device_assurance_policies

Creates, updates, deletes, gets or lists a device_assurance_policies resource.

Overview

Name	device_assurance_policies
Type	Resource
Id	okta.device_assurances.device_assurance_policies

Fields

The following fields are returned by SELECT queries:

get_device_assurance_policy

Name	Datatype	Description
id	string
name	string	Display name of the device assurance policy
_links	object	Specifies link relations (see Web Linking) available using the JSON Hypertext Application Language specification. This object is used for dynamic discovery of related resources and lifecycle operations.
createdBy	string
createdDate	string
displayRemediationMode	string	Represents the remediation mode of this device assurance policy when users are denied access due to device noncompliance (HIDE, SHOW) (example: SHOW)
gracePeriod	object	Represents the Grace Period configuration for the device assurance policy
lastUpdate	string
lastUpdatedBy	string
platform	string	(ANDROID, CHROMEOS, IOS, MACOS, WINDOWS)

list_device_assurance_policies

Name	Datatype	Description
id	string
name	string	Display name of the device assurance policy
_links	object	Specifies link relations (see Web Linking) available using the JSON Hypertext Application Language specification. This object is used for dynamic discovery of related resources and lifecycle operations.
createdBy	string
createdDate	string
displayRemediationMode	string	Represents the remediation mode of this device assurance policy when users are denied access due to device noncompliance (HIDE, SHOW) (example: SHOW)
gracePeriod	object	Represents the Grace Period configuration for the device assurance policy
lastUpdate	string
lastUpdatedBy	string
platform	string	(ANDROID, CHROMEOS, IOS, MACOS, WINDOWS)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_device_assurance_policy	select	deviceAssuranceId, subdomain		Retrieves a device assurance policy by deviceAssuranceId
list_device_assurance_policies	select	subdomain		Lists all device assurance policies
create_device_assurance_policy	insert	subdomain		Creates a new device assurance policy
replace_device_assurance_policy	replace	deviceAssuranceId, subdomain		Replaces a device assurance policy by deviceAssuranceId
delete_device_assurance_policy	delete	deviceAssuranceId, subdomain		Deletes a device assurance policy by deviceAssuranceId. If the device assurance policy is currently being used in the org Authentication Policies, the delete will not be allowed.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
deviceAssuranceId	string	Id of the device assurance policy
subdomain	string	(default: my-org)

SELECT examples

get_device_assurance_policy

Retrieves a device assurance policy by deviceAssuranceId

SELECT
id,
name,
_links,
createdBy,
createdDate,
displayRemediationMode,
gracePeriod,
lastUpdate,
lastUpdatedBy,
platform
FROM okta.device_assurances.device_assurance_policies
WHERE deviceAssuranceId = '{{ deviceAssuranceId }}' -- required
AND subdomain = '{{ subdomain }}' -- required
;

list_device_assurance_policies

Lists all device assurance policies

SELECT
id,
name,
_links,
createdBy,
createdDate,
displayRemediationMode,
gracePeriod,
lastUpdate,
lastUpdatedBy,
platform
FROM okta.device_assurances.device_assurance_policies
WHERE subdomain = '{{ subdomain }}' -- required
;

INSERT examples

create_device_assurance_policy

Creates a new device assurance policy

INSERT INTO okta.device_assurances.device_assurance_policies (
displayRemediationMode,
gracePeriod,
name,
platform,
subdomain
)
SELECT 
'{{ displayRemediationMode }}',
'{{ gracePeriod }}',
'{{ name }}',
'{{ platform }}',
'{{ subdomain }}'
RETURNING
id,
name,
_links,
createdBy,
createdDate,
displayRemediationMode,
gracePeriod,
lastUpdate,
lastUpdatedBy,
platform
;

Manifest

# Description fields are for documentation purposes
- name: device_assurance_policies
props:
  - name: subdomain
    value: "{{ subdomain }}"
    description: Required parameter for the device_assurance_policies resource.
  - name: displayRemediationMode
    value: "{{ displayRemediationMode }}"
    description: |
      Represents the remediation mode of this device assurance policy when users are denied access due to device noncompliance
    valid_values: ['HIDE', 'SHOW']
  - name: gracePeriod
    description: |
      Represents the Grace Period configuration for the device assurance policy
    value:
      expiry: "{{ expiry }}"
      type: "{{ type }}"
  - name: name
    value: "{{ name }}"
    description: |
      Display name of the device assurance policy
  - name: platform
    value: "{{ platform }}"
    valid_values: ['ANDROID', 'CHROMEOS', 'IOS', 'MACOS', 'WINDOWS']

REPLACE examples

replace_device_assurance_policy

Replaces a device assurance policy by deviceAssuranceId

REPLACE okta.device_assurances.device_assurance_policies
SET 
displayRemediationMode = '{{ displayRemediationMode }}',
gracePeriod = '{{ gracePeriod }}',
name = '{{ name }}',
platform = '{{ platform }}'
WHERE 
deviceAssuranceId = '{{ deviceAssuranceId }}' --required
AND subdomain = '{{ subdomain }}' --required
RETURNING
id,
name,
_links,
createdBy,
createdDate,
displayRemediationMode,
gracePeriod,
lastUpdate,
lastUpdatedBy,
platform;

DELETE examples

delete_device_assurance_policy

Deletes a device assurance policy by deviceAssuranceId. If the device assurance policy is currently being used in the org Authentication Policies, the delete will not be allowed.

DELETE FROM okta.device_assurances.device_assurance_policies
WHERE deviceAssuranceId = '{{ deviceAssuranceId }}' --required
AND subdomain = '{{ subdomain }}' --required
;