Cisco AMP for Endpoints API

PATCH /v1/groups/{:group_guid}

Description

Updates group to a given policy and returns all the policies in that group.

Show Response Fields

Name Type Description
version String
metadata.links.self String
data.name String
data.description String
data.guid GUID
data.source String
data.policies Array
data.policies[].name String
data.policies[].description String
data.policies[].guid GUID
data.policies[].product String
data.policies[].default Boolean
data.policies[].serial_number Integer
data.policies[].links.policy_xml String
data.policies[].links.policy String
data.policies[].file_lists Array
data.policies[].file_lists[].name String
data.policies[].file_lists[].guid GUID
data.policies[].file_lists[].type String
data.policies[].ip_lists Array
data.policies[].ip_lists[].type String
data.policies[].ip_lists[].name String
data.policies[].ip_lists[].guid GUID
data.policies[].exclusion_set.name String
data.policies[].exclusion_set.guid GUID
data.policies[].used_in_groups Array
data.policies[].used_in_groups[].name String
data.policies[].used_in_groups[].description String
data.policies[].used_in_groups[].guid GUID
data.policies[].inherited Boolean
Write
Preview
Auto Generate

Examples

Updates group to a given windows policy
Updates group to a given mac policy
Updates group to a given android policy
Updates group to a given linux policy
Updates group to given policies

Updates group to a given windows policy

Request

Requires Authorization 
PATCH /v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318
Headers
accept: application/json
content-type: application/json
authorization: Basic FILTERED
content-length: 62

cURL Edit, then copy and paste on your terminal

curl -X PATCH \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'content-length: 62' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-d '{"windows_policy_guid":"89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"}' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318'
Body
{"windows_policy_guid":"89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"}

Response

Shortened for readability 

strict-transport-security: max-age=31536000
content-type: application/json; charset=utf-8
status: 202 Accepted
x-ratelimit-limit: 3000
x-ratelimit-reset: 1826
x-ratelimit-remaining: 2805
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2019-01-09T17:44:06Z
transfer-encoding: chunked

{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318"
    }
  },
  "data": {
    "name": "afcILiVA",
    "description": "This is a new group",
    "guid": "67b5e432-1d8c-4a1c-9208-17d2c797e318",
    "source": "Created via API",
    "policies": [
      {
        "name": "Audit Policy",
        "description": "",
        "guid": "89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29",
        "product": "windows",
        "default": true,
        "serial_number": 112,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"
        },
        "file_lists": [
          {
            "name": "Quick SCD",
            "guid": "03097bae-53f9-44b1-a0e5-d23b1f33a94a",
            "type": "simple_custom_detections"
          },
          {
            "name": "Sample Application Blocking List",
            "guid": "e773a9eb-296c-40df-98d8-bed46322589d",
            "type": "application_blocking"
          }
        ],
        "ip_lists": [
          {
            "type": "whitelist",
            "name": "Sample White List",
            "guid": "444f184d-9965-48b8-a4df-8b3773398e9b"
          },
          {
            "type": "blacklist",
            "name": "Sample Black List",
            "guid": "503f867d-a555-44d5-a541-6e5c8977f7c5"
          }
        ],
        "exclusion_sets": [
          {
            "name": "Workstation Exclusions For FireAMP Windows",
            "guid": "b20a94a7-f9e9-4b79-91ec-83f8015d5491"
          }
        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      },
      {
        "name": "Default FireAMP Android",
        "guid": "cf86e1d9-1499-41ad-82e6-7333a2ca2ab0",
        "product": "android",
        "default": true,
        "serial_number": 81,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      }
    ]
  }
}

Updates group to a given mac policy

Request

Requires Authorization 
PATCH /v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318
Headers
accept: application/json
content-type: application/json
authorization: Basic FILTERED
content-length: 58

cURL Edit, then copy and paste on your terminal

curl -X PATCH \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'content-length: 58' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-d '{"mac_policy_guid":"c65a7166-3b9a-4b56-b7c3-62e60c5dac8b"}' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318'
Body
{"mac_policy_guid":"c65a7166-3b9a-4b56-b7c3-62e60c5dac8b"}

Response

Shortened for readability 

strict-transport-security: max-age=31536000
content-type: application/json; charset=utf-8
status: 202 Accepted
x-ratelimit-limit: 3000
x-ratelimit-reset: 1824
x-ratelimit-remaining: 2802
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2019-01-09T17:44:06Z
transfer-encoding: chunked

