at least a few of the Resource that are part of relatedIds list
    are valid resources then the operation is performed.

  • If there are few Resource that are part of relatedIds list
    that will result in a cyclical relationship, then the operation is aborted.

NOTE: Setting relationship is not synchronous.
As a result, the set operation may not happen immediately. It is recommended
to query the relationships of the specific Resource back to ensure that the
operation was indeed successful.

DELETE
Delete Relationship

NOTE: Removing a relationship is not synchronous. As a
result, the delete operation may not happen immediately. It is recommended
to query the relationships of the specific Resource back to ensure that the
operation was indeed successful.

GET
Get Stat Keys

Get all the stat keys for the specified Resource

GET
Get Stats Of Resource

NOTE: Unless a time range is explicitly set, the method returns statKeys which have received data in the last 24 hours.

POST
Add Stats

In this case, the adapter instance used for pushing data will default to vRealizeOpsMgrAPI. It is recommended (though not required) to use this API when the resource was created using the API POST /api/resources/{id}/adapters/{adapterInstanceId}. Otherwise an additional adapter instance might be created.

POST
Add Stats Using Push Adapter Kind

If the adapter kind specified is not present in the system, it will be created dynamically. However if the adapter kind specified already exists, then it must be of OPENAPI adapter kind type.

GET
Get DT Stats Of Resource

The API returns 24 hours of Stats and DT data by default for the specified Resource.

GET
Get Latest Stats

Get the latest stat for a given Resource and given a set of attributes

POST
Get Stats For Resource

NOTE: When making an XML request, make sure the statKey field does not contain any key name with spaces.

GET
Get Top N Stats Of Resource

Get the TopN stats for a given Resource and given a set of attributes

Resources
GET
Get Resources

Get a listing of resources based on the query spec specified

PUT
Update Resource


Implementation Notes:


  • When updating a Resource, if the Resource Identifiers that are unique and required
    are not specified, the API would return an error with HTTP status code of 500
    and an error message indicating the set of missing Resource Identifiers.

  • When updating a Resource, if the Resource Identifiers that are unique but not required
    are not specified, the Resource is updated where the uniquely identifying Resource Identifiers
    that were not specified will have their value as an empty string.
POST
Create Resource Using Adapter Kind

This adapter kind (referred to as 'Push' adapter kind) will be created if it does not
exist in the system and an instance of it will be associated with the Resource being created.
This adapter kind if it already exists must of OPENAPI adapter kind type.
The API will also create the missing Adapter Kind and Resource Kind
contained within the ResourceKey of the Resource if they do not exist.


Additional implementation notes:


  • When creating a Resource, if the Resource Identifiers that are unique and required
    are not specified, the API would return an error with HTTP status code of 500
    and an error message indicating the set of missing Resource Identifiers.

  • When creating a Resource, if the Resource Identifiers that are unique but not required
    are not specified, the Resource is created where the uniquely identifying Resource Identifiers
    that were not specified will have their value as an empty string.

POST
Create Resource Using Adapter Instance

The API will create the missing Adapter Kind and Resource Kind
contained within the ResourceKey of the Resource if they do not exist.
The API will return an error if the adapter instance specified does not exist.
Additional implementation notes:


  • When creating a Resource, if the Resource Identifiers that are unique and required
    are not specified, the API would return an error with HTTP status code of 500
    and an error message indicating the set of missing Resource Identifiers.

  • When creating a Resource, if the Resource Identifiers that are unique but not required
    are not specified, the Resource is created where the uniquely identifying Resource Identifiers
    that were not specified will have their value as an empty string.

DELETE
Delete Resources

NOTE: Deletion of Resources is not synchronous. As a result,
the delete operation may not happen immediately. Furthermore, there is no way
to track the status of the deletion operation. It is recommended to query back
the system with the resource identifiers and ensure that the system returns a
404 error.

POST
Get Resources Relationships

Get resources that satisfy filtering criteria and are related to specified listof resources with the given relationship type

DELETE
Delete Custom Datacenters

Delete custom datacenters.
NOTE: Deletion of custom datacenters is not synchronous. As a result,
the delete operation may not happen immediately. Furthermore, there is no way
to track the status of the deletion operation. It is recommended to query back
the system and ensure that the resources (datacenters) with given ids are not present any more.
NOTE: This API is only for custom datacenters deletion. Any invalid or none custom datacenter ids in the request body will be ignored.

GET
Get Custom Datacenters

Get custom datacenters

POST
Create Custom Datacenter

Create a custom datacenter

PUT
Update Custom Datacenter

Update a custom datacenter

GET
Get Custom Datacenter

Get custom datacenter by id

GET
Get Custom Groups

Get all custom groups with or without policy

POST
Create Custom Group

See different request examples with Metric Key, Property Key, Relationship and Resource Name Condition.

PUT
Modify Custom Group

NOTE: Method is enabled for user groups only

GET
Get Group Types

Get Group Types

POST
Add Group Type

Add a new group type
NOTE: The value of key must either not be sent or must match with the value of name.

