topic Re: Add existing local User to existing User Group in Automation/API Discussions

Add existing local User to existing User Group

estebanad — Wed, 10 May 2023 10:56:52 GMT

Hi all - I've been stuck trying to figure out a way to fix an issue I'm having while running this task in Ansible:

- name: Add existing local User to existing User Group paloaltonetworks.panos.panos_type_cmd: provider: "{{ provider }}" cmd: set xpath: | /config/devices/entry[@name='localhost.localdomain'] /vsys/entry[@name='vsys2']/local-user-database /user-group/entry[@name='TestGroup']/user element: "<user>test_user</user>"

I'm trying to add an existing user to an existing group locally in the firewall and I keep getting this error:

"msg": "set failed, may need to override template object first"

It's weird because there aren't templates interfering with this configuration item.

And, to make it weirder, I can do it through the cli running: set vsys vsys4 local-user-database user-group TestGroup user test_user

Any clues or ideas? TIA

Re: Add existing local User to existing User Group

JimmyHolland — Thu, 11 May 2023 07:43:03 GMT

Hi @estebanad, I think you need <member> in your element, not <user>

element: "<member>test_user</member>"

In my non-VSYS test PA-Series (so hence a slightly different xpath), this worked:

- name: Add existing Local User to existing User Group paloaltonetworks.panos.panos_type_cmd: provider: "{{ device }}" cmd: set xpath: "/config/shared/local-user-database/user-group/entry[@name='TestGroup']/user" element: "<member>test_user</member>"

Hope that helps

Re: Add existing local User to existing User Group

estebanad — Thu, 11 May 2023 21:49:17 GMT

Hi @JimmyHolland , Yes!!! You are correct. I just tried `member` and it worked. I tried so many things, I'm not sure how I missed this one. Thanks a lot!