Group Policy Fields

These fields apply to the group_policy_added, group_policy_changed, and group_policy_removed events. Group policy events also include the Permission Fields.

Field Value Explanation

account:disabled

1 or 0

1: The accounts associated with this group policy are disabled.
0: The accounts associated with this group policy are active.

account:expiration

Unix timestamp

The date and time the accounts associated with this group policy will expire, if ever.

allow_override

1 or 0

1: This setting can be overridden by a policy with a lower priority.
0: This setting cannot be overridden by a policy with a lower priority.

comments

string

Any comments associated with this group policy.

id

string

The unique identifier for this group policy.

idle_timeout

integer or
site_wide_setting

The maximum number of seconds these users can be idle within the access console before being logged out. The site_wide_setting option defaults to the timeout set on the Management > Security page. If no timeout, uses none.

jumpoints

serialized
labeled
list

The group’s Jumpoint access in the form of permission:id:name, where permission is one of added, removed, or unknown; id is the unique identifier of the Jumpoint; and name is the name of the Jumpoint.

login_code:enabled 1 or 0 1: Users must enter an emailed login code to log in.
0: Users may log in without an emailed login code.

name

string

The name of this group policy.

policy:id

string

The unique identifier of the group policy for which this setting is configured.

policy:name

string

The name of the group policy for which this setting is configured.

priority

integer

The priority of this group policy, in order of execution, starting from 1.

tz

string

The time zone to use for the login schedule for this group policy.