Updating a KACLS Endpoint Privileged-Unwrap Configuration
Use the PATCH /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/privileged-unwrap-configuration API to update a privileged-unwrap configuration for a KACLS endpoint.
Before using the API, make sure the value of allow_privileged_unwrap parameter is true for the endpoint. Refer to Updating a KACLS Endpoint.
Syntax
curl -k '<IP>/api//v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/privileged-unwrap-configuration' -H 'Authorization: Bearer AUTHTOKEN' -H 'Content-Type: application/json' --data-binary $'{\n "kacls_base_url": "<kacls_base_url>", "users": "<users>"\n}' --compressed
Request Parameters
| Parameter | Type | Description |
|---|---|---|
| id | string | ID of the endpoint. To find out the ID of an endpoint, refer to Viewing KACLS Endpoints. |
| AUTHTOKEN | string | Authorization token. |
| kacls_base_url (optional) | array of strings | List of KACLS URLs allowed to send privilegedUnwrap from other KACLS that is new-KACLS endpoints. |
| users (optional) | array of strings | List of email addresses for authenticated users to perform privilegedUnwrap. |
Note
You need to configure one of the following:
kacls_base_url: The list of KACLS URLS to enable KACLS key migration.
users: The list of email addresses to decrypt the data in a privileged context (takeout).
Example Request
curl -k 'https://127.0.0.1/api/v1/cckm/GoogleWorkspaceCSE/endpoints/a873fed8-40da-4959-b0b0-376e1af2764b/privileged-unwrap-configuration' -H 'Authorization: Bearer AUTHTOKEN' -H 'Content-Type: application/json' --data-binary $'{\n "kacls_base_url": "<https://demo.thalescpl.com/api/v1/cckm/GoogleWorkspaceCSE/endpoints/tj03b8bc-b568-4a03-f2r6-8en42c6c6eu9>", "users": "<demo.user@thalescpl.com>"\n}' --compressed
Example Response
{
"id": "a873fed8-40da-4959-b0b0-376e1af2764b",
"uri": "kylo:kylo:cckm:kacls-endpoint-migration-configuration:a873fed8-40da-4959-b0b0-376e1af2764b",
"account": "kylo:kylo:admin:accounts:101128a7-c620-4a64-9d81-08a8f72deb93",
"createdAt": "2022-11-24T11:36:06.488958+05:30",
"updatedAt": "2022-11-24T11:36:06.487491+05:30",
"endpoint_id": "d7f604d6-d3c2-4aeb-bd62-b2e1429c63f4",
"kacls_base_url": [
"https://<KS IP1>/cckm/GoogleWorkspaceCSE/39a9e91b-7a95-4fbf-bf79-30930eeb1d23",
"https://<KS IP2>/cckm/GoogleWorkspaceCSE/39a9e91b-7a95-4fbf-bf79-30930eeb1d2c"
]
}
The output shows the updated privileged-unwrap configuration details for the KACLS endpoint.
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
Refer to HTTP status codes for details.
