Managed Resource Group
Manage groups of managed resources.
Create a resource group
Creates a resource group and returns it. Use it to group resources so access policies and protection settings can target them together.
List resource group names and IDs
Returns the ID and name of each resource group, sorted by name, with the platform IDs for platform groups. Use it to fill a picker or find a group's ID without loading full group details.
List OU-mapped resource groups for a domain
Returns a summary of the resource groups whose OU mapping points at the given domain. Use it to see which groups map to a domain, optionally only those that onboard resources automatically.
Get OU mapping summary for a resource group
Returns a summary of one resource group with its OU mapping settings and its resources. Use it to review how a group is mapped to an Active Directory OU.
Run OU mapping for a resource group
Schedules a job that maps the group's OU to its resources. Use it after you enable or change OU mapping to apply it without waiting.
Delete a resource group
Deletes one resource group by its ID. If the group manages its resources' built-in accounts, those accounts are released from management before the group is removed. The resources themselves are not deleted.
Get a resource group
Returns one resource group by its ID, including its platform, account management setting and OU mapping settings. Use it to read a group's current configuration.
Update a resource group
Replaces the settings of the resource group and returns the updated group. Send the full group: fields you leave out are reset to their defaults. When manageAccounts is Managed or Unmanaged, that setting is applied to the built-in accounts of every resource in the group, or of every resource on the platform for a platform group.
List access policies that use a resource group
Returns the access policies that reference the resource group. Use it to see what depends on a group before you change or delete it.
List connection profiles used through a resource group
Returns the distinct connection profiles set in the access policies that reference the resource group. Use it to see how users connect to the group's resources.
Rotate built-in admin accounts in a resource group
Schedules a password rotation for the built-in administrator accounts of managed resources and returns how many rotations were scheduled. Send all set to true to rotate every managed resource in the group (for a platform group, every managed resource on that platform), or list resource IDs in ids. Resources whose account cannot be rotated are skipped.