Skip to content
Joshua Hiller edited this page Nov 2, 2021 · 24 revisions

CrowdStrike Falcon Twitter URL

Using the MSSP (Flight Control) service collection

Uber class support Service class support Documentation Version

Table of Contents

Operation ID Description
getChildren
PEP 8 get_children
Get link to child customer by child CID(s)
getCIDGroupMembersBy
PEP 8 get_cid_group_members_by
Get CID Group members by CID Group IDs.
addCIDGroupMembers
PEP 8 add_cid_group_members
Add new CID Group member.
deleteCIDGroupMembers
PEP 8 delete_cid_group_members
Delete CID Group members entry.
getCIDGroupById
PEP 8 get_cid_group_by_id
Get CID Group(s) by ID(s).
createCIDGroups
PEP 8 create_cid_groups
Create new CID Group(s). Maximum 500 CID Group(s) allowed.
deleteCIDGroups
PEP 8 delete_cid_groups
Delete CID Group(s) by ID(s).
updateCIDGroups
PEP 8 update_cid_groups
Update existing CID Group(s). CID Group ID is expected for each CID Group definition provided in request body. CID Group member(s) remain unaffected.
getRolesByID
PEP 8 get_roles_by_id
Get MSSP Role assignment(s). MSSP Role assignment is of the format :.
addRole
PEP 8 add_role
Assign new MSSP Role(s) between User Group and CID Group. It does not revoke existing role(s) between User Group and CID Group. User Group ID and CID Group ID have to be specified in request.
deletedRoles
PEP 8 delete_roles
Delete MSSP Role assignment(s) between User Group and CID Group. User Group ID and CID Group ID have to be specified in request. Only specified roles are removed if specified in request payload, else association between User Group and CID Group is dissolved completely (if no roles specified).
getUserGroupMembersByID
PEP 8 get_user_group_members_by_id
Get User Group members by User Group ID(s).
addUserGroupMembers
PEP 8 add_user_group_members
Add new User Group member. Maximum 500 members allowed per User Group.
deleteUserGroupMembers
PEP 8 delete_user_group_members
Delete User Group members entry.
getUserGroupsByID
PEP 8 get_user_groups_by_id
Get User Group by ID(s).
createUserGroups
PEP 8 create_user_groups
Create new User Group(s). Maximum 500 User Group(s) allowed per customer.
deleteUserGroups
PEP 8 delete_user_groups
Delete User Group(s) by ID(s).
updateUserGroups
PEP 8 update_user_groups
Update existing User Group(s). User Group ID is expected for each User Group definition provided in request body. User Group member(s) remain unaffected.
queryChildren
PEP 8 query_children
Query for customers linked as children
queryCIDGroupMembers
PEP 8 query_cid_group_members
Query a CID Groups members by associated CID.
queryCIDGroups
PEP 8 query_cid_groups
Query CID Groups.
queryRoles
PEP 8 query_roles
Query MSSP Role assignment. At least one of CID Group ID or User Group ID should also be provided. Role ID is optional.
queryUserGroupMembers
PEP 8 query_user_group_members
Query User Group member by User UUID.
queryUserGroups
PEP 8 query_user_groups
Query User Groups.

getChildren

Get link to child customer by child CID(s)

PEP8 method name

get_children

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
ids
Service Class Support

Uber Class Support
query string or list of strings CID of a child customer.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_children(ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getChildren(ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getChildren", ids=id_list)
print(response)

getCIDGroupMembersBy

Get CID Group members by CID Group IDs.

PEP8 method name

get_cid_group_members_by

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
cid_group_ids
Service Class Support

Uber Class Support
query string or list of strings CID Group IDs to search for members of.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_cid_group_members_by(cid_group_ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getCIDGroupMembersBy(cid_group_ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getCIDGroupMembersBy", cid_group_ids=id_list)
print(response)

addCIDGroupMembers

Add new CID Group member.

