
VMware, Inc. 25
Chapter 2 vShield Manager Management
Get List of Possible Roles
YoucanretrievethepossiblerolesinvShieldManager .
Example 2-26. Get possible roles
Request:
GET https://<vsm-ip>/api/2.0/services/usermgmt/roles
Get List of Scoping Objects
Youcanretrievealistofobjectsthatcanbeusedtodefineauser’saccessscope.
Example 2-27. Get scoping objects
Request:
GET https://<vsm-ip>/api/2.0/services/usermgmt/scopingobjects
ThescopingobjectsareusuallymanagedobjectreferencesorvCenterServernamesofdatacentersandfolders.
Creating IPset and MACset Containers
YoucancreatevShieldcontainersbasedonIPaddressesandMACaddresses.TheseAPIscontroltwotypesof
resources:vShieldManagerscopeobject(adatacenterorportgroup)andtheIPsetorMACsetaddresses.
List IPsets Created on a Scope
YoucanretrievealltheIPsetsthatwerecreatedonthespecifiedscope.
Example 2-28. List IPsets on a scope
Request:
GET https://<vsm-ip>/api/2.0/services/ipset/scope/<scope-moref>
The<scope-moref>canbeadatacenterorportgroupofthevCentertowhichvShieldManagerisconnected.
Create an IPset on a Scope
YoucancreateanewIPsetonthespecifiedscope.
Example 2-29. Create IPset on a scope
Request:
POST https://<vsm-ip>/api/2.0/services/ipset/scope/<scope-moref>
RequestBodyExample:
<ipset>
<objectId />
<type>
<typeName />
</type>
<description>
New Description
</description>
<name>TestIPSet2</name>
<revision>0</revision>
<objectTypeName />
Komentáře k této Příručce