Network Security Groups REST API

HI,
according to this link:
http://azure.microsoft.com/blog/2014/11/04/network-security-groups/
Network Security groups is currently exposed only through power shell and REST API.
I can't find any REST API documentations.
any idea?

Hi,
You are correct. There is no offical article related to Network Security Group with REST API as Network Security Group is a new feature. I will report it to the related team and hope the related articles would be published quickly. In addition, you can also
submit your requirement in Azure feedback:
http://feedback.azure.com/forums/34192--general-feedback
Apprecite your patience.
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

NOOB Question Network Security Groups

It appears I need to use Powershell to create NSG's etc so stupid question is where do I run the powershell to create the NSG from the command "New-AzureNetworkSecurityGroupNew-AzureNetworkSecurityGroup"
on a particular VM within Azure?

Hi,
You could install Azure PowerShell in your Azure VM or in your Local Machine as well.
Please refer the following link to install PowerShell:
http://azure.microsoft.com/en-in/documentation/articles/powershell-install-configure/
I ran the following command in my Local Machine to create a Network Security Group and it worked successfully:
New-AzureNetworkSecurityGroup-Name"******"-Location"******"-Label"*******"
Regards,
Malar.

Network Security Groups - Internet

Hello,
I am implementing NSGs in an Azure environment. When i apply a Deny Any Internet on the Domain controller Subnet (2 DC), i am not able to login with RD Web access anymore (DMZ has internet allowed). After the Deny Any Internet is an Allow Any Any applied.
Internet-outbound Deny Internet
AllowAny-outbound Any Any
Can a domain controller still be a Azure DNS server with these rules up? Since the DC needs to contact the Azure DNS.

Hi,
It seems like this issue is more related to Microsoft Azure Virtual Networking, I will move this thread to Microsoft Azure Virtual Networking Forum for a better help.
Thank you for your understanding.
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Docs for NSG (Network Security Groups) Powershell cmds

Is there a max length or other restrictions on the -Name used for New-AzureNetworkSecurityGroup?
Or for the rules, via Set-AzureNetworkSecurityRule?

Hi Darian,
Currently I would suggest using < 50 chars, we are working on fixing the length problem.
Also, please be advised the name:
1. must start with a letter or underscore
2. must not contain \, /, :, *, ?, ", <, >,|, `, ', ^, %, #
3. must not end with whitespace or .
Hope this helps.
Regards,
Malar.

How does schedule with RESTful API a Webi report for a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

SAB BO 4.1 SP1
Does it have an RESTful API to schedule a Webi report with the parameter to specify a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

Hello Ricardo,
have you try a call like this one ?
    <schedule>
      <name>"test"</name>"
      <format type=\"webi\"/>
      <destination>
        <inbox>
         <to>userId1,userId2,userId3,groupId1,groupId12</to>
        </inbox>
      </destination>
    </schedule>
Regards
Stephane

Add user to sharepoint group using REST API

I am trying to add a user to sharepoint group with following code
serviceUrl= Appweb + "/_api/SP.AppContextSite(@target)/web/sitegroups("+GroupId+")/users?@target='host web'";
$.ajax({
url: serviceUrl,
type: "POST",
contentType: "application/json; charset=utf-8",
dataType: 'json',
body: "{'__metadata': { 'type': 'SP.User' },'LoginName':'i:0#.f|membership|'+email }",
headers: {"accept":"application/json;odata=verbose",
"content-type": "application/json;odata=verbose",
"X-RequestDigest":$("#__REQUESTDIGEST").val()
async: false,
success: function (data) {
alert('success');
error: function (data) {
alert('fail');
The request goes to error function. Response of the request is Microsoft.SharePoint.Client.InvalidClientQueryException and message is A node of type 'EndOfInput' was read from the JSON reader when trying to read the start of an entry. A 'StartObject' node was
expected
I tried the sample from following link but fail it
https://msdn.microsoft.com/en-us/library/office/dn531432.aspx