DELETE
Delete Group Type

Delete the group type

DELETE
Delete Custom Group

NOTE: Method is enabled for user groups only

GET
Get Custom Group

Get a custom group with or without policy

GET
Get Custom Group Members

Get members of the specified group

DELETE
Unmark Resources As Being Maintained

Bring the specified set of Resources out of Maintenance manually

PUT
Mark Resources As Being Maintained

The Resources can end up in two maintenance states - MAINTAINED OR MAINTAINED_MANUAL -
depending upon the inputs specified.


  • If duration/end time is specified, the Resources will be placed in MAINTAINED
    state and after the duration/end time expires, the state of the Resources would be automatically
    set to the state they were in before entering the maintenance window.
  • If duration/end time is not specified, the Resources will be placed in MAINTAINED_MANUAL state.
    Callers have to execute DELETE /suite-api/api/resources/maintained?id=ID1&id=ID2 API
    to set the Resources back to whatever state they were in.
  • If both duration and end time are specified, end time takes preference over duration.

PUT
Start Monitoring Resources Deprecated

The query parameter id is for specifying the set of Resources that should
be monitored.
The optional query parameter adapterId determines which of the
Adapters need to be informed to start monitoring the Resources. If this is
not specified, then all of the Adapters will start monitoring the specified Resources.

PUT
Stop Monitoring Resources Deprecated

The query parameter id is for specifying the set of Resources that should
no longer be monitored.
The optional query parameter adapterId determines which of the
Adapters need to be informed to stop monitoring the Resources. If this is
not specified, then all of the Adapters will stop monitoring the specified Resources.

GET
Get Custom Profiles

Get all custom profiles

POST
Create Custom Profile

Example: GET /api/alerts/{id}

PUT
Modify Custom Profile

Modify an existing custom profile definition

DELETE
Delete Custom Profile

Delete a custom profile

GET
Get Custom Profile

Get custom profile

GET
Get Resource Properties List

Get all the Properties and their current (latest) values for the specified Resources

POST
Add Resources Properties

In this case, the adapter instance used for pushing data will default to vRealizeOpsMgrAPI.
It is recommended (though not required) to use this API when the resources were created using the API
POST /api/resources/{id}/adapters/{adapterInstanceId}. Otherwise an additional
adapter instance might be created.

POST
Add Resources Properties Using Adapter Kind

If the adapter kind specified is not present in the system, it will be created dynamically.
However if the adapter kind specified already exists, then it must be of OPENAPI adapter kind type.

POST
Query Latest Properties Of Resources

Get current (latest) values of requested properties for the specified resources

POST
Get Matching Resources

Gets a listing of resources based on the query spec specified.
NOTE: The operator field in statConditions/propertyConditions can only have one of the following values: EXISTS, NOT_EXISTS, GT_EQ, GT, LT_EQ, LT, EQ, NOT_EQ, CONTAINS, NOT_CONTAINS

GET
Get Stat Keys Of Resources

Sample URI:
/api/resources/statkeys?resourceId=UUID1

GET
Get Stats Of Resources

This is a GET endpoint and the query parameters control the data that is retrieved.
If the number of Resources for which one needs to query data is large, it is recommended to
use the POST /api/stats/query endpoint to avoid the URL length limitations.
Takes the form:
api/resources/stats?resourceId=UUID1 OR
api/resources/stats?resourceId=UUID2&statKey=cpu|usagemhz&rollUpType=&begin=&end=

POST
Add Stats For Resources

In this case, the adapter instance used for pushing data will default to vRealizeOpsMgrAPI.
It is recommended (though not required) to use this API when the resources were created using the API
POST /api/resources/{id}/adapters/{adapterInstanceId}. Otherwise an additional
adapter instance might be created.

POST
Add Stats For Resources Using Push Adapter Kind

If the adapter kind specified is not present in the system, it will be created dynamically.
However if the adapter kind specified already exists, then it must be of OPENAPI adapter kind type.

POST
Get Stats And DT For Resources

The API returns 24 hours of Stats and DT data by default for the specified Resources.

GET
Get Latest Stats Of Resources

Takes the form:
api/resources/stats/latest?resourceId=UUID1&resourceId=UUID2 OR
api/resources/stats/latest?resourceId=UUID2&statKey=cpu|usagemhz&statKey=cpu|demandmhz

POST
Query Latest Stats Of Resources

Get the last "maxSamples" stats values for specified one or more Resources

POST
Get Stats For Resources

Get stats for one or more Resources using the specific query spec

GET
Get Top N Stats Of Resources

Get the Top-N stats data for one or more Resources and a set of StatKeys

Salt Management
GET
Get Salt Resources

Get all resources with their respective salt status

POST
Configure Minion

Configuration for enabling salt for a particular resource

POST
Rotate Resource Keys

Rotate keys for resource

GET
Get Salt Resource By Id

Get salt status for a resource

GET
Get Task

Get task details for a task Id

Solutions
GET
Get Solutions

Get data about all the solutions associated with VMware Cloud Foundation Operations instance. Data includes name, version , vendor and adapterKinds of the solution.