PEP8 method name

add_cid_group_members

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
cid_group_id
Service Class Support

Uber Class Support
body string ID of the CID group to update.
cids
Service Class Support

Uber Class Support
body string or list of strings CID(s) to add to the CID group.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'CID1,CID2,CID3'  # Can also pass a list here: ['CID1', 'CID2', 'CID3']

response = falcon.add_cid_group_members(cid_group_id="string", cids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'CID1,CID2,CID3'  # Can also pass a list here: ['CID1', 'CID2', 'CID3']

response = falcon.addCIDGroupMembers(cid_group_id="string", cids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = ['CID1', 'CID2', 'CID3']

BODY = {
  "resources": [
    {
      "cid_group_id": "string",
      "cids": id_list
    }
  ]
}

response = falcon.command("addCIDGroupMembers", body=BODY)
print(response)

deleteCIDGroupMembers

Delete CID Group members entry.

PEP8 method name

delete_cid_group_members

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
cid_group_id
Service Class Support

Uber Class Support
body string ID of the CID group to update.
cids
Service Class Support

Uber Class Support
body string or list of strings CID(s) to remove to the CID group.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'CID1,CID2,CID3'  # Can also pass a list here: ['CID1', 'CID2', 'CID3']

response = falcon.delete_cid_group_members(cid_group_id="string", cids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )
id_list = 'CID1,CID2,CID3'  # Can also pass a list here: ['CID1', 'CID2', 'CID3']

response = falcon.deleteCIDGroupMembers(body=BODY)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'CID1,CID2,CID3'  # Can also pass a list here: ['CID1', 'CID2', 'CID3']

BODY = {
  "resources": [
    {
      "cid_group_id": "string",
      "cids": id_list
    }
  ]
}

response = falcon.command("deleteCIDGroupMembers", cid_group_id="string", cids=id_list)
print(response)

getCIDGroupById

Get CID Group(s) by ID(s).

PEP8 method name

get_cid_group_by_id

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
cid_group_ids
Service Class Support

Uber Class Support
query string or list of strings CID Group IDs to search for.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_cid_group_by_id(cid_group_ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getCIDGroupById(cid_group_ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getCIDGroupById", cid_group_ids=id_list)
print(response)

createCIDGroups

Create new CID Group(s). Maximum 500 CID Group(s) allowed.

PEP8 method name

create_cid_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
cid_group_id
Service Class Support

Uber Class Support
body string ID of the CID group.
cid
Service Class Support

Uber Class Support
body string Parent CID for the CID group.
description
Service Class Support

Uber Class Support
body string CID group description.
name
Service Class Support

Uber Class Support
body string CID group name.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.create_cid_groups(cid_group_id="string",
                                    cid="string",
                                    description="string",
                                    name="string"
                                    )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.createCIDGroups(cid_group_id="string",
                                  cid="string",
                                  description="string",
                                  name="string"
                                  )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
    "resources": [
        {
            "cid": "string",
            "cid_group_id": "string",
            "description": "string",
            "name": "string"
        }
    ]
}

response = falcon.command("createCIDGroups", body=BODY)
print(response)

deleteCIDGroups

Delete CID Group(s) by ID(s).

PEP8 method name

delete_cid_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
cid_group_ids
Service Class Support

Uber Class Support
query string or list of strings CID Group IDs to be deleted.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_cid_groups(cid_group_ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.deleteCIDGroups(cid_group_ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("deleteCIDGroups", cid_group_ids=id_list)
print(response)

updateCIDGroups

Update existing CID Group(s). CID Group ID is expected for each CID Group definition provided in request body. CID Group member(s) remain unaffected.

PEP8 method name

update_cid_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
cid_group_id
Service Class Support

Uber Class Support
body string ID of the CID group.
cid
Service Class Support

Uber Class Support
body string Parent CID of the CID group.
description
Service Class Support

Uber Class Support
body string CID group description.
name
Service Class Support

Uber Class Support
body string CID group name.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.update_cid_groups(cid_group_id="string",
                                    cid="string",
                                    description="string",
                                    name="string"
                                    )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.updateCIDGroups(cid_group_id="string",
                                  cid="string",
                                  description="string",
                                  name="string"
                                  )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
  "resources": [
    {
      "cid": "string",
      "cid_group_id": "string",
      "description": "string",
      "name": "string"
    }
  ]
}

response = falcon.command("updateCIDGroups", body=BODY)
print(response)

getRolesByID

Get MSSP Role assignment(s). MSSP Role assignment is of the format :.