Hi,
Per my understanding, you might want to add an user to a SharePoint group in host web from a SharePoint Hosted App using REST API.
Here is a working demo for your reference:
var hostweburl;
var appweburl;
$(document).ready(function () {
//Get the URI decoded URLs.
hostweburl = decodeURIComponent(getQueryStringParameter("SPHostUrl"));
appweburl = decodeURIComponent(getQueryStringParameter("SPAppWebUrl"));
// Resources are in URLs in the form:
// web_url/_layouts/15/resource
var scriptbase = hostweburl + "/_layouts/15/";
// SP.RequestExecutor.js to make cross-domain requests
$.getScript(scriptbase + "SP.RequestExecutor.js", loadPage);
// Utilities
// Retrieve a query string value.
// For production purposes you may want to use a library to handle the query string.
function getQueryStringParameter(paramToRetrieve)
var params = document.URL.split("?")[1].split("&");
for (var i = 0; i < params.length; i = i + 1)
var singleParam = params[i].split("=");
if (singleParam[0] == paramToRetrieve) return singleParam[1];
function addUsersInGroup() {
var executor;
// Initialize the RequestExecutor with the app web URL.
executor = new SP.RequestExecutor(appweburl);
executor.executeAsync({
url: appweburl + "/_api/SP.AppContextSite(@target)/web/sitegroups(8)/users?@target='" + hostweburl + "'",
method: "POST",
contentType: "application/json; charset=utf-8",
dataType: 'json',
body: "{'__metadata': { 'type': 'SP.User' },'LoginName':'i:0#.f|membership|[email protected]'}",
headers: {
"Accept": "application/json; odata=verbose",
"content-type": "application/json;odata=verbose",
"X-RequestDigest":$("#__REQUESTDIGEST").val()
success: addUsersInGroupSuccessHandler,
error: addUsersInGroupErrorHandler
function addUsersInGroupSuccessHandler(data)
console.log(data);
var jsonObject = JSON.parse(data.body);
console.log(jsonObject);
function addUsersInGroupErrorHandler(data)
console.log(data);
var jsonObject = JSON.parse(data.body);
console.log(jsonObject);
Thanks
Patrick Liang
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected].

Can't delete group by REST API

I use this URL for delete a group: https://graph.windows.net/<domain>/groups/<objectId>/?api-version=1.5 (ref: https://msdn.microsoft.com/en-us/library/azure/dn151608.aspx)
but I can't do it. I set full permission for application (I can create/update). How deleted group via REST Api?
This is requonse:
odata.error:
code: "Authorization_RequestDenied"
message:
lang: "en"
value: "Insufficient privileges to complete the operation."

Hi,
Are you using this link to delete the group
https://graph.windows.net/<domain>/groups/<objectId>/?api-version=1.5
the method states that it has used the date, not the version of API as mentioned below.
https://graph.windows.net/mytenantdomain/groups/<objectId>?api-version=2013-04-05
The Sample request also has the date, not the exact version of the API
DELETE https://graph.windows.net/contoso.onmicrosoft.com/groups/bc0001a2-5b96-4073-a5be-6b80528a17ad?api-version=2013-04-05
HTTP/1.1
Authorization: Bearer eyJ0eX ... FWSXfwtQ
Content-Type: application/json
Host: graph.windows.net
Hope this helps you.
Girish Prajwal

Create different network share shortcut in desktop for different security groups using GPO

Hi,
I have an OU named TECH that contains two different security groups ENG and PRESS.
When users in ENG group logs in desktop should show a network share \\server1\eng-share and
when users in PRESS group logs in desktop should show a network share \\server1\press-share.
How to create a GPO for this ?
regards, Faisal

You could use group policy preferences shortcuts. You would create a shortcut to each of these shares and then use Item Level Targeting. The target would point to the security group needed.
If my answer helped you, check out my blog:
DeployHappiness. Subscribe by
RSS or
email.

