INPUT_OBJECT

PolicyRoleMutationDataInput

link GraphQL Schema definition

  • input PolicyRoleMutationDataInput {
  • # Remove specified services from the current list.
  • removeServices: [PolicyServiceDataIdentifierInput]
  • # HTTP Redirect action. -1 = Disabled, 1+ = Redirect Index to associate to URLs
  • # defined by domain HttpRedirect data.
  • httpRedirectIndex: Int
  • # TCI Overwrite status (Enabled/Disabled)
  • tci: BistateActionInput
  • # Class of Service action. Pass "NO_COS" to clear the action. Class of service
  • # must be defined in domain or error is returned.
  • cos: String
  • # Add specified services the current list.
  • addServices: [PolicyServiceDataIdentifierInput]
  • # Port mirror action. Set to Enabled/Disabled/Prohibited. If setting Enabled, port
  • # groups must be specified by mirrorPortGroups
  • mirrorStatus: String
  • # Set role's current list of services to the one specified.
  • services: [PolicyServiceDataIdentifierInput]
  • # MirrorN status (Enabled/Disabled). Applicable when mirror status is enabled.
  • # Specifies whether mirror action should send all packets, or first N packets of a
  • # flow. N value is domain level scalar set by mutateDomainSetting:mirrorNLimit
  • mirrorFirstN: Boolean
  • # Add specified service groups the current list.
  • addServiceGroups: [PolicyServiceGroupDataIdentifierInput]
  • # Remove specified service groups from the current list.
  • removeServiceGroups: [PolicyServiceGroupDataIdentifierInput]
  • # Name of role
  • name: String
  • # Port mirror action. Pass one or more port group names to enable mirror using
  • # ports in specified groups. Replaces existing port groups. Disable using
  • # mirrorStatus. Port groups must exist in domain or error is returned.
  • mirrorPortGroups: [String]
  • # Audit trap action (Enabled/Disabled)
  • trap: BistateActionInput
  • # Description of role
  • description: String
  • # Access Control (VLAN) action. -1=None, 0=Deny, 4095=Permit, VLAN ID [1-4094], or
  • # PVI VLAN name. Containment/PVI VLAN must exist in domain or error is returned.
  • vlan: String
  • # System log action (Enabled/Disabled)
  • syslog: BistateActionInput
  • # Disable port action (Enabled/Disabled)
  • disablePort: BistateActionInput
  • # AP Aware action (Enabled/Disabled)
  • portAuthOverride: BistateActionInput
  • # Set the role's current list of service groups to the one specified.
  • serviceGroups: [PolicyServiceGroupDataIdentifierInput]
  • # Service ID to associate to VLAN. Only valid when access control is set to
  • # contain to VLAN (1-4094). Value of 1-xxx or PVI Service ID name. Only PVI
  • # Service IDs are valid when a PVI VLAN is in use, only direct values are valid
  • # when non PVI VLAN is in use. Pass -1 to clear.
  • nsi: String
  • }