PEP8 method name

get_roles_by_id

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
ids
Service Class Support

Uber Class Support
query string or list of strings Role IDs to retrieve. MSSP Role assignment is of the format <user_group_id>:<cid_group_id>.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_roles_by_id(ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getRolesByID(ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getRolesByID", ids=id_list)
print(response)

addRole

Assign new MSSP Role(s) between User Group and CID Group. It does not revoke existing role(s) between User Group and CID Group. User Group ID and CID Group ID have to be specified in request.

PEP8 method name

add_role

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
cid_group_id
Service Class Support

Uber Class Support
body string CID Group ID to associate.
user_group_id
Service Class Support

Uber Class Support
body string User group ID to associate.
id
Service Class Support

Uber Class Support
body string MSSP role ID.
role_ids
Service Class Support

Uber Class Support
body string or list of strings Additional role ID(s) to associate.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.add_role(cid_group_id="string",
                           user_group_id="string",
                           id="string",
                           role_ids=id_list
                           )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.addRole(cid_group_id="string",
                          user_group_id="string",
                          id="string",
                          role_ids=id_list
                          )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

BODY = {
  "resources": [
    {
      "cid_group_id": "string",
      "id": "string",
      "role_ids": id_list,
      "user_group_id": "string"
    }
  ]
}

response = falcon.command("addRole", body=BODY)
print(response)

deletedRoles

Delete MSSP Role assignment(s) between User Group and CID Group. User Group ID and CID Group ID have to be specified in request. Only specified roles are removed if specified in request payload, else association between User Group and CID Group is dissolved completely (if no roles specified).

PEP8 method name

delete_roles

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
cid_group_id
Service Class Support

Uber Class Support
body string CID Group ID to deassociate.
user_group_id
Service Class Support

Uber Class Support
body string User group ID to deassociate.
id
Service Class Support

Uber Class Support
body string MSSP role ID.
role_ids
Service Class Support

Uber Class Support
body string or list of strings Additional role ID(s) to deassociate.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_roles(cid_group_id="string",
                               user_group_id="string",
                               id="string",
                               role_ids=id_list
                               )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.deletedRoles(cid_group_id="string",
                               user_group_id="string",
                               id="string",
                               role_ids=id_list
                               )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

BODY = {
  "resources": [
    {
      "cid_group_id": "string",
      "id": "string",
      "role_ids": id_list,
      "user_group_id": "string"
    }
  ]
}

response = falcon.command("deletedRoles", body=BODY)
print(response)

getUserGroupMembersByID

Get User Group members by User Group ID(s).

PEP8 method name

get_user_group_members_by_id

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
user_group_ids
Service Class Support

Uber Class Support
query string or list of strings User Group IDs to search for.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_user_group_members_by_id(user_group_ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getUserGroupMembersByID(user_group_ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getUserGroupMembersByID", user_group_ids=id_list)
print(response)

addUserGroupMembers

Add new User Group member. Maximum 500 members allowed per User Group.

PEP8 method name

add_user_group_members

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
user_group_id
Service Class Support

Uber Class Support
body string User group ID to update.
user_uuids
Service Class Support

Uber Class Support
body string or list of strings User ID(s) to add to the group.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.add_user_group_members(user_group_id="string", user_uuids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.addUserGroupMembers(user_group_id="string", user_uuids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

BODY = {
  "resources": [
    {
      "user_group_id": "string",
      "user_uuids": id_list
    }
  ]
}

response = falcon.command("addUserGroupMembers", body=BODY)
print(response)

deleteUserGroupMembers

Delete User Group members entry.

PEP8 method name

delete_user_group_members

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
user_group_id
Service Class Support

Uber Class Support
body string User group ID to update.
user_uuids
Service Class Support

Uber Class Support
body string or list of strings User ID(s) to remove to the group.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_user_group_members(user_group_id="string", user_uuids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.deleteUserGroupMembers(user_group_id="string", user_uuids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

BODY = {
  "resources": [
    {
      "user_group_id": "string",
      "user_uuids": id_list
    }
  ]
}

response = falcon.command("deleteUserGroupMembers", body=BODY)
print(response)

getUserGroupsByID

Get User Group by ID(s).