Set group owner using REST API

I'm trying to use the REST API to set the owner of a SharePoint group. I can successfully create the group using REST, but I can't change the owner. I've tried the following.
1 - Specifying a group owner while creating the group
Endpoint: .../_api/web/sitegroups
Method: POST
Headers:
Content-Type: application/json; odata=verbose
Body:
{ '__metadata': { 'type': 'SP.Group' }, 'Title': '<title>', 'Description': '<description>', 'Owner': { '__metadata': { 'type': 'SP.Principal' }, 'Title': '<owner_title>'}}
This returns a 500 error: "The specified name is already in use. Please try again with a new name". In other words, the owner title I specified already exists, which is correct - I'm trying to make an existing principal the owner of the new group.
2 - Merging a new group owner into an existing group
Endpoint: .../_api/web/sitegroups(<group_id>)
Method: POST
Headers:
Content-Type: application/json; odata=verbose
X-HTTP-Method: MERGE
Body:
{ '__metadata': { 'type': 'SP.Group' }, 'Owner': { '__metadata': { 'type': 'SP.Principal' }, 'Title': '<owner_title>'}}
This returns a 500 error with a Microsoft.SharePoint.SPException: "Exception from HRESULT: 0x80131904". The trace logs don't shed any light on it.
3 - Using the owner endpoint directly
Endpoint: .../_api/web/sitegroups(<group_id>)/owner
Method: POST
Headers:
Content-Type: application/json; odata=verbose
X-HTTP-Method: PUT
Body:
{ '__metadata': { 'type': 'SP.Principal' }, 'Title': '<owner_title>'}
This throws various 400 errors. If the current owner of the group is a user, I get the error "The required property 'Email' does not exist in the message" - i.e. it wants SP.User properties. If the current owner of the group is another group, I get
the error "The required property 'AllowMembersEditMembership' does not exist in the message." - i.e. it wants SP.Group properties.
I've tried various adaptations of the three approaches above, such as specifying additional SP.Principal properties or passing SP.User or SP.Group objects instead, but with no success. Any ideas?

As we chatted on email. There doesn't seem to be any combo that will set the owner. Only way to do it is to use the CSOM XML method and post to client.svc\ProcessQuery:
POST
http://weburl/_vti_bin/client.svc/ProcessQuery HTTP/1.1
X-RequestDigest: 0xAE382F0A8F11688BA9BE66739F84443892CE5E5452BA3E2622F6013D9D97EA8A8D9476463EDC503F700EB24F45024150D0DEEB2F40B160CD88BA7C7B4769BECD,15 Jan 2014 00:11:02 -0000Content-Type: text/xml
Host:
www.sanspug.org
Cookie: FedAuth=blah
Content-Length: 612
Expect: 100-continue
Accept-Encoding: gzip, deflate
XML body is:
<Request AddExpandoFieldTypeSuffix="true" SchemaVersion="15.0.0.0" LibraryVersion="15.0.0.0" ApplicationName=".NET Library" xmlns="http://schemas.microsoft.com/sharepoint/clientquery/2009">
<Actions>
<SetProperty Id="45" ObjectPathId="32" Name="Owner">
<Parameter ObjectPathId="33" />
</SetProperty>
<Method Name="Update" Id="46" ObjectPathId="32" />
</Actions>
<ObjectPaths>
<Identity Id="32" Name="740c6a0b-85e2-48a0-a494-e0f1759d4aa7:site:a1452dcc-8fc4-4631-8ada-97cb204810f1:g:9" />
<Identity Id="33" Name="740c6a0b-85e2-48a0-a494-e0f1759d4aa7:site:a1452dcc-8fc4-4631-8ada-97cb204810f1:g:7" />
</ObjectPaths></Request>
The ids are randomly generated and can be anything you want, as long as they correlate (setproperty and method objectpathid is the object you are updating). The most important part is the
“Name” parts. The first part is the typeid of the object (in this case is means SPGroup), the second part as you can see if the site guid id. The response does in fact return json if you tell it too:
Chris Givens CEO, Architecting Connected Systems
Blog Twitter

Delete Yammer Group through REST API

Hi All,
Is there any REST API from yammer which enables us to delete Yammer groups. We would just have to pass groupid(s) to the rest api url and my yammer groups should get deleted.
I tried googling but could not find any. except these: https://www.yammer.com/api/v1/group_memberships.json?group_id=:4309911 which just deletes user from a group. Is there any rest api to delete the group itself ?
Thanks in advance.
Regards,
Subhash S.

