Create Multiple Group Policy Model - Security Cloud Control Firewall Manager API Documentation

{"type":"api","title":"Create Multiple Group Policy Model","meta":{"id":"/apps/pubhub/media/cdo-api-documentation/ee9bdf946673e45c4f256a22e0a754e29a9b2098/54f4ba30-7fe2-3433-bbd5-a4d458aee37e","info":{"title":"Cisco Cloud-delivered Firewall Management Center (cdFMC) API","version":"1.15.0","description":"Use the documentation to explore the endpoints the cdFMC has to offer","contact":{"name":"Cisco Firepower TAC","email":"ngfw-support@cisco.com"}},"tags":[{"name":"Analysis"},{"name":"Audit"},{"name":"Backup"},{"name":"Change Management"},{"name":"Chassis"},{"name":"Deployment"},{"name":"Device Clusters"},{"name":"Device Groups"},{"name":"Device HA Pairs"},{"name":"Devices"},{"name":"Health"},{"name":"Integration"},{"name":"Intelligence"},{"name":"License"},{"name":"Network Map"},{"name":"Object"},{"name":"Policy"},{"name":"Policy Assignments"},{"name":"Search"},{"name":"Status"},{"name":"System Configuration"},{"name":"System Information"},{"name":"Templates"},{"name":"Troubleshoot"},{"name":"Updates"},{"name":"Users"}],"openapi":"3.0.1","servers":[{"url":"https://api.us.security.cisco.com/firewall","description":"US"},{"url":"https://api.eu.security.cisco.com/firewall","description":"EU"},{"url":"https://api.apj.security.cisco.com/firewall","description":"APJ"},{"url":"https://api.au.security.cisco.com/firewall","description":"AUS"},{"url":"https://api.in.security.cisco.com/firewall","description":"IN"},{"url":"https://api.int.security.cisco.com/firewall","description":"Staging"},{"url":"https://scale.manage.security.cisco.com/api/rest","description":"Scale"},{"url":"https://ci.manage.security.cisco.com/api/rest","description":"CI"},{"url":"https://manage.stg.secure.cisco/api/rest","description":"Stgf9"}],"securitySchemes":{"bearerAuth":{"bearerFormat":"JWT","scheme":"bearer","type":"http"}}},"spec":{"deprecated":false,"description":"**Create a VPN group policy. _Check the response section for applicable examples (if any)._**","operationId":"createMultipleGroupPolicyModel","parameters":[{"description":"Enables bulk create for Group Policy object.","in":"query","name":"bulk","required":false,"schema":{"type":"boolean"}},{"description":"UUID of the ticket for tracking the configuration changes.","in":"header","name":"ticket-id","required":false,"schema":{"type":"string"}},{"name":"domainUUID","description":"Domain UUID","in":"path","required":true,"schema":{"type":"string"},"$$ref":"#/components/parameters/domainUUID"}],"requestBody":{"content":{"application/json":{"examples":{"Example 1 : POST /fmc_config/v1/domain/DomainUUID/object/grouppolicies ( POST operation for group policy object )":{"value":{"advancedSettings":{"sessionSettings":{"maxConnectionTimeAlertInterval":1,"maxConnectionTimeout":-1,"simultaneousLoginPerUser":3,"vpnIdleTimeout":30,"vpnIdleTimeoutAlertInterval":1}},"anyConnectSettings":{"connectionSettings":{"bypassUnsupportProtocol":false,"clientDPDInterval":30,"enableClientDPD":true,"enableGatewayDPD":true,"enableKeepAliveMessages":true,"enableSSLRekey":false,"gatewayDPDInterval":30,"keepAliveMessageInterval":20,"rekeyInterval":4,"rekeyMethod":"NEW_TUNNEL"},"customAttributes":[{"anyConnectAttribute":"PER_APP_VPN","customAttributeObject":{"id":"00505681-162B-0ed3-0000-966367641621","name":"custom_attr_2","type":"AnyConnectCustomAttribute"}}],"sslSettings":{"dtlsCompression":"DISABLED","ignoreDFBit":false,"mtuSize":1406,"sslCompression":"DISABLED"}},"description":"description","enableIPsecIKEv2Protocol":true,"enableSSLProtocol":true,"generalSettings":{"addressAssignment":{"dhcpScope":{"id":"00505681-162B-0ed3-0000-536870912003","name":"obj","type":"Network"},"ipv4LocalAddressPool":[{"id":"00505681-162B-0ed3-0000-476741369859","name":"ipv4_pool_1","type":"IPv4AddressPool"}]},"banner":"banner","primaryDNSServer":{"id":"00505681-162B-0ed3-0000-536870912021","name":"host_1","type":"Host"},"primaryWINSServer":{"id":"00505681-162B-0ed3-0000-536870912057","name":"host_3","type":"Host"},"secondaryDNSServer":{"id":"00505681-162B-0ed3-0000-536870912039","name":"host_2","type":"Host"},"secondaryWINSServer":{"id":"00505681-162B-0ed3-0000-536870912075","name":"host_4","type":"Host"},"splitTunnelSettings":{"ipv4SplitTunnelPolicy":"TUNNEL_ALL","ipv6SplitTunnelPolicy":"TUNNEL_ALL","splitDNSRequestPolicy":"USE_SPLIT_TUNNEL_SETTING"}},"name":"rest_1","type":"GroupPolicy"}}},"schema":{"type":"object","description":"Model representing the Group Policy configuration for RA VPN.","properties":{"advancedSettings":{"type":"object","description":"Model representiing the Configurations for Advanced Settings