fortinet.fortimanager.fmgr_user_group_dynamicmapping module – Configure user groups.
Note
This module is part of the fortinet.fortimanager collection (version 2.7.0).
You might already have this collection installed if you are using the ansible
package.
It is not included in ansible-core
.
To check whether it is installed, run ansible-galaxy collection list
.
To install it, use: ansible-galaxy collection install fortinet.fortimanager
.
To use it in a playbook, specify: fortinet.fortimanager.fmgr_user_group_dynamicmapping
.
New in fortinet.fortimanager 2.1.0
Synopsis
This module is able to configure a FortiManager device.
Examples include all parameters and values which need to be adjusted to data sources before usage.
Parameters
Parameter |
Comments |
---|---|
The token to access FortiManager without using username and password. |
|
The parameter (adom) in requested url. |
|
Only set to True when module schema diffs with FortiManager API structure, module continues to execute without validating parameters. Choices:
|
|
Enable/Disable logging for task. Choices:
|
|
Authenticate Ansible client with forticloud API access token. |
|
The parameter (group) in requested url. |
|
The overridden method for the underlying Json RPC request. Choices:
|
|
The rc codes list with which the conditions to fail will be overriden. |
|
The rc codes list with which the conditions to succeed will be overriden. |
|
The directive to create, update or delete an object. Choices:
|
|
The top level parameters set. |
|
Scope. |
|
Name. |
|
Vdom. |
|
Deprecated, please rename it to auth_concurrent_override. Enable/disable overriding the global number of concurrent authen… Choices:
|
|
Deprecated, please rename it to auth_concurrent_value. Maximum number of concurrent authenticated connections per user |
|
Authentication timeout in minutes for this user group. |
|
Set the action for the company guest user field. Choices:
|
|
Enable/disable the guest user email address field. Choices:
|
|
Time in seconds before guest user accounts expire |
|
Deprecated, please rename it to expire_type. Determine when the expiration countdown begins. Choices:
|
|
Deprecated, please rename it to group_type. Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Choices:
|
|
Guest. |
|
Comment. |
|
Set the action for the company guest user field. |
|
Email. |
|
Expire time. |
|
Group. |
|
Guest ID. |
|
Deprecated, please rename it to mobile_phone. Mobile phone. |
|
Guest name. |
|
(list) Guest password. |
|
Set the action for the sponsor guest user field. |
|
Deprecated, please rename it to user_id. Guest ID. |
|
Deprecated, please rename it to http_digest_realm. Realm attribute for MD5-digest authentication. |
|
Group ID. |
|
Deprecated, please rename it to ldap_memberof. Ldap memberof. |
|
Deprecated, please rename it to logic_type. Logic type. Choices:
|
|
Match. |
|
Gui meta. |
|
Deprecated, please rename it to group_name. Name of matching user or group on remote authentication server. |
|
ID. |
|
Deprecated, please rename it to server_name. Name of remote auth server. |
|
Deprecated, please rename it to max_accounts. Maximum number of guest accounts that can be created for this group |
|
(list or str) Names of users, peers, LDAP severs, or RADIUS servers to add to the user group. |
|
Deprecated, please rename it to mobile_phone. Enable/disable the guest user mobile phone number field. Choices:
|
|
Deprecated, please rename it to multiple_guest_add. Enable/disable addition of multiple guests. Choices:
|
|
Guest user password type. Choices:
|
|
Deprecated, please rename it to redir_url. Redir url. |
|
Deprecated, please rename it to sms_custom_server. SMS server. |
|
Deprecated, please rename it to sms_server. Send SMS through FortiGuard or other external server. Choices:
|
|
Set the action for the sponsor guest user field. Choices:
|
|
(list or str) Deprecated, please rename it to sslvpn_bookmarks_group. Sslvpn bookmarks group. |
|
Deprecated, please rename it to sslvpn_cache_cleaner. Sslvpn cache cleaner. Choices:
|
|
Deprecated, please rename it to sslvpn_client_check. Sslvpn client check. Choices:
|
|
Deprecated, please rename it to sslvpn_ftp. Sslvpn ftp. Choices:
|
|
Deprecated, please rename it to sslvpn_http. Sslvpn http. Choices:
|
|
Deprecated, please rename it to sslvpn_os_check. Sslvpn os check. Choices:
|
|
Deprecated, please rename it to sslvpn_os_check_list. Sslvpn os check list. |
|
Action. Choices:
|
|
Deprecated, please rename it to latest_patch_level. Latest patch level. |
|
Name. |
|
Tolerance. |
|
(list or str) Deprecated, please rename it to sslvpn_portal. Sslvpn portal. |
|
Deprecated, please rename it to sslvpn_portal_heading. Sslvpn portal heading. |
|
Deprecated, please rename it to sslvpn_rdp. Sslvpn rdp. Choices:
|
|
Deprecated, please rename it to sslvpn_samba. Sslvpn samba. Choices:
|
|
Deprecated, please rename it to sslvpn_split_tunneling. Sslvpn split tunneling. Choices:
|
|
Deprecated, please rename it to sslvpn_ssh. Sslvpn ssh. Choices:
|
|
Deprecated, please rename it to sslvpn_telnet. Sslvpn telnet. Choices:
|
|
Deprecated, please rename it to sslvpn_tunnel. Sslvpn tunnel. Choices:
|
|
Deprecated, please rename it to sslvpn_tunnel_endip. Sslvpn tunnel endip. |
|
Deprecated, please rename it to sslvpn_tunnel_ip_mode. Sslvpn tunnel ip mode. Choices:
|
|
Deprecated, please rename it to sslvpn_tunnel_startip. Sslvpn tunnel startip. |
|
Deprecated, please rename it to sslvpn_virtual_desktop. Sslvpn virtual desktop. Choices:
|
|
Deprecated, please rename it to sslvpn_vnc. Sslvpn vnc. Choices:
|
|
Deprecated, please rename it to sslvpn_webapp. Sslvpn webapp. Choices:
|
|
Deprecated, please rename it to sso_attribute_value. Name of the RADIUS user group that this local user group represents. |
|
Deprecated, please rename it to user_id. Guest user ID type. Choices:
|
|
Deprecated, please rename it to user_name. Enable/disable the guest user name entry. Choices:
|
|
The adom to lock for FortiManager running in workspace mode, the value can be global and others including root. |
|
The maximum time in seconds to wait for other user to release the workspace lock. Default: |
Notes
Note
Starting in version 2.4.0, all input arguments are named using the underscore naming convention (snake_case). Please change the arguments such as “var-name” to “var_name”. Old argument names are still available yet you will receive deprecation warnings. You can ignore this warning by setting deprecation_warnings=False in ansible.cfg.
