Skip to content

Create a group access control entry

Description

Create a group access control entry. Allow or deny Active Directory groups from enrolling and/or autoenrolling with the template based on the group security identifiers (SIDs).

Usage

pcaconnectorad_create_template_group_access_control_entry(AccessRights,
  ClientToken, GroupDisplayName, GroupSecurityIdentifier, TemplateArn)

Arguments

  • AccessRights

    [required] Allow or deny permissions for an Active Directory group to enroll or autoenroll certificates for a template.

  • ClientToken

    Idempotency token.

  • GroupDisplayName

    [required] Name of the Active Directory group. This name does not need to match the group name in Active Directory.

  • GroupSecurityIdentifier

    [required] Security identifier (SID) of the group object from Active Directory. The SID starts with "S-".

  • TemplateArn

    [required] The Amazon Resource Name (ARN) that was returned when you called create_template.

Value

An empty list.

Request syntax

svc$create_template_group_access_control_entry(
  AccessRights = list(
    AutoEnroll = "ALLOW"|"DENY",
    Enroll = "ALLOW"|"DENY"
  ),
  ClientToken = "string",
  GroupDisplayName = "string",
  GroupSecurityIdentifier = "string",
  TemplateArn = "string"
)