check_point / check_point.mgmt / 5.2.2 / module / cp_mgmt_administrator Manages administrator objects on Checkpoint over Web Services API | "added in version" 1.0.0 of check_point.mgmt" Authors: Or Soffer (@chkp-orso) preview | supported by communitycheck_point.mgmt.cp_mgmt_administrator (5.2.2) — module
Install with ansible-galaxy collection install check_point.mgmt:==5.2.2
collections: - name: check_point.mgmt version: 5.2.2
Manages administrator objects on Checkpoint devices including creating, updating and removing objects.
All operations are performed over Web Services API.
- name: add-administrator cp_mgmt_administrator: authentication_method: check point password email: admin@gmail.com must_change_password: false name: admin password: secret permissions_profile: read write all phone_number: 1800-800-800 state: present
- name: set-administrator cp_mgmt_administrator: name: admin password: new secret permissions_profile: read only profile state: present
- name: delete-administrator cp_mgmt_administrator: name: admin state: absent
- name: add-administrator-in-MDS cp_mgmt_administrator: authentication_method: check point password email: admin@gmail.com must_change_password: false name: admin password: secret permissions_profile_list: profile: read write all domain: dom1 phone_number: 1800-800-800 state: present
name: description: - Object name. required: true type: str tags: description: - Collection of tag identifiers. elements: str type: list color: choices: - aquamarine - black - blue - crete blue - burlywood - cyan - dark green - khaki - orchid - dark orange - dark sea green - pink - turquoise - dark blue - firebrick - brown - forest green - gold - dark gold - gray - dark gray - light green - lemon chiffon - coral - sea green - sky blue - magenta - purple - slate blue - violet red - navy blue - olive - orange - red - sienna - yellow description: - Color of the object. Should be one of existing colors. type: str email: description: - Administrator email. type: str state: choices: - present - absent default: present description: - State of the access rule (present or absent). type: str version: description: - Version of checkpoint. If not given one, the latest version taken. type: str comments: description: - Comments string. type: str password: description: - Administrator password. type: str phone_number: description: - Administrator phone number. type: str details_level: choices: - uid - standard - full description: - The level of detail for some of the fields in the response can vary from showing only the UID value of the object to a fully detailed representation of the object. type: str ignore_errors: description: - Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored. type: bool password_hash: description: - Administrator password hash. type: str radius_server: description: - RADIUS server object identified by the name or UID. Must be set when "authentication-method" was selected to be "RADIUS". type: str tacacs_server: description: - TACACS server object identified by the name or UID. Must be set when "authentication-method" was selected to be "TACACS". type: str wait_for_task: default: true description: - Wait for the task to end. Such as publish task. type: bool expiration_date: description: - Format, YYYY-MM-DD, YYYY-mm-ddThh,mm,ss. type: str ignore_warnings: description: - Apply changes ignoring warnings. type: bool permissions_profile: description: - Permission profile type: str auto_publish_session: default: false description: - Publish the current session if changes have been performed after task completes. type: bool multi_domain_profile: description: - Administrator multi-domain profile. type: str must_change_password: description: - True if administrator must change password on the next login. type: bool authentication_method: choices: - undefined - check point password - os password - securid - radius - tacacs - ad authentication - api key description: - Authentication method. type: str wait_for_task_timeout: default: 30 description: - How many minutes to wait until throwing a timeout error. type: int permissions_profile_list: description: - Administrator permissions profile. Permissions profile should not be provided when multi-domain-profile is set to "Multi-Domain Super User" or "Domain Super User". Used only in MDS. elements: dict suboptions: domain: description: - Domain. type: str profile: description: - Permission profile. type: str type: list
cp_mgmt_administrator: description: The checkpoint object created or updated. returned: always, except when deleting the object. type: dict