Running in workspace locking mode is supported in this FortiManager module, the top level parameters workspace_locking_adom and workspace_locking_timeout help do the work.
To create or update an object, use state present directive.
To delete an object, use state absent directive.
Normally, running one module can fail when a non-zero rc is returned. you can also override the conditions to fail or succeed with parameters rc_failed and rc_succeeded
Examples
- name: Example playbook (generated based on argument schema)
hosts: fortimanagers
connection: httpapi
vars:
ansible_httpapi_use_ssl: true
ansible_httpapi_validate_certs: false
ansible_httpapi_port: 443
tasks:
- name: Configure user groups.
fortinet.fortimanager.fmgr_user_group_dynamicmapping:
# bypass_validation: false
workspace_locking_adom: <value in [global, custom adom including root]>
workspace_locking_timeout: 300
# rc_succeeded: [0, -2, -3, ...]
# rc_failed: [-2, -3, ...]
adom: <your own value>
group: <your own value>
state: present # <value in [present, absent]>
user_group_dynamicmapping:
_scope:
-
name: <string>
vdom: <string>
auth_concurrent_override: <value in [disable, enable]>
auth_concurrent_value: <integer>
authtimeout: <integer>
company: <value in [optional, mandatory, disabled]>
email: <value in [disable, enable]>
expire: <integer>
expire_type: <value in [immediately, first-successful-login]>
group_type: <value in [firewall, directory-service, fsso-service, ...]>
guest:
-
comment: <string>
company: <string>
email: <string>
expiration: <string>
group: <string>
id: <integer>
mobile_phone: <string>
name: <string>
password: <list or string>
sponsor: <string>
user_id: <string>
http_digest_realm: <string>
id: <integer>
ldap_memberof: <string>
logic_type: <value in [or, and]>
match:
-
_gui_meta: <string>
group_name: <string>
id: <integer>
server_name: <string>
max_accounts: <integer>
member: <list or string>
mobile_phone: <value in [disable, enable]>
multiple_guest_add: <value in [disable, enable]>
password: <value in [auto-generate, specify, disable]>
redir_url: <string>
sms_custom_server: <string>
sms_server: <value in [fortiguard, custom]>
sponsor: <value in [optional, mandatory, disabled]>
sslvpn_bookmarks_group: <list or string>
sslvpn_cache_cleaner: <value in [disable, enable]>
sslvpn_client_check:
- forticlient
- forticlient-av
- forticlient-fw
- 3rdAV
- 3rdFW
sslvpn_ftp: <value in [disable, enable]>
sslvpn_http: <value in [disable, enable]>
sslvpn_os_check: <value in [disable, enable]>
sslvpn_os_check_list:
action: <value in [allow, check-up-to-date, deny]>
latest_patch_level: <string>
name: <string>
tolerance: <integer>
sslvpn_portal: <list or string>
sslvpn_portal_heading: <string>
sslvpn_rdp: <value in [disable, enable]>
sslvpn_samba: <value in [disable, enable]>
sslvpn_split_tunneling: <value in [disable, enable]>
sslvpn_ssh: <value in [disable, enable]>
sslvpn_telnet: <value in [disable, enable]>
sslvpn_tunnel: <value in [disable, enable]>
sslvpn_tunnel_endip: <string>
sslvpn_tunnel_ip_mode: <value in [range, usrgrp]>
sslvpn_tunnel_startip: <string>
sslvpn_virtual_desktop: <value in [disable, enable]>
sslvpn_vnc: <value in [disable, enable]>
sslvpn_webapp: <value in [disable, enable]>
sso_attribute_value: <string>
user_id: <value in [email, auto-generate, specify]>
user_name: <value in [disable, enable]>
Return Values
Common return values are documented here, the following are the fields unique to this module:
Key |
Description |
---|---|
The result of the request. Returned: always |
|
The full url requested. Returned: always Sample: |
|
The status of api request. Returned: always Sample: |
|
The api response. Returned: always |
|
The descriptive message of the api response. Returned: always Sample: |
|
The information of the target system. Returned: always |
|
The status the request. Returned: always Sample: |
|
Warning if the parameters used in the playbook are not supported by the current FortiManager version. Returned: complex |