PcaConnectorAd / Client / create_template_group_access_control_entry
create_template_group_access_control_entry#
- PcaConnectorAd.Client.create_template_group_access_control_entry(**kwargs)#
Create a group access control entry. Allow or deny Active Directory groups from enrolling and/or autoenrolling with the template based on the group security identifiers (SIDs).
See also: AWS API Documentation
Request Syntax
response = client.create_template_group_access_control_entry( AccessRights={ 'AutoEnroll': 'ALLOW'|'DENY', 'Enroll': 'ALLOW'|'DENY' }, ClientToken='string', GroupDisplayName='string', GroupSecurityIdentifier='string', TemplateArn='string' )
- Parameters:
AccessRights (dict) –
[REQUIRED]
Allow or deny permissions for an Active Directory group to enroll or autoenroll certificates for a template.
AutoEnroll (string) –
Allow or deny an Active Directory group from autoenrolling certificates issued against a template. The Active Directory group must be allowed to enroll to allow autoenrollment
Enroll (string) –
Allow or deny an Active Directory group from enrolling certificates issued against a template.
ClientToken (string) –
Idempotency token.
This field is autopopulated if not provided.
GroupDisplayName (string) –
[REQUIRED]
Name of the Active Directory group. This name does not need to match the group name in Active Directory.
GroupSecurityIdentifier (string) –
[REQUIRED]
Security identifier (SID) of the group object from Active Directory. The SID starts with “S-“.
TemplateArn (string) –
[REQUIRED]
The Amazon Resource Name (ARN) that was returned when you called CreateTemplate.
- Returns:
None
Exceptions