Hi,
According to your description, you want to delete a group in Yammer using the REST API endpoint of Yammer.
As it is more relate to Yammer development, it would be more appropriate to ask for help in the corresponding forum, you will get more help and confirmed answers there:
http://community.office365.com/en-us/w/yammer/default.aspx
Thanks
Best Regards
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Security Group Creation in Specific OU and Create Network Share For the Security Group

Hi,
We would really want to create a PowerShell script that creates a specific Security Group within a selected Organisation Unit.
Brief Scenario;
We have created several Organisation Units. Each Organisation Unit contains another Organisation Unit called users.
+OU=Netherlands
++OU=Company A
+++OU=users
++OU=Company B
+++OU=users
And so forth.
If we run the PowerShell script it should create a list of all the Companies in container Netherlands. After the list is created it creates an output like 1. Company A; 2. Company B. (Forearch ..)
The script asks for user input where to create the Security Group. If user selects option 2, a security group Called "Company B" is being created. All the users located in the Organisation Unit users within Company B are joined to that group. (Sets
option 2 as a value like Security Group = "$Company B", create Security Group "Universal, Global (option), and get all users from container users and join them)
Then without user interaction a share is being created. Granting Domain Administrators full access and the Security Group which has just been created.
Is somebody able to help me with this kind of script?
Thank you in advance,
With kind regards,
Danny Locorotondo

Already gathered some information. Have this as a result. Now I need to figure out how to put the results into a list, so the user can select the group. As far as now I am stuck.
Import-Module ActiveDirectory
Function SelectCollectionRelease
[CmdletBinding()]
Param
[Parameter(Mandatory=$true,
Position=0,
HelpMessage='Enter the Release of the Collection. By example: Alfa,Beta or Charlie')]
$CollectionRelease
IF(!$CollectionRelease)
write-host "`n You did not select a proper Collection Release" -foregroundcolor "red"
SelectCollectionRelease
Elseif($CollectionRelease)
[string] $OUPath = "OU=$CollectionRelease,OU=VDI,OU=carsystems,DC=carsysdev,DC=local"
if (!([adsi]::Exists("LDAP://$OUPath")))
write-host "`n Collection Release does not exists" -foregroundcolor "red"
SelectCollectionRelease
else
write-host "`n Collection Release exists." -foregroundcolor "green"
write-host "`n Selected $OUPath ..." -foregroundcolor "yellow"
Get-ADGroup -SearchBase "OU=$CollectionRelease,OU=VDI,OU=carsystems,DC=carsysdev,DC=local" -filter {GroupCategory -eq "Security"} | Format-List -Property Name
Else
//$SecurityGroup = Get-ADGroup -SearchBase "OU=$CollectionRelease,OU=VDI,OU=carsystems,DC=carsysdev,DC=local" -filter {GroupCategory -eq "Security"} -and (ObjectClass -eq "user")
SelectCollectionRelease

Is it possible to Activate / De Activate Campaign via REST API?

Hi,
Is it possible to Activate / De activate Campaigns via Eloqua REST API?
I was checking out this site on Eloqua Rest API, but could not see the option http://secure.eloqua.com/api/docs/Static/Rest/2.0/index.htm
Regards,
Aditya

Dear Kia111,
It is possible. What you can do is, insert a radio button group and set the appearance as "checkbox". In this case, you radio button group will appear as if two checkboxes are placed. But, the behavior will be the way you wanted. Checking one radio button (checkbox) will uncheck the other and vice-versa.
In this case, you need to tweak your code based on the binding values set for each radio button in the radio button group. For eg., say if 1 and 2 are the binding values for two radio buttons:
if(chkbox.rawValue == "1")
          section.presence = "visible";
     else
          section.presence = "hidden";
Hope this helps.
Thanks,
VJ