{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318"
    }
  },
  "data": {
    "name": "afcILiVA",
    "description": "This is a new group",
    "guid": "67b5e432-1d8c-4a1c-9208-17d2c797e318",
    "source": "Created via API",
    "policies": [
      {
        "name": "Audit Policy",
        "description": "",
        "guid": "89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29",
        "product": "windows",
        "default": true,
        "serial_number": 112,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"
        },
        "file_lists": [
          {
            "name": "Quick SCD",
            "guid": "03097bae-53f9-44b1-a0e5-d23b1f33a94a",
            "type": "simple_custom_detections"
          },
          {
            "name": "Sample Application Blocking List",
            "guid": "e773a9eb-296c-40df-98d8-bed46322589d",
            "type": "application_blocking"
          }
        ],
        "ip_lists": [
          {
            "type": "whitelist",
            "name": "Sample White List",
            "guid": "444f184d-9965-48b8-a4df-8b3773398e9b"
          },
          {
            "type": "blacklist",
            "name": "Sample Black List",
            "guid": "503f867d-a555-44d5-a541-6e5c8977f7c5"
          }
        ],
        "exclusion_sets": [
          {
            "name": "Workstation Exclusions For FireAMP Windows",
            "guid": "b20a94a7-f9e9-4b79-91ec-83f8015d5491"
          }
        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      },
      {
        "name": "Default FireAMP Android",
        "guid": "cf86e1d9-1499-41ad-82e6-7333a2ca2ab0",
        "product": "android",
        "default": true,
        "serial_number": 81,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      }
    ]
  }
}

Updates group to a given android policy

Request

Requires Authorization 
PATCH /v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318
Headers
accept: application/json
content-type: application/json
authorization: Basic FILTERED
content-length: 62

cURL Edit, then copy and paste on your terminal

curl -X PATCH \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'content-length: 62' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-d '{"android_policy_guid":"cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"}' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318'
Body
{"android_policy_guid":"cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"}

Response

Shortened for readability 

strict-transport-security: max-age=31536000
content-type: application/json; charset=utf-8
status: 202 Accepted
x-ratelimit-limit: 3000
x-ratelimit-reset: 1823
x-ratelimit-remaining: 2799
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2019-01-09T17:44:06Z
transfer-encoding: chunked

{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318"
    }
  },
  "data": {
    "name": "afcILiVA",
    "description": "This is a new group",
    "guid": "67b5e432-1d8c-4a1c-9208-17d2c797e318",
    "source": "Created via API",
    "policies": [
      {
        "name": "Audit Policy",
        "description": "",
        "guid": "89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29",
        "product": "windows",
        "default": true,
        "serial_number": 112,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"
        },
        "file_lists": [
          {
            "name": "Quick SCD",
            "guid": "03097bae-53f9-44b1-a0e5-d23b1f33a94a",
            "type": "simple_custom_detections"
          },
          {
            "name": "Sample Application Blocking List",
            "guid": "e773a9eb-296c-40df-98d8-bed46322589d",
            "type": "application_blocking"
          }
        ],
        "ip_lists": [
          {
            "type": "whitelist",
            "name": "Sample White List",
            "guid": "444f184d-9965-48b8-a4df-8b3773398e9b"
          },
          {
            "type": "blacklist",
            "name": "Sample Black List",
            "guid": "503f867d-a555-44d5-a541-6e5c8977f7c5"
          }
        ],
        "exclusion_sets": [
          {
            "name": "Workstation Exclusions For FireAMP Windows",
            "guid": "b20a94a7-f9e9-4b79-91ec-83f8015d5491"
          }
        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      },
      {
        "name": "Default FireAMP Android",
        "guid": "cf86e1d9-1499-41ad-82e6-7333a2ca2ab0",
        "product": "android",
        "default": true,
        "serial_number": 81,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      }
    ]
  }
}

Updates group to a given linux policy

Request

Requires Authorization 
PATCH /v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318
Headers
accept: application/json
content-type: application/json
authorization: Basic FILTERED
content-length: 60

cURL Edit, then copy and paste on your terminal

curl -X PATCH \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'content-length: 60' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-d '{"linux_policy_guid":"f55db9c4-51a0-4e3b-8a3a-6532f06fc0c8"}' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318'
Body
{"linux_policy_guid":"f55db9c4-51a0-4e3b-8a3a-6532f06fc0c8"}

Response

Shortened for readability 

strict-transport-security: max-age=31536000
content-type: application/json; charset=utf-8
status: 202 Accepted
x-ratelimit-limit: 3000
x-ratelimit-reset: 1822
x-ratelimit-remaining: 2796
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2019-01-09T17:44:06Z
transfer-encoding: chunked