PEP8 method name

get_user_groups_by_id

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
user_group_ids
Service Class Support

Uber Class Support
query string or list of strings User Group IDs to search for.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_user_groups_by_id(user_group_ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.getUserGroupsByID(user_group_ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("getUserGroupsByID", user_group_ids=id_list)
print(response)

createUserGroups

Create new User Group(s). Maximum 500 User Group(s) allowed per customer.

PEP8 method name

create_user_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
user_group_id
Service Class Support

Uber Class Support
body string ID of the User group.
cid
Service Class Support

Uber Class Support
body string CID of the User group.
description
Service Class Support

Uber Class Support
body string User group description.
name
Service Class Support

Uber Class Support
body string User group name.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.create_user_groups(user_group_id="string",
                                     cid="string",
                                     description="string",
                                     name="string"
                                     )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.createUserGroups(user_group_id="string",
                                   cid="string",
                                   description="string",
                                   name="string"
                                   )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
  "resources": [
    {
      "cid": "string",
      "description": "string",
      "name": "string",
      "user_group_id": "string"
    }
  ]
}

response = falcon.command("createUserGroups", body=BODY)
print(response)

deleteUserGroups

Delete User Group(s) by ID(s).

PEP8 method name

delete_user_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
user_group_ids
Service Class Support

Uber Class Support
query string or list of strings User Group IDs to delete.
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_user_groups(user_group_ids=id_list)
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.deleteUserGroups(user_group_ids=id_list)
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("deleteUserGroups", user_group_ids=id_list)
print(response)

updateUserGroups

Update existing User Group(s). User Group ID is expected for each User Group definition provided in request body. User Group member(s) remain unaffected.

PEP8 method name

update_user_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
body
Service Class Support

Uber Class Support
body string Full body payload in JSON format.
user_group_id
Service Class Support

Uber Class Support
body string ID of the User group.
cid
Service Class Support

Uber Class Support
body string CID of the User group.
description
Service Class Support

Uber Class Support
body string User group description.
name
Service Class Support

Uber Class Support
body string User group name.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.update_user_groups(user_group_id="string",
                                     cid="string",
                                     description="string",
                                     name="string"
                                     )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.updateUserGroups(user_group_id="string",
                                   cid="string",
                                   description="string",
                                   name="string"
                                   )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
  "resources": [
    {
      "cid": "string",
      "description": "string",
      "name": "string",
      "user_group_id": "string"
    }
  ]
}

response = falcon.command("updateUserGroups", body=BODY)
print(response)

queryChildren

Query for customers linked as children

PEP8 method name

query_children

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
limit
Service Class Support

Uber Class Support
query integer Maximum number of records to return.

(Max: 1000, Default: 10)
offset
Service Class Support

Uber Class Support
query integer Starting index of overall result set from which to return ids.
sort
Service Class Support

Uber Class Support
query string The property to sort by. (Ex: last_modified_timestamp|desc)
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.query_children(sort="string",
                                 offset=integer,
                                 limit=integer
                                 )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.queryChildren(sort="string",
                                offset=integer,
                                limit=integer
                                )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("queryChildren",
                          sort="string",
                          offset=integer,
                          limit=integer
                          )
print(response)

queryCIDGroupMembers

Query a CID Groups members by associated CID.

PEP8 method name

query_cid_group_members

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
cid
Service Class Support

Uber Class Support
query string CID to lookup associated CID group for.
limit
Service Class Support

Uber Class Support
query integer Maximum number of records to return.

(Max: 1000, Default: 10)
offset
Service Class Support

Uber Class Support
query integer Starting index of overall result set from which to return ids.
sort
Service Class Support

Uber Class Support
query string The property to sort by. (Ex: last_modified_timestamp|desc)
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.query_cid_group_members(cid="string",
                                          sort="string",
                                          offset=integer,
                                          limit=integer
                                          )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.queryCIDGroupMembers(cid="string",
                                       sort="string",
                                       offset=integer,
                                       limit=integer
                                       )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("queryCIDGroupMembers",
                          cid="string",
                          sort="string",
                          offset=integer,
                          limit=integer
                          )
print(response)

queryCIDGroups

Query CID Groups.

PEP8 method name

query_cid_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
name
Service Class Support

Uber Class Support
query string Name to lookup groups for.
limit
Service Class Support

Uber Class Support
query integer Maximum number of records to return.