Cisco Prime Infrastructure 2.2 Rest API XML does not add LF

I am using several scripts that dig the data from XML files created through Cisco Prime Infrastructure Rest API. It worked fine until 2.1. Now, with 2.2, seems Cisco stopped adding LF to each line and everything is 'one' line.
Here is an example with 2.1, there is a LF to the end of each line:
?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<queryResponse type="AccessPointDetails" rootUrl="https://server/webacs/api/v1/data" requestUrl="https://server/webacs/api/v1/data/AccessPointDetails?type=contains(UnifiedAp)&.full=true&.maxResults=1000&.firstResult=0" responseType="listEntityInstances" count="715" first="0" last="714">
    <entity url="https://server/webacs/api/v1/data/AccessPointDetails/1505569" type="AccessPointDetails" dtoType="accessPointDetailsDTO">
        <accessPointDetailsDTO id="1505569" displayName="1505569">
            <adminStatus>ENABLE</adminStatus>
            <apType>AP1240</apType>
            <cdpNeighbors>
                <cdpNeighbor>
                    <capabilities>Switch IGMP </capabilities>
                    <duplex>Half Duplex</duplex>
                    <interfaceSpeed>100Mbps</interfaceSpeed>
                    <localPort>2</localPort>
                    <neighborIpAddress>10.1.1.1</neighborIpAddress>
                    <neighborName>switch</neighborName>
                    <neighborPort>FastEthernet0/1</neighborPort>
                    <platform>cisco WS-C3560-8PC</platform>
                </cdpNeighbor>
Now, with 2.2, there is not LF anywhere:
?xml version="1.0" encoding="UTF-8" standalone="yes"?><queryResponse type="AccessPointDetails" rootUrl="https://server/webacs/api/v1/data" requestUrl="https://server/webacs/api/v1/data/AccessPointDetails?type=contains(UnifiedAp&.full=true&.maxResults=1000&.firstResult=0" responseType="listEntityInstances" count="715" first="0" last="714">
<entity url="https://server/webacs/api/v1/data/AccessPointDetails/1505569" type="AccessPointDetails" dtoType="accessPointDetailsDTO">
<accessPointDetailsDTO id="1505569" displayName="1505569"><adminStatus>ENABLE</adminStatus><apType>AP1240</apType><cdpNeighbors><cdpNeighbor>
Does anyone know, is this intentional or a mistake? Or is there a way how I control this?
I am reading on-line CPI Rest API docs, but seems cannot find anything.
Thanks,
Vlad

PI 2.0 is in Beta mode for testing in closed group already. However it may still take some time to get released on CCO for FCS.
I think it is expected to be released between aug-sep. BU has also started working on CPI 2.1, which you can see test uploads on CCO.
For what does it have for customers?
> As Cisco have a vision of one network Management software for both wired and wireless infrastructure, which started getting real partially with Cisco PI.
As WCS got evolved to NCS and eventually to Cisco Prime Infrastructure, but it doesnt yet have full Management capability for wired infra., which is there with LMS.
With CPI 2.x Cisco plans to blend entire LMS and WCS features together.
-Thanks

How to restrict an infopath custom view based on SharePoint group or security group membership?

Hi,
I have created a custom view in InfoPath Designer 2013 based on a SharePoint online - custom list.
Right now the custom view is available for all users in the "View:" dropdown under the "PAGE DESIGN" tab in InfoPath.
I would like to make this view available only to a set of users. (i.e., users of a SharePoint group / Security group).
Please let me know how I can do this..
Thanks,
Thanan

Hi Thanan,
We can use check the current user permission using REST API in SharePoint 2013, then hide the dropdown the "View" base on the permission.
The following articles for your reference:
SP2013 REST API – Find if user is member of SharePoint group
http://simonovens.wordpress.com/2014/08/13/sp2013-rest-api-find-if-user-is-member-of-sharepoint-group/
Quick Tip: Using JQuery to hide options in a select
https://formidablepro.com/help-desk/quick-tip-using-jquery-to-hide-options-in-a-select/
Best Regards
Patrick Liang
TechNet Community Support

How to filter the Rest Api data based on Taxanomy columns

Hi Everyone,
We are using SharePoint2010 Standard Edition.
I wanted get the library details through REST Api. I am using as below:
https://SiteUrl/_vti_bin/listdata.svc/Documents?$filter=Title eq 'SharePointDoc'
Here I am able to get the info regarding "SharePointDoc". But when I am trying to get the details from Taxonomy filter, it didn't.
Can anyone please tell me how can we filter based on Taxanomy fields.
Thanks in Advance
Krishnasandeep

Hi,
I understand that you wanted to filter the Rest Api data based on Taxanomy columns.
Per my knowledge, in SharePoint 2010 , not all types of column are available via REST, most annoyingly managed metadata columns are amongst this group of unsupported column types.
However, in SharePoint 2013, we can filter list items based on taxonomy (managed metadata) columns.
Taxonomy fields can be now called via REST API using CAML query in REST calls.
Here is a great blog for your reference:
http://www.cleverworkarounds.com/2013/09/23/how-to-filter-on-a-managed-metadata-column-via-rest-in-sharepoint-2013/comment-page-1/
You’d better to change the REST calls and the CAML query to check whether it works in SharePoint 2010.
More information:
http://platinumdogs.me/2013/03/14/sharepoint-adventures-with-the-rest-api-part-1/
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Network Security Groups REST API

Similar Messages

Maybe you are looking for