Add existing local User to existing User Group

[estebanad]

Hi all - I've been stuck trying to figure out a way to fix an issue I'm having while running this task in Ansible:

- name: Add existing local User to existing User Group
  paloaltonetworks.panos.panos_type_cmd:
    provider: "{{ provider }}"
    cmd: set
    xpath: |
      /config/devices/entry[@name='localhost.localdomain']
      /vsys/entry[@name='vsys2']/local-user-database
      /user-group/entry[@name='TestGroup']/user
    element: "<user>test_user</user>"

I'm trying to add an existing user to an existing group locally in the firewall and I keep getting this error:

"msg": "set failed, may need to override template object first"

It's weird because there aren't templates interfering with this configuration item.

And, to make it weirder, I can do it through the cli running: set vsys vsys4 local-user-database user-group TestGroup user test_user

Any clues or ideas? TIA

[JimmyHolland · Accepted solution]

Hi @estebanad, I think you need <member> in your element, not <user>

element: "<member>test_user</member>"

In my non-VSYS test PA-Series (so hence a slightly different xpath), this worked:

    - name: Add existing Local User to existing User Group
      paloaltonetworks.panos.panos_type_cmd:
        provider: "{{ device }}"
        cmd: set
        xpath: "/config/shared/local-user-database/user-group/entry[@name='TestGroup']/user"
        element: "<member>test_user</member>"

Hope that helps

[estebanad]

Hi @JimmyHolland , Yes!!! You are correct. I just tried `member` and it worked. I tried so many things, I'm not sure how I missed this one. Thanks a lot!