for Group Policy.","properties":{"restrictVPNToVLANId":{"description":"Optional. Specifies the egress VLAN for remote access VPN sessions assigned to this group policy. The range is 1-4094.There is no default value.","format":"int32","type":"integer"},"sessionSettings":{"description":"Optional. Configures Session paramaters for VPN","type":"object","properties":{"accessHours":{"description":"Optional. Specifies the range of time this group policy is available to be applied to a remote access user","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"maxConnectionTimeAlertInterval":{"description":"Optional. Specifies the time at which a session timeout alert message is displayed to the user. The default alert interval is one minute. The range is from 1 - 30 minutes.","format":"int32","type":"integer"},"maxConnectionTimeout":{"description":"Optional. Specifies a maximum amount of time for VPN connections. Range is 1-35791394 minutes. The default value for this attribute is null and its behaviour is unlimited time allowed per connection.","format":"int32","type":"integer"},"simultaneousLoginPerUser":{"description":"Optional. Specifies the number of simultaneous logins allowed for any user. The default value is 3. The range is 0-2147483647","format":"int32","type":"integer"},"vpnIdleTimeout":{"description":"Optional. Specifies a VPN idle timeout period. If there is no communication activity on the connection in this period, the ASA terminates the connection. The minimum time is 1 minute, the maximum time is 35791394 minutes, and the default is 30 minutes.","format":"int32","type":"integer"},"vpnIdleTimeoutAlertInterval":{"description":"Optional. Specifies the time at which an idle timeout alert message is displayed to the user. This alert message tells users how many minutes they have left until their VPN session will be disconnected due to inactivity. The default alert interval is one minute. The range is from 1 - 30 minutes.","format":"int32","type":"integer"}},"$$ref":"#/components/schemas/IGroupPolicySessionSettingsModel"},"vpnTrafficFilterACL":{"description":"Optional. Represents vpn-filter acl to post-decrypted traffic after it exits a tunnel and pre-encrypted traffic before it enters a tunnel. The ACL should be configured with the client assigned IP addresses as source and local network ip as destination in ACL.","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicyAdvancedSettingsModel"},"anyConnectSettings":{"type":"object","description":"Model representing the Configurations for AnyConnect Client.","properties":{"clientModules":{"description":"Optional. Represents specified Anyconnect modules to be downloaded when VPN user downloads Anyconnect Client","items":{"type":"object","description":"Model representing the File configurations for AnyConnect Client Modules","properties":{"enableModuleDownload":{"description":"Specifies if the module has to be downloaded. Default is False","type":"boolean"},"moduleProfile":{"description":"Represents VPN Client Profile Object","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"moduleType":{"description":"Specifies the type of the Client module package","enum":["AMP_ENABLER","FEEDBACK","ISE_POSTURE","NETWORK_ACCESS_MANAGER","NETWORK_VISIBILITY","UMBRELLA_ROAMING","WEB_SECURITY","START_BEFORE_LOGIN","DART"],"type":"string"}},"$$ref":"#/components/schemas/IGroupPolicyClientModulesModel"},"type":"array"},"connectionSettings":{"description":"Optional. Configures the connection parameters to be applied on the VPN connectivity.","type":"object","properties":{"bypassUnsupportProtocol":{"description":"Optional. Enables to determine whether to drop network traffic for which the FTD did not assign an IP address,or allow that traffic to bypass the FTD and be sent from the client unencrypted or in the clear. Default is False","type":"boolean"},"clientDPDInterval":{"description":"Optional. Specifies the DDPD interval from 5 to 3600 seconds, with which the client performs DPD. Default is 30 sec","format":"int32","type":"integer"},"clientFirewallPrivateNetworkRules":{"description":"Optional. If the split tunnel is configured the private network rule is the rule applied to the VPN virtual adapter interface on the client","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"clientFirewallPublicNetworkRules":{"description":"Optional. If the split tunnel is configured, the public network rule is the rule applied to other non-vpn interfaces on the client.","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"enableClientDPD":{"description":"Optional. Enables client to quickly detect a condition where the peer is not responding, and the connection has