(Max: 1000, Default: 10)
offset
Service Class Support

Uber Class Support
query integer Starting index of overall result set from which to return ids.
sort
Service Class Support

Uber Class Support
query string The property to sort by. (Ex: last_modified_timestamp|desc)
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.query_cid_groups(name="string",
                                   sort="string",
                                   offset=integer,
                                   limit=integer
                                   )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.queryCIDGroups(name="string",
                                 sort="string",
                                 offset=integer,
                                 limit=integer
                                 )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("queryCIDGroups",
                          name="string",
                          sort="string",
                          offset=integer,
                          limit=integer
                          )
print(response)

queryRoles

Query MSSP Role assignment. At least one of CID Group ID or User Group ID should also be provided. Role ID is optional.

PEP8 method name

query_roles

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
user_uuid
Service Class Support

Uber Class Support
query string User Group ID to fetch MSSP role for.
cid_group_id
Service Class Support

Uber Class Support
query string CID Group ID to fetch MSSP role for.
role_id
Service Class Support

Uber Class Support
query string Role ID to fetch MSSP role for.
limit
Service Class Support

Uber Class Support
query integer Maximum number of records to return.

(Max: 1000, Default: 10)
offset
Service Class Support

Uber Class Support
query integer Starting index of overall result set from which to return ids.
sort
Service Class Support

Uber Class Support
query string The property to sort by. (Ex: last_modified_timestamp|desc)
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.query_roles(user_group_id="string",
                              cid_group_id="string",
                              role_id="string",
                              sort="string",
                              offset=integer,
                              limit=integer
                              )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.queryRoles(user_group_id="string",
                             cid_group_id="string",
                             role_id="string",
                             sort="string",
                             offset=integer,
                             limit=integer
                             )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("queryRoles",
                          user_group_id="string",
                          cid_group_id="string",
                          role_id="string",
                          sort="string",
                          offset=integer,
                          limit=integer
                          )
print(response)

queryUserGroupMembers

Query User Group member by User UUID.

PEP8 method name

query_user_group_members

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
user_uuid
Service Class Support

Uber Class Support
query string User UUID to lookup associated User Group ID.
limit
Service Class Support

Uber Class Support
query integer Maximum number of records to return.

(Max: 1000, Default: 10)
offset
Service Class Support

Uber Class Support
query integer Starting index of overall result set from which to return ids.
sort
Service Class Support

Uber Class Support
query string The property to sort by. (Ex: last_modified_timestamp|desc)
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.query_user_group_members(user_uuid="string",
                                           sort="string",
                                           offset=integer,
                                           limit=integer
                                           )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.queryUserGroupMembers(user_uuid="string",
                                        sort="string",
                                        offset=integer,
                                        limit=integer
                                        )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("queryUserGroupMembers",
                          user_uuid="string",
                          sort="string",
                          offset=integer,
                          limit=integer
                          )
print(response)

queryUserGroups

Query User Groups.

PEP8 method name

query_user_groups

Content-Type

  • Consumes: application/json
  • Produces: application/json

Keyword Arguments

Name Service Uber Type Data type Description
name
Service Class Support

Uber Class Support
query string Name to lookup groups for.
limit
Service Class Support

Uber Class Support
query integer Maximum number of records to return.

(Max: 1000, Default: 10)
offset
Service Class Support

Uber Class Support
query integer Starting index of overall result set from which to return ids.
sort
Service Class Support

Uber Class Support
query string The property to sort by. (Ex: last_modified_timestamp|desc)
parameters
Service Class Support

Uber Class Support
query string Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.query_user_groups(name="string",
                                    sort="string",
                                    offset=integer,
                                    limit=integer
                                    )
print(response)
Service class example (Operation ID syntax)
from falconpy import FlightControl

falcon = FlightControl(client_id="API_CLIENT_ID_HERE",
                       client_secret="API_CLIENT_SECRET_HERE"
                       )

response = falcon.queryUserGroups(name="string",
                                  sort="string",
                                  offset=integer,
                                  limit=integer
                                  )
print(response)
Uber class example
from falconpy import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

response = falcon.command("queryUserGroups",
                          name="string",
                          sort="string",
                          offset=integer,
                          limit=integer
                          )
print(response)

CrowdStrike Falcon

Clone this wiki locally