GET
Get Solution

Data includes name, version, vendor and adapterKinds of the solution

GET
Get Adapter Kinds For Solution

Get Adapter Kind details for the specified solution id

Super Metrics
GET
Get Super Metrics

Get a collection of SuperMetrics based on search parameters

POST
Create Super Metric

Create a SuperMetric with the given name, formula and description

PUT
Update Super Metric

Update a SuperMetric with the given name, formula and description

DELETE
Delete Super Metric

Delete a SuperMetric

GET
Get Super Metric

Get a SuperMetric with the given ID

Symptoms
GET
Get Symptom Definitions

NOTE: When making an XML request, make sure the statKey field does not contain any key name with spaces.

POST
Create Symptom Definition

The symptom definition identifier must be null and will be generated by the system.
A symptom definition contains a symptom state, there may only be one symptom state per symptom definition.

PUT
Update Symptom Definition

Update an existing Symptom Definition

DELETE
Delete Symptom Definition

Delete a Symptom Definition

GET
Get Symptom Definition By Key

Get Symptom Definition specified by id

GET
Get Symptoms

Optionally these Symptoms can be looked up for a specific set of Resources and/or
can include Symptoms that are no longer active.
The list of Symptoms returned is a collection that supports pagination.

POST
Query Symptoms

The list of Symptoms returned is a collection that supports pagination.

Tasks
GET
Get Tasks Status

In general, to get the status of any long running operations, the operation
must have been initiated through the VMware Cloud Foundation Operations REST API.
This API endpoint returns the details of the long running tasks that were submitted via the API only.
Furthermore, the list of tasks that this API returns includes tasks for long running operations such
as Adapter Installation, Describe etc. This API does not return the tasks created when any
Remediation Actions are executed in the system either via the UI or via the API.

GET
Get Task Status

In general, to get the status of any long running operations, the operation
must have been initiated through the VMware Cloud Foundation Operations REST API.
This API returns the status of a specific task that was initiated via the REST API
with the exception of tasks that get created when any Remediation Action is performed
via the api/actions endpoint.

Tenant Billing
POST
Generate Bills

Create and save the Bills based on the Bill Generate Request

POST
Get Bill Summary

Get metering Bills summary based on the Request

DELETE
Delete Bill

Delete generated bill for the specified bill identifier

GET
Get Bill

Get bill for the specified bill identifier

GET
Download Bill

The supported format for bills is PDF.

Tenant Notifications
GET
Get All Chargeback Notification Rules

Get all the tenant notification rules defined in the system

POST
Create Chargeback Notification Rule

Create a new tenant notification rule

PUT
Update Chargeback Notification Rule

Update a specific tenant notification rule

DELETE
Delete Chargeback Notification Rule

Using this method, you can delete a particular tenant notification rule

GET
Get Chargeback Notification Rule

Get the tenant notification rule for the specified identifier

Tenant Reports
GET
Get Report Schedules By Id

The date and time values configured within the Report Schedule are converted to GMT time zone.

POST
Create Report Schedule By Id

To specify the time zone add X-Ops-API-Timezone header with value of format e.g. Asia/Yerevan.
All the schedules created using this API will be configured to use GMT time zone.

PUT
Update Report Schedule By Id

The update of a schedule is a "Replace" operation.
If a schedule with the specified
schedule id is present in the system it will be replaced else the API returns a 404 error.

DELETE
Delete Schedule By Id

Delete Tenant Report Schedule associated with the specific Report Definition and for the specified Schedule identifier

GET
Get Report Schedule By Id

The date and time values configured within the Report Schedule are converted to GMT time zone.

GET
Get Charge Back Reports

If the query spec is not provided, all Tenant Reports present in the system are returned.

POST
Create Charge Back Report

Generate (create) a Tenant Report using the specified Report Definition and for the specified Resource

DELETE
Delete Charge Back Report

Delete a tenant report by its identifier

GET
Get Charge Back Report

Get the detail of a Tenant Report given its identifier

GET
Download Charge Back Report

The supported formats for Tenant Reports are PDF, CSV. If the format is not
specified the downloaded report will be in PDF format.
NOTE: In case the Accept header is provided, ensure that its value corresponds to the 'format' request parameter (including the default value when the request parameter is omitted).

Versions Info
GET
Get Supported Application Versions

Get all supported versions by the service

GET
Get Current Version Of Server

Get the current version of the service

What If
GET
Get Scenarios

Get all saved scenarios

POST
Save Scenario

Save scenario

PUT
Update Scenario

Update scenario

POST
Run Scenario

Run scenario

DELETE
Delete Scenario

Delete list of saved scenarios

GET
Get Server Configs

Get server configs

Workflow Request
GET
Get Request By Id

Get request by Id