failed.","type":"boolean"},"enableGatewayDPD":{"description":"Optional. Enables that the security appliance (gateway) can quickly detect a condition where the peer is not responding, and the connection has failed.","type":"boolean"},"enableKeepAliveMessages":{"description":"Optional. Enables connection through a proxy, firewall, or NAT device remains open. Default is True","type":"boolean"},"enableSSLRekey":{"type":"boolean"},"gatewayDPDInterval":{"description":"Optional. When enableGatewayDPD is enabled, interval is specified from 5 to 3600 seconds, with which the security appliance performs gateway dead peer detection.Default is 30 secs","format":"int32","type":"integer"},"keepAliveMessageInterval":{"description":"Optional.Specifies the interval for Keep-Alive messsage. Default is 20 seconds. Valid range is from 15 - 600 seconds.","format":"int32","type":"integer"},"rekeyInterval":{"description":"Optional. Specifies the number of minutes from the start of the session until the re-key takes place. Range is 4-10080. Default is 4 minutes","format":"int32","type":"integer"},"rekeyMethod":{"description":"Optional. If SSL rekey is enabled, specifies if new tunnel has to be established or existing one has to be renegotiated. Default is NEW_TUNNEL","enum":["NEW_TUNNEL","EXISTING_TUNNEL"],"type":"string"}},"$$ref":"#/components/schemas/IGroupPolicyConnectionSettingsModel"},"customAttributes":{"items":{"type":"object","description":"Model representing the configuration of Custom Attributes of the Group Policy","properties":{"anyConnectAttribute":{"description":"Represents values of either (PER_APP_VPN|ALLOW_DEFER_UPDATE|DYNAMIC_SPLIT_TUNNELING|CUSTOM_TYPE) specifying type of AnyConnect custom attribute","type":"string"},"customAttributeObject":{"description":"Represents AnyConnect custom attribute object of selected type","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicyCustomAttributesModel"},"type":"array"},"managementProfile":{"description":"Optional. Represents VPN Management Profile Object whose filetype is ANYCONNECT_VPN_PROFILE","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"sslSettings":{"description":"Optional. Configures SSL Settings parameters to be used when connecting to the Client.","type":"object","properties":{"dtlsCompression":{"description":"Specifies DTLS Compression method (DISABLED,LZS). Default is DISABLED","enum":["DISABLED","LZS"],"type":"string"},"ignoreDFBit":{"description":"Optional. Specifies to ignore the Don't Fragment (DF) bit in packets that need fragmentation.Allows the forced fragmentation of packets that have the DF bit set, allowing them to pass through the tunnel. Default is False","type":"boolean"},"mtuSize":{"description":"Optional. Specifies the maximum transmission unit (MTU) size for SSL VPN connections established by the Cisco AnyConnect VPN Client.Default is 1406 Bytes, valid range is 576 to 1462 Bytes.","format":"int32","type":"integer"},"sslCompression":{"description":"Specifies SSL Compression method (DEFLATE,DISABLED,LZS). Default is DISABLED","enum":["DISABLED","DEFLATE","LZS"],"type":"string"}},"$$ref":"#/components/schemas/IGroupPolicySSLSettingsModel"},"vpnClientProfile":{"description":"Optional. Represents VPN Client Profile Object whose filetype is ANYCONNECT_VPN_PROFILE","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicyAnyConnectSettingsModel"},"description":{"description":"Represents the Group Policy configuration for RA VPN. It is a collation of Attribute and value pairs that determines parameters for the functionality of RA VPN","type":"string"},"enableIPsecIKEv2Protocol":{"description":"Enable IPSec IKEv2 type of Remote Access VPN tunnel that can be used when applying this group policy","type":"boolean"},"enableSSLProtocol":{"description":"Enable SSL type of Remote Access VPN tunnel that can be used when applying this group policy","type":"boolean"},"generalSettings":{"type":"object","description":"Model represents General Settings of a Group Policy","properties":{"addressAssignment":{"description":"Optional. Represents Address Assignment details that will be assigned to the endhost","type":"object","properties":{"defaultDomainName":{"description":"Optional. Specifies the name of the default domain","type":"string"},"dhcpScope":{"description":"Optional. Represents DHCP Network for this group.Choose or create a Network Object containing the IPv4 address of the DHCP Network for this group.","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"ipv4LocalAddressPool":{"description":"Optional. Represents IPv4 address assignment that is applied based on address pools that are specific to user-groups in Remote Access