{"type":"api","title":"Create Active Directory Group in CDO Tenant","meta":{"id":"/apps/pubhub/media/cdo-api-documentation/fc8bfc913cc2128845f44d83c8a9a847d15ff9c1/9b0e4c9a-48cb-3530-a00a-1f32fbf2438c","info":{"title":"CDO API","description":"Use the documentation to explore the endpoints CDO has to offer","contact":{"name":"CDO TAC","email":"cdo.tac@cisco.com"},"version":"1.4.0"},"tags":[{"name":"Cloud-delivered FMC","x-displayName":"Cloud-delivered FMC"},{"name":"Remote Access Monitoring","x-displayName":"Remote Access Monitoring"},{"name":"Users","x-displayName":"Users"},{"name":"Search","x-displayName":"Search"},{"name":"ASA Access Rules","x-displayName":"ASA Access Rules"},{"name":"Access Groups","x-displayName":"Access Groups"},{"name":"MSP","x-displayName":"MSP"},{"name":"Inventory","x-displayName":"Inventory"},{"name":"Connectors","x-displayName":"Connectors"},{"name":"Command Line Interface","x-displayName":"Command Line Interface"},{"name":"Change Requests","x-displayName":"Change Requests"},{"name":"AI Assistant","x-displayName":"AI Assistant"},{"name":"Tenant Management","x-displayName":"Tenant Management"},{"name":"Transactions","x-displayName":"Transactions"},{"name":"Meta","x-displayName":"Meta"},{"name":"Changelogs","x-displayName":"Changelogs"},{"name":"Audit Logs","x-displayName":"Audit Logs"},{"name":"Object Management","x-displayName":"Object Management"}],"openapi":"3.0.1","servers":[{"url":"https://edge.us.cdo.cisco.com/api/rest","description":"US"},{"url":"https://edge.eu.cdo.cisco.com/api/rest","description":"EU"},{"url":"https://edge.apj.cdo.cisco.com/api/rest","description":"APJ"},{"url":"https://edge.aus.cdo.cisco.com/api/rest","description":"AUS"},{"url":"https://edge.in.cdo.cisco.com/api/rest","description":"IN"},{"url":"https://edge.staging.cdo.cisco.com/api/rest","description":"Staging"},{"url":"https://edge.scale.cdo.cisco.com/api/rest","description":"Scale"},{"url":"https://edge.ci.cdo.cisco.com/api/rest","description":"CI"}],"securitySchemes":{"bearerAuth":{"type":"http","scheme":"bearer","bearerFormat":"JWT"}}},"spec":{"tags":["Users"],"summary":"Create Active Directory Group in CDO Tenant","description":"Create an Active Directory Group in the CDO tenant.","operationId":"createActiveDirectoryGroup","requestBody":{"content":{"application/json":{"schema":{"required":["groupIdentifier","issuerUrl","name"],"type":"object","properties":{"name":{"type":"string","description":"The name of the Active Directory Group. CDO does not support special characters for this field.","example":"myusername"},"role":{"type":"string","description":"This determines the role for all the users included in this Active Directory Group.","example":"ROLE_ADMIN"},"groupIdentifier":{"type":"string","description":"The unique identifier of the Active Directory Group in your Identity Provider (IdP).","example":"7131daad-e813-4b8f-8f42-be1e241e8cdb"},"issuerUrl":{"type":"string","description":"The Identity Provider (IdP) URL, which Cisco Defense Orchestrator will use to validate SAML assertions during the sign-in process.","example":"https://access.example.com/saml2/idp/metadata.php"},"notes":{"type":"string","description":"Any notes that are applicable to this Active Directory Group.","example":"This is an example note on the Active Directory Group."}},"$$ref":"#/components/schemas/ActiveDirectoryGroupCreateOrUpdateInput"}}},"required":true},"responses":{"201":{"description":"Active Directory Group object","content":{"application/json":{"schema":{"type":"object","properties":{"uid":{"type":"string","description":"The unique identifier of the Active Directory Group in CDO.","format":"uuid","example":"7131daad-e813-4b8f-8f42-be1e241e8cdb"},"name":{"type":"string","description":"The name of the Active Directory Group. CDO does not support special characters for this field.","example":"myusername"},"role":{"type":"string","description":"The role of the user this token belongs to. The user can be API-only or a human.","enum":["ROLE_ADMIN","ROLE_SUPER_ADMIN","ROLE_READ_ONLY","ROLE_DEPLOY_ONLY","ROLE_EDIT_ONLY","ROLE_VPN_SESSIONS_MANAGER","ROLE_FWAAS"],"$$ref":"#/components/schemas/UserRole"},"groupIdentifier":{"type":"string","description":"The unique identifier of the Active Directory Group in your Identity Provider (IdP).","example":"7131daad-e813-4b8f-8f42-be1e241e8cdb"},"issuerUrl":{"type":"string","description":"The Identity Provider (IdP) URL, which Cisco Defense Orchestrator will use to validate SAML assertions during the sign-in process.","example":"https://access.example.com/saml2/idp/metadata.php"},"notes":{"type":"string","description":"Any notes that are applicable to this Active Directory Group.","example":"This is an example note on the Active Directory Group."