{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318"
    }
  },
  "data": {
    "name": "afcILiVA",
    "description": "This is a new group",
    "guid": "67b5e432-1d8c-4a1c-9208-17d2c797e318",
    "source": "Created via API",
    "policies": [
      {
        "name": "Audit Policy",
        "description": "",
        "guid": "89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29",
        "product": "windows",
        "default": true,
        "serial_number": 112,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"
        },
        "file_lists": [
          {
            "name": "Quick SCD",
            "guid": "03097bae-53f9-44b1-a0e5-d23b1f33a94a",
            "type": "simple_custom_detections"
          },
          {
            "name": "Sample Application Blocking List",
            "guid": "e773a9eb-296c-40df-98d8-bed46322589d",
            "type": "application_blocking"
          }
        ],
        "ip_lists": [
          {
            "type": "whitelist",
            "name": "Sample White List",
            "guid": "444f184d-9965-48b8-a4df-8b3773398e9b"
          },
          {
            "type": "blacklist",
            "name": "Sample Black List",
            "guid": "503f867d-a555-44d5-a541-6e5c8977f7c5"
          }
        ],
        "exclusion_sets": [
          {
            "name": "Workstation Exclusions For FireAMP Windows",
            "guid": "b20a94a7-f9e9-4b79-91ec-83f8015d5491"
          }
        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      },
      {
        "name": "Default FireAMP Android",
        "guid": "cf86e1d9-1499-41ad-82e6-7333a2ca2ab0",
        "product": "android",
        "default": true,
        "serial_number": 81,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      }
    ]
  }
}

Updates group to given policies

Request

Requires Authorization 
PATCH /v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318
Headers
accept: application/json
content-type: application/json
authorization: Basic FILTERED
content-length: 239

cURL Edit, then copy and paste on your terminal

curl -X PATCH \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'content-length: 239' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-d '{"windows_policy_guid":"89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29","mac_policy_guid":"c65a7166-3b9a-4b56-b7c3-62e60c5dac8b","android_policy_guid":"cf86e1d9-1499-41ad-82e6-7333a2ca2ab0","linux_policy_guid":"f55db9c4-51a0-4e3b-8a3a-6532f06fc0c8"}' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318'
Body
{"windows_policy_guid":"89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29","mac_policy_guid":"c65a7166-3b9a-4b56-b7c3-62e60c5dac8b","android_policy_guid":"cf86e1d9-1499-41ad-82e6-7333a2ca2ab0","linux_policy_guid":"f55db9c4-51a0-4e3b-8a3a-6532f06fc0c8"}

Response

Shortened for readability 

strict-transport-security: max-age=31536000
content-type: application/json; charset=utf-8
status: 202 Accepted
x-ratelimit-limit: 3000
x-ratelimit-reset: 1820
x-ratelimit-remaining: 2790
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2019-01-09T17:44:06Z
transfer-encoding: chunked

{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v1/groups/67b5e432-1d8c-4a1c-9208-17d2c797e318"
    }
  },
  "data": {
    "name": "afcILiVA",
    "description": "This is a new group",
    "guid": "67b5e432-1d8c-4a1c-9208-17d2c797e318",
    "source": "Created via API",
    "policies": [
      {
        "name": "Audit Policy",
        "description": "",
        "guid": "89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29",
        "product": "windows",
        "default": true,
        "serial_number": 112,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/89912c9e-8dbd-4c2b-a1d8-dee8a0c2bb29"
        },
        "file_lists": [
          {
            "name": "Quick SCD",
            "guid": "03097bae-53f9-44b1-a0e5-d23b1f33a94a",
            "type": "simple_custom_detections"
          },
          {
            "name": "Sample Application Blocking List",
            "guid": "e773a9eb-296c-40df-98d8-bed46322589d",
            "type": "application_blocking"
          }
        ],
        "ip_lists": [
          {
            "type": "whitelist",
            "name": "Sample White List",
            "guid": "444f184d-9965-48b8-a4df-8b3773398e9b"
          },
          {
            "type": "blacklist",
            "name": "Sample Black List",
            "guid": "503f867d-a555-44d5-a541-6e5c8977f7c5"
          }
        ],
        "exclusion_sets": [
          {
            "name": "Workstation Exclusions For FireAMP Windows",
            "guid": "b20a94a7-f9e9-4b79-91ec-83f8015d5491"
          }
        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      },
      {
        "name": "Default FireAMP Android",
        "guid": "cf86e1d9-1499-41ad-82e6-7333a2ca2ab0",
        "product": "android",
        "default": true,
        "serial_number": 81,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      }
    ]
  }
}