VPN","items":{"type":"object","description":"Contains reference information.","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"type":"array"}},"$$ref":"#/components/schemas/IGroupPolicyAddressAssignmentModel"},"banner":{"description":"Optional. Specifies the banner text to present to users at login","type":"string"},"primaryDNSServer":{"description":"Optional. Represents Network Object containing Primary DNS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"primaryWINSServer":{"description":"Optional. Represents Network Object containing Primary WINS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"secondaryDNSServer":{"description":"Optional. Represents Network Object containing Secondary DNS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"secondaryWINSServer":{"description":"Optional. Represents Network Object containing Secondary WINS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"splitTunnelSettings":{"description":"Optional. Represents Split tunneling directs some network traffic through the VPN tunnel (encrypted) and the remaining network traffic outside the VPN tunnel (unencrypted)","type":"object","properties":{"ipv4SplitTunnelPolicy":{"enum":["TUNNEL_ALL","TUNNEL_SPECIFIED","EXCLUDE_SPECIFIED_OVER_TUNNEL"],"type":"string"},"ipv6SplitTunnelPolicy":{"enum":["TUNNEL_ALL","TUNNEL_SPECIFIED","EXCLUDE_SPECIFIED_OVER_TUNNEL"],"type":"string"},"splitDNSDomainList":{"description":"Optional. Specifies List of domain names applicable for splitDNS configuration","type":"string"},"splitDNSRequestPolicy":{"enum":["USE_SPLIT_TUNNEL_SETTING","TUNNEL_ALL","TUNNEL_SPECIFIED_DOMAINS"],"type":"string"},"splitTunnelACL":{"description":"If Split tunnel option is selected as TUNNEL_SPECIFIED or EXCLUDE_SPECIFIED_OVER_TUNNEL, splitTunnelACL is Mandatory. Standard access list or Extended Access List specifies matching traffic","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicySplitTunnelSettingsModel"}},"$$ref":"#/components/schemas/IGroupPolicyGeneralSettingsModel"},"id":{"description":"Specifies Unique identifier (UUID) representing the Group Policy object","type":"string"},"links":{"description":"Specifies links to this object.","type":"object","properties":{"parent":{"type":"string"},"self":{"type":"string"}},"$$ref":"#/components/schemas/Links"},"metadata":{"description":"Object representing metadata attributes for the Group Policy","type":"object","properties":{"domain":{"description":"Defines the domains this instance belongs to (if applicable).","type":"object","properties":{"id":{"description":"Unique UUID of this domain","type":"string"},"links":{"description":"Links to the domain resource URLs.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"Name of the domain.","type":"string"},"type":{"description":"Domain type definition (fixed).","type":"string"},"uuid":{"type":"string"}},"$$ref":"#/components/schemas/Domain"},"isLocked":{"type":"boolean"},"lastUser":{"description":"The last user who modified this instance.","type":"object","properties":{"id":{"description":"The unique UUID of the user","type":"string"},"links":{"description":"Contains the self referencing links to this resource","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"Name of the user.","type":"string"},"type":{"description":"The user type (fixed).","type":"string"}},"$$ref":"#/components/schemas/MetadataUser"},"matches":{"items":{"type":"string"},"type":"array"},"readOnly":{"description":"Details regarding the read only status of this instance","type":"object","properties":{"reason":{"description":"Reason the resource is read only - SYSTEM (if it is system defined), RBAC (if user RBAC permissions make it read only) or DOMAIN (if resource is read only in current domain).","enum":["RBAC","SYSTEM","DOMAIN"],"type":"string"},"state":{"description":"True if this resource us read only and false otherwise.","type":"boolean"}},"$$ref":"#/components/schemas/ReadOnly"},"timestamp":{"description":"The last updated timestamp.","format":"int32","type":"integer"}},"$$ref":"#/components/schemas/Metadata"},"name":{"description":" Identifies the Group Policy Object so that can be referred to other configurations","type":"string"},"type":{"description":"Specifies unique type of the Group Policy.","type":"string"},"version":{"type":"string"}},"$$ref":"#/components/schemas/GroupPolicyModel"}}},"description":"Input representation of Group Policy object.","required":true},"responses":{"201":{"content":{"application/json":{"examples":{"Example 1 : POST /fmc_config/v1/domain/DomainUUID/object/grouppolicies ( POST operation for group policy object )":{"value":{"advancedSettings":{"restrictVPNToVLANId":5,"sessionSettings":{"accessHours":{"id":"accessHoursUUID","name":"timerangehours","type":"TimeRange"},"maxConnectionTimeAlertInterval":1,"maxConnectionTimeout":null,"simultaneousLoginPerUser":3,"vpnIdleTimeout":30,"vpnIdleTimeoutAlertInterval":1},"vpnTrafficFilterACL":{"id":"vpnTrafficFilterACLUUID","name":"vpnTrafficfilter","type":"ExtendedAccessList"}},"anyConnectSettings":{"clientModules":[{"enableModuleDownload":false,"moduleProfile":{"id":"vpnClientProfileUUID","name":"ampenabler","type":"AnyconnectFile"},"moduleType":"AMP_ENABLER"}],"connectionSettings":{"bypassUnsupportProtocol":false,"clientDPDInterval":30,"clientFirewallPrivateNetworkRules":{"id":"clientFirewallPrivateNetworkRulesUUID","name":"privateNetACL","type":"ExtendedAccessList"},"clientFirewallPublicNetworkRules":{"id":"clientFirewallPublicNetworkRulesUUID","name":"publicNetACL","type":"ExtendedAccessList"},"enableClientDPD":true,"enableGatewayDPD":true,"enableKeepAliveMessages":true,"enableSSLRekey":false,"gatewayDPDInterval":30,"keepAliveMessageInterval":20,"rekeyInterval":4,"rekeyMethod":"NEW_TUNNEL"},"customAttributes":[{"anyConnectAttribute":"PER_APP_VPN","customAttributeObject":{"id":"customAttributeObjectUUID","name":"customAttributeObjectName","type":"AnyConnectCustomAttribute"}}],"sslSettings":{"dtlsCompression":"DISABLED","ignoreDFBit":false,"mtuSize":1000,"sslCompression":"DISABLED"},"vpnClientProfile":{"id":"2d9d6bda-865a-11e8-8472-bb2ae5b3416b","name":"remoteaccessprofile","type":"AnyconnectFile"}},"description":"This is sample group policy","generalSettings":{"addressAssignment":{"defaultDomainName":"cisco.com","dhcpScope":{"id":"dhcpScopeUUID","name":"dhcpscope","type":"Network"},"ipv4LocalAddressPool":[{"id":"ipv4LocalAddressPoolUUID","name":"ipv4pool1","type":"Ipv4AddressPool"}]},"banner":"This is a sample Banner","primaryDNSServer":{"id":"primaryDNSServerUUID","name":"primarydns","type":"Network"},"primaryWINSServer":{"id":"primaryWINSServerUUID","name":"primarywins","type":"Network"},"secondaryDNSServer":{"id":"secondaryDNSServerUUID","name":"secondarydns","type":"Network"},"secondaryWINSServer":{"id":"secondaryWINSServerUUID","name":"secondarywins","type":"Network"},"splitTunnelSettings":{"ipv4SplitTunnelPolicy":"TUNNEL_ALL","ipv6SplitTunnelPolicy":"TUNNEL_ALL","splitDNSDomainList":"SplitACL","splitDNSRequestPolicy":"USE_SPLIT_TUNNEL_SETTING","splitTunnelACL":{"id":"splitTunnelACLUUID","name":"splitacl","type":"StandardAccessList|ExtendedAccessList"}}},"id":"f3b4fda4-1e03-11e8-b53e-e7bb7add7360","links":{"self":"https://fmcip/api/fmc_config/v1/domain/DomainUUID/object/grouppolicies/grouppolicyUUID"},"metadata":{},"name":"grouppolicy1","protocol":"SSL","type":"GroupPolicy"}}},"schema":{"type":"object","description":"Model representing the Group Policy configuration for RA VPN.","properties":{"advancedSettings":{"type":"object","description":"Model representiing the Configurations for Advanced Settings for Group Policy.","properties":{"restrictVPNToVLANId":{"description":"Optional. Specifies the egress VLAN for remote access VPN sessions assigned to this group policy. The range is 1-4094.There is no default value.","format":"int32","type":"integer"},"sessionSettings":{"description":"Optional. Configures Session paramaters for VPN","type":"object","properties":{"accessHours":{"description":"Optional. Specifies the range of time this group policy is available to be applied to a remote access user","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"maxConnectionTimeAlertInterval":{"description":"Optional. Specifies the time at which a session timeout alert message is displayed to the user. The default alert interval is one minute. The range is from 1 - 30 minutes.","format":"int32","type":"integer"},"maxConnectionTimeout":{"description":"Optional. Specifies a maximum amount of time for VPN connections. Range is 1-35791394 minutes. The default value for this attribute is null and its behaviour is unlimited time allowed per connection.","format":"int32","type":"integer"},"simultaneousLoginPerUser":{"description":"Optional. Specifies the number of simultaneous logins allowed for any user. The default value is 3. The range is 0-2147483647","format":"int32","type":"integer"},"vpnIdleTimeout":{"description":"Optional. Specifies a VPN idle timeout period. If there is no communication activity on the connection in this period, the ASA terminates the connection. The minimum time is 1 minute, the maximum time is 35791394 minutes, and the default is 30 minutes.","format":"int32","type":"integer"},"vpnIdleTimeoutAlertInterval":{"description":"Optional. Specifies the time at which an idle timeout alert message is displayed to