}},"$$ref":"#/components/schemas/ActiveDirectoryGroup"}}}},"400":{"description":"Invalid input provided. Check the response for details.","content":{"application/json":{"schema":{"type":"object","properties":{"errorCode":{"type":"string","description":"A unique error code that describes the error.","example":"INVALID_INPUT","enum":["INVALID_INPUT","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","METHOD_NOT_ALLOWED","CONFLICT","TOO_MANY_REQUESTS","CANNOT_DELETE_CDFMC_MANAGED_FTD","CANNOT_DELETE_ONPREM_FMC_MANAGED_FTD","CANNOT_DELETE_ONPREM_FMC_MANAGED_FIREPOWER","CANNOT_DELETE_CDFMC","SERVER_ERROR","PROXY_ERROR","BAD_REQUEST"]},"errorMsg":{"type":"string","description":"A human-readable error description in English.","example":"sample error"},"details":{"type":"object","additionalProperties":{"type":"object","description":"Additional details, if any, on the error","example":{}},"description":"Additional details, if any, on the error","example":{}}},"$$ref":"#/components/schemas/CommonApiError"}}},"$$ref":"#/components/responses/http400BadRequest"},"401":{"description":"Request not authorized.","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"A human-readable error description in English.","example":"invalid_token"},"errorDescription":{"type":"string","description":"A human-readable error description in English.","example":"Your token is invalid"}},"$$ref":"#/components/schemas/AuthenticationError"}}},"$$ref":"#/components/responses/http401Unauthorised"},"403":{"description":"User does not have sufficient privileges to perform this operation.","content":{"application/json":{"schema":{"type":"object","properties":{"errorCode":{"type":"string","description":"A unique error code that describes the error.","example":"INVALID_INPUT","enum":["INVALID_INPUT","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","METHOD_NOT_ALLOWED","CONFLICT","TOO_MANY_REQUESTS","CANNOT_DELETE_CDFMC_MANAGED_FTD","CANNOT_DELETE_ONPREM_FMC_MANAGED_FTD","CANNOT_DELETE_ONPREM_FMC_MANAGED_FIREPOWER","CANNOT_DELETE_CDFMC","SERVER_ERROR","PROXY_ERROR","BAD_REQUEST"]},"errorMsg":{"type":"string","description":"A human-readable error description in English.","example":"sample error"},"details":{"type":"object","additionalProperties":{"type":"object","description":"Additional details, if any, on the error","example":{}},"description":"Additional details, if any, on the error","example":{}}},"$$ref":"#/components/schemas/CommonApiError"}}},"$$ref":"#/components/responses/http403Forbidden"},"500":{"description":"Internal server error.","content":{"application/json":{"schema":{"type":"object","properties":{"errorCode":{"type":"string","description":"A unique error code that describes the error.","example":"INVALID_INPUT","enum":["INVALID_INPUT","UNAUTHORIZED","FORBIDDEN","NOT_FOUND","METHOD_NOT_ALLOWED","CONFLICT","TOO_MANY_REQUESTS","CANNOT_DELETE_CDFMC_MANAGED_FTD","CANNOT_DELETE_ONPREM_FMC_MANAGED_FTD","CANNOT_DELETE_ONPREM_FMC_MANAGED_FIREPOWER","CANNOT_DELETE_CDFMC","SERVER_ERROR","PROXY_ERROR","BAD_REQUEST"]},"errorMsg":{"type":"string","description":"A human-readable error description in English.","example":"sample error"},"details":{"type":"object","additionalProperties":{"type":"object","description":"Additional details, if any, on the error","example":{}},"description":"Additional details, if any, on the error","example":{}}},"$$ref":"#/components/schemas/CommonApiError"}}}}},"security":[{"bearerAuth":[]}],"__originalOperationId":"createActiveDirectoryGroup","method":"post","path":"/v1/users/groups"}}