topic Re: I send a request using "set" action but in the logs is an "edit" action and it replaces the configuration in Automation/API Discussions

I send a request using "set" action but in the logs is an "edit" action and it replaces the configuration

NotisKontothanasis — Mon, 08 Mar 2021 07:33:38 GMT

Hello,

I try to add new administrators using the XML API. I send a "set" action in order to add a new admin. However it replaces the configuration and just add the new admin. I have tried POST and PUT methods.
The call is:

https://XXXXXX/api?type=config&action=set&key=XXXX&xpath=/config/mgt-config/users&element= <users><entry name="XXXXXX"><permissions><role-based><superuser>yes</superuser></role-based></permissions><authentication-profile>XXXXX</authentication-profile></entry></users>

Any suggestions or comments? I have opened a case with Palo Alto support as well

Re: I send a request using "set" action but in the logs is an "edit" action and it replaces the configuration

BPry — Tue, 09 Mar 2021 02:59:37 GMT

@NotisKontothanasis ,

That's because this is what you're telling the device to do. You're having it replace everything under <users> which is not what you want. You need to modify the request slightly so that the element you are modifying is the entry you are trying to create instead of the entirety of <users/>.

https://MYFIREWALL/api?type=config&action=set&key=MYKEY&xpath=/config/mgt-config/users&element=<entry name="MYUSER"><permissions><role-based><superuser>yes</superuser></role-based></permissions><phash>MYPHASH</phash></entry>

Re: I send a request using "set" action but in the logs is an "edit" action and it replaces the configuration

NotisKontothanasis — Tue, 09 Mar 2021 06:54:56 GMT

Thanks a lot!