the user. This alert message tells users how many minutes they have left until their VPN session will be disconnected due to inactivity. The default alert interval is one minute. The range is from 1 - 30 minutes.","format":"int32","type":"integer"}},"$$ref":"#/components/schemas/IGroupPolicySessionSettingsModel"},"vpnTrafficFilterACL":{"description":"Optional. Represents vpn-filter acl to post-decrypted traffic after it exits a tunnel and pre-encrypted traffic before it enters a tunnel. The ACL should be configured with the client assigned IP addresses as source and local network ip as destination in ACL.","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicyAdvancedSettingsModel"},"anyConnectSettings":{"type":"object","description":"Model representing the Configurations for AnyConnect Client.","properties":{"clientModules":{"description":"Optional. Represents specified Anyconnect modules to be downloaded when VPN user downloads Anyconnect Client","items":{"type":"object","description":"Model representing the File configurations for AnyConnect Client Modules","properties":{"enableModuleDownload":{"description":"Specifies if the module has to be downloaded. Default is False","type":"boolean"},"moduleProfile":{"description":"Represents VPN Client Profile Object","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"moduleType":{"description":"Specifies the type of the Client module package","enum":["AMP_ENABLER","FEEDBACK","ISE_POSTURE","NETWORK_ACCESS_MANAGER","NETWORK_VISIBILITY","UMBRELLA_ROAMING","WEB_SECURITY","START_BEFORE_LOGIN","DART"],"type":"string"}},"$$ref":"#/components/schemas/IGroupPolicyClientModulesModel"},"type":"array"},"connectionSettings":{"description":"Optional. Configures the connection parameters to be applied on the VPN connectivity.","type":"object","properties":{"bypassUnsupportProtocol":{"description":"Optional. Enables to determine whether to drop network traffic for which the FTD did not assign an IP address,or allow that traffic to bypass the FTD and be sent from the client unencrypted or in the clear. Default is False","type":"boolean"},"clientDPDInterval":{"description":"Optional. Specifies the DDPD interval from 5 to 3600 seconds, with which the client performs DPD. Default is 30 sec","format":"int32","type":"integer"},"clientFirewallPrivateNetworkRules":{"description":"Optional. If the split tunnel is configured the private network rule is the rule applied to the VPN virtual adapter interface on the client","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"clientFirewallPublicNetworkRules":{"description":"Optional. If the split tunnel is configured, the public network rule is the rule applied to other non-vpn interfaces on the client.","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"enableClientDPD":{"description":"Optional. Enables client to quickly detect a condition where the peer is not responding, and the connection has failed.","type":"boolean"},"enableGatewayDPD":{"description":"Optional. Enables that the security appliance (gateway) can quickly detect a condition where the peer is not responding, and the connection has failed.","type":"boolean"},"enableKeepAliveMessages":{"description":"Optional. Enables connection through a proxy, firewall, or NAT device remains open. Default is True","type":"boolean"},"enableSSLRekey":{"type":"boolean"},"gatewayDPDInterval":{"description":"Optional. When enableGatewayDPD is enabled, interval is specified from 5 to 3600 seconds, with which the security appliance performs gateway dead peer detection.Default is 30 secs","format":"int32","type":"integer"},"keepAliveMessageInterval":{"description":"Optional.Specifies the interval for Keep-Alive messsage. Default is 20 seconds. Valid range is from 15 - 600 seconds.","format":"int32","type":"integer"},"rekeyInterval":{"description":"Optional. Specifies the number of minutes from the start of the session until the re-key takes place. Range is 4-10080. Default is 4 minutes","format":"int32","type":"integer"},"rekeyMethod":{"description":"Optional. If SSL rekey is enabled, specifies if new tunnel has to be established or existing one has to be renegotiated. Default is NEW_TUNNEL","enum":["NEW_TUNNEL","EXISTING_TUNNEL"],"type":"string"}},"$$ref":"#/components/schemas/IGroupPolicyConnectionSettingsModel"},"customAttributes":{"items":{"type":"object","description":"Model representing the configuration of Custom Attributes of the Group Policy","properties":{"anyConnectAttribute":{"description":"Represents values of either (PER_APP_VPN|ALLOW_DEFER_UPDATE|DYNAMIC_SPLIT_TUNNELING|CUSTOM_TYPE) specifying type of AnyConnect custom