Developer

Hello,

I am working on automation project for our Network-aaS. We are using Aruba Central (AC) in MSP mode. I am working with API calls to achieve particular tasks.

 

I want to achieve the same flow using API calls as I would do manually. 

 

1. Create Tenant

2. Assign Device to Tenant (Auto subscription ON)

3. Create Template Group under tenant

4. Create template

5. Upload variables

 

I am struggling with task of creation of template group for particular tenant.

API call to Create Group does not specify customer. Actually it creates MSP group, which do not support template style.

I haven't found the way how to create group under specific tenant, or how to specify tenant in order to create group.

 

Only workaround it seems to be create new tokens for particular tenant, but then you need keep track of refresh tokens etc.

 

We have the same template for all tenants, everything depends on used variables.

 

Q: Is there a way how to create template group under specific tenant from MSP point of view?

What is the correct process/workflow how to create template group for specific tenant.

 

Thank you for reply.

BR Martin

Hi Martin,

 

That is good use case for automation. There are API endpoints specific to MSP to deal with the templates of tenants. You can find them under

 

1. Open API Gateway page:

Account Home -> API Gateway -> APIs -> Click on API Gateway URL in "All Published APIs" Table.

2. Choose "Configuration" from URL dropdown and select "MSP Templates" from side bar. Screenshot attached. You can find the details and documentation of the endpoint in this page.

 

This API Endpoint will apply tenant's template in the respective template group.

 

/configuration/v2/msp/templates/end_customers/{cid}/{device_type}/{version}/{model}/groups

 

 

This API endpoint will apply to all groups within tenant. But with one API call you can apply template to multiple tenants.

 

/configuration/v2/msp/templates/end_customers/{device_type}/{version}/{model}

 

 

You can find the getting started guide for automation in Aruba's Developer Hub. Checkout the Central Product guide section.

https://developer.arubanetworks.com/

 

In addition, we have python scripts in our GitHub Repository that you can use for your automation workflow. Checkout the rest-api-python-scripts section.

https://github.com/aruba/central-examples-only

 

Thanks,

Karthik

Hello,

I am sorry for late reply, but I was on sick leave.

 

I have checked your input and I have to admit that I am still confused.

I verified that API menu MSP Templates under Configuration. That was my first idea, where to search.

 

Maybe I am still missing some pieces in the picture.

 

Basically, there are two API calls which do apply/update (aka HTTP POST method) under MSP Templates.

These API call are handling Template operation. The second one you can specify group, but I do not know how to create group under Tenant using API, so that I could reference it later in Template call.

 

I am struggling to create configuration group (template group) under customer/tenant.

 

API call to create group with MSP access token creates MSP Group. In case template_info under group attribute is set to "true" for particular device, then MSP group is created, it is not visible in the list of groups under Organization (only counter is increased). You can GET info about groups via API call, they are configured. But you cannot apply it, as it is Template group, which are not supported in MSP.

 

Default group under tenant is UI group.

 

---

 

I had discussion with  Aruba system engineer and he pointed me to the solution to handle it in tenant and handle keys via MSP account.

 

 

---

for me, it is the solution, there is a MSP API for get client_id/secret_id for tenant (customer_id)

 

Hello,

Thank you all for the reply.

 

I have verified documentation and basically the easiest way is to create tokens in tenant and run API calls under tenant. With this approach I am able to create groups, templates and so on.

 

I found the way how to do it in this document:

 

https://help.central.arubanetworks.com/latest/documentation/online_help/content/pdfs/aruba_central_api_gateway_automation_guide.pdf

 

My only concerns are from security point of view how to securely store tokens. But that is for other discussion.

 

BR Martin Orlich

Hi Martin, 

 could you please send me the pdf because I want to make the same work 

Elouassif

------------------------------
Elouassif Abdelaziz
------------------------------

Original Message:
Sent: Jul 20, 2020 05:09 AM
From: Martin Orlich
Subject: Aruba Central MSP - Create Template Group for Tenant

Hello,

Thank you all for the reply.

 

I have verified documentation and basically the easiest way is to create tokens in tenant and run API calls under tenant. With this approach I am able to create groups, templates and so on.

 

I found the way how to do it in this document:

 

https://help.central.arubanetworks.com/latest/documentation/online_help/content/pdfs/aruba_central_api_gateway_automation_guide.pdf

 

My only concerns are from security point of view how to securely store tokens. But that is for other discussion.

 

BR Martin Orlich