7.3

Table Of Contents
Parameter Description
emailAddress Specifies the email address of the user.
locked Specifies the Boolean flag indicating if the user is locked out.
disabled Specifies the Boolean flag indicating if the user is disabled.
principalId Specifies the principal ID of the user in username@domain format.
tenantName Specifies the name of tenant to which user belongs.
name Specifies the first and last name concatenated.
Example: curl Command to Search LDAP or Active Directory for a User
The following example command queries the configured LDAP directory for a specific user.
curl --insecure -H "Accept:text/xml" -H "Authorization: Bearer $token"
https://$vRA/identity/api/tenants/$tenantId/principals/$userId
The following JSON output is returned based on the command input.
{
"links" : [ ],
"content" : [
{
"@type" : "User",
"firstName" : "Tony",
"lastName" : "Anteater",
"emailAddress" : "tony@example.mycompany.com",
"locked" : false,
"disabled" : false,
"principalId" :
{
"domain" : "example.mycompany.com",
"name" : "susan"
},
"tenantName" : "MYCOMPANY1",
"name" : "Tony Anteater"
}
]
}
Syntax for Assigning a User to a Role
PUT /api/authorization/tenants/{tenantId}/principals/{principalId}/scopes/{scopeId
}/roles/{scopeRoleId} assigns a user to a role.
Input
Use the supported input parameters to control the command output.
Programming Guide
VMware, Inc. 38