attribute","type":"string"},"customAttributeObject":{"description":"Represents AnyConnect custom attribute object of selected type","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicyCustomAttributesModel"},"type":"array"},"managementProfile":{"description":"Optional. Represents VPN Management Profile Object whose filetype is ANYCONNECT_VPN_PROFILE","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"sslSettings":{"description":"Optional. Configures SSL Settings parameters to be used when connecting to the Client.","type":"object","properties":{"dtlsCompression":{"description":"Specifies DTLS Compression method (DISABLED,LZS). Default is DISABLED","enum":["DISABLED","LZS"],"type":"string"},"ignoreDFBit":{"description":"Optional. Specifies to ignore the Don't Fragment (DF) bit in packets that need fragmentation.Allows the forced fragmentation of packets that have the DF bit set, allowing them to pass through the tunnel. Default is False","type":"boolean"},"mtuSize":{"description":"Optional. Specifies the maximum transmission unit (MTU) size for SSL VPN connections established by the Cisco AnyConnect VPN Client.Default is 1406 Bytes, valid range is 576 to 1462 Bytes.","format":"int32","type":"integer"},"sslCompression":{"description":"Specifies SSL Compression method (DEFLATE,DISABLED,LZS). Default is DISABLED","enum":["DISABLED","DEFLATE","LZS"],"type":"string"}},"$$ref":"#/components/schemas/IGroupPolicySSLSettingsModel"},"vpnClientProfile":{"description":"Optional. Represents VPN Client Profile Object whose filetype is ANYCONNECT_VPN_PROFILE","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicyAnyConnectSettingsModel"},"description":{"description":"Represents the Group Policy configuration for RA VPN. It is a collation of Attribute and value pairs that determines parameters for the functionality of RA VPN","type":"string"},"enableIPsecIKEv2Protocol":{"description":"Enable IPSec IKEv2 type of Remote Access VPN tunnel that can be used when applying this group policy","type":"boolean"},"enableSSLProtocol":{"description":"Enable SSL type of Remote Access VPN tunnel that can be used when applying this group policy","type":"boolean"},"generalSettings":{"type":"object","description":"Model represents General Settings of a Group Policy","properties":{"addressAssignment":{"description":"Optional. Represents Address Assignment details that will be assigned to the endhost","type":"object","properties":{"defaultDomainName":{"description":"Optional. Specifies the name of the default domain","type":"string"},"dhcpScope":{"description":"Optional. Represents DHCP Network for this group.Choose or create a Network Object containing the IPv4 address of the DHCP Network for this group.","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"ipv4LocalAddressPool":{"description":"Optional. Represents IPv4 address assignment that is applied based on address pools that are specific to user-groups in Remote Access VPN","items":{"type":"object","description":"Contains reference information.","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"type":"array"}},"$$ref":"#/components/schemas/IGroupPolicyAddressAssignmentModel"},"banner":{"description":"Optional. Specifies the banner text to present to users at login","type":"string"},"primaryDNSServer":{"description":"Optional. Represents Network Object containing Primary DNS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"primaryWINSServer":{"description":"Optional. Represents Network Object containing Primary WINS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"secondaryDNSServer":{"description":"Optional. Represents Network Object containing Secondary DNS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"secondaryWINSServer":{"description":"Optional. Represents Network Object containing Secondary WINS Server IP Address","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"},"splitTunnelSettings":{"description":"Optional. Represents Split tunneling directs some network traffic through the VPN tunnel (encrypted) and the remaining network traffic outside the VPN tunnel (unencrypted)","type":"object","properties":{"ipv4SplitTunnelPolicy":{"enum":["TUNNEL_ALL","TUNNEL_SPECIFIED","EXCLUDE_SPECIFIED_OVER_TUNNEL"],"type":"string"},"ipv6SplitTunnelPolicy":{"enum":["TUNNEL_ALL","TUNNEL_SPECIFIED","EXCLUDE_SPECIFIED_OVER_TUNNEL"],"type":"string"},"splitDNSDomainList":{"description":"Optional. Specifies List of domain names applicable for splitDNS configuration","type":"string"},"splitDNSRequestPolicy":{"enum":["USE_SPLIT_TUNNEL_SETTING","TUNNEL_ALL","TUNNEL_SPECIFIED_DOMAINS"],"type":"string"},"splitTunnelACL":{"description":"If Split tunnel option is selected as TUNNEL_SPECIFIED or EXCLUDE_SPECIFIED_OVER_TUNNEL, splitTunnelACL is Mandatory. Standard access list or Extended Access List specifies matching traffic","type":"object","properties":{"id":{"description":"Unique identifier representing resource.","type":"string"},"links":{"description":"Object containing links to this resource.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"User chosen resource name.","type":"string"},"type":{"description":"Response object associated with resource.","type":"string"}},"$$ref":"#/components/schemas/IReference"}},"$$ref":"#/components/schemas/IGroupPolicySplitTunnelSettingsModel"}},"$$ref":"#/components/schemas/IGroupPolicyGeneralSettingsModel"},"id":{"description":"Specifies Unique identifier (UUID) representing the Group Policy object","type":"string"},"links":{"description":"Specifies links to this object.","type":"object","properties":{"parent":{"type":"string"},"self":{"type":"string"}},"$$ref":"#/components/schemas/Links"},"metadata":{"description":"Object representing metadata attributes for the Group Policy","type":"object","properties":{"domain":{"description":"Defines the domains this instance belongs to (if applicable).","type":"object","properties":{"id":{"description":"Unique UUID of this domain","type":"string"},"links":{"description":"Links to the domain resource URLs.","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"Name of the domain.","type":"string"},"type":{"description":"Domain type definition (fixed).","type":"string"},"uuid":{"type":"string"}},"$$ref":"#/components/schemas/Domain"},"isLocked":{"type":"boolean"},"lastUser":{"description":"The last user who modified this instance.","type":"object","properties":{"id":{"description":"The unique UUID of the user","type":"string"},"links":{"description":"Contains the self referencing links to this resource","type":"object","properties":{"parent":{"description":"Full resource URL path to reference the parent (if any) for this resource.","type":"string"},"self":{"description":"Full resource URL path to reference this particular resource.","type":"string"}},"$$ref":"#/components/schemas/ILinks"},"name":{"description":"Name of the user.","type":"string"},"type":{"description":"The user type (fixed).","type":"string"}},"$$ref":"#/components/schemas/MetadataUser"},"matches":{"items":{"type":"string"},"type":"array"},"readOnly":{"description":"Details regarding the read only status of this instance","type":"object","properties":{"reason":{"description":"Reason the resource is read only - SYSTEM (if it is system defined), RBAC (if user RBAC permissions make it read only) or DOMAIN (if resource is read only in current domain).","enum":["RBAC","SYSTEM","DOMAIN"],"type":"string"},"state":{"description":"True if this resource us read only and false otherwise.","type":"boolean"}},"$$ref":"#/components/schemas/ReadOnly"},"timestamp":{"description":"The last updated timestamp.","format":"int32","type":"integer"}},"$$ref":"#/components/schemas/Metadata"},"name":{"description":" Identifies the Group Policy Object so that can be referred to other configurations","type":"string"},"type":{"description":"Specifies unique type of the Group Policy.","type":"string"},"version":{"type":"string"}},"$$ref":"#/components/schemas/GroupPolicyModel"}}},"description":"Created"},"default":{"content":{"application/json":{"schema":{"type":"object","properties":{"category":{"description":"Describes the category of the error thrown.","enum":["FRAMEWORK","OTHER","VALIDATION"],"type":"string"},"messages":{"description":"List of error messages which the response has.","items":{"type":"object","properties":{"bulkPayloadIndex":{"description":"More details about the error.","type":"string"},"code":{"description":"More details about the error.","type":"string"},"description":{"description":"More details about the error.","type":"string"},"details":{"description":"More details about the error.","type":"string"},"errorCode":{"description":"More details about the error.","type":"string"},"location":{"description":"More details about the error.","type":"string"},"severity":{"description":"Specifies the Highest level severity among all the error messages.","enum":["ERROR","WARN"],"type":"string"}},"$$ref":"#/components/schemas/ErrorMessagesContainer"},"type":"array"},"severity":{"description":"Specifies the Highest level severity among all the error messages.","enum":["ERROR","WARN"],"type":"string"}},"$$ref":"#/components/schemas/ErrorResponse"}}},"description":"Error"}},"tags":["Object"],"__originalOperationId":"createMultipleGroupPolicyModel","method":"post","path":"/v1/cdfmc/api/fmc_config/v1/domain/{domainUUID}/object/grouppolicies"}}