Cisco Identity Services Engine Device Administration - Conditions API

openapi: 3.2.0
info:
  title: Cisco ISE API - Policy Device Administration - Conditions…
  version: 1.0.0
  x-provenance:
    method: harvested
    authored_by: Cisco
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: pubhub.devnetcloud.com
    note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
  x-evidence:
  - type: source
    url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/
  - type: source
    url: https://developer.cisco.com/docs/identity-services-engine/
servers:
- url: https://172.23.9.91:443
  description: Inferred Url
tags:
- name: Device Administration - Conditions
paths:
  /api/v1/policy/device-admin/condition:
    get:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Returns list of library conditions
      description: Device Admin - Returns list of library conditions.
      operationId: getDeviceAdminConditions
      parameters:
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: List of library conditions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionListResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
    post:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Creates a library condition
      description: 'Device Admin - Creates a library condition:


        Library Condition has hierarchical structure which define a set of condition for which authentication and authorization policy rules could be match.


        Condition can be compose from single dictionary attribute name and value using model LibraryConditionAttributes , or from combination of dictionary attributes with logical operation of AND/OR between them, using models: LibraryConditionAndBlock or LibraryConditionOrBlock.


        When using AND/OR blocks, the condition will include inner layers inside these blocks, these layers are built using the inner condition models: ConditionAttributes, ConditionAndBlock, ConditionOrBlock, that represent dynamically built Conditions which are not stored in the conditions Library, or using ConditionReference, which includes an ID to existing stored condition in the library.


        The LibraryCondition models can only be used in the outer-most layer (root of the condition) and must always include the condition name.


        When using one of the 3 inner condition models (ConditionAttributes, ConditionAndBlock, ConditionOrBlock), condition name cannot be included in the request, since these will not be stored in the conditions library, and used only as inner members of the root condition.


        When using ConditionReference model in inner layers, the condition name is not required.


        ConditionReference objects can also include a reference ID to a condition of type TimeAndDate.'
      operationId: postDeviceAdminCondition
      parameters:
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Condition'
              exampleSetFlag: false
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionResponseEntity'
                exampleSetFlag: false
        '201':
          description: Library condition object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
      security:
      - BasicAuth: []
  /api/v1/policy/device-admin/condition/authentication:
    get:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Returns list of library conditions for authentication rules
      description: Device Admin - Returns list of library conditions for authentication rules.
      operationId: getDeviceAdminConditionsForAuthenticationRule
      parameters:
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: List of library conditions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionListResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
  /api/v1/policy/device-admin/condition/authorization:
    get:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Returns list of library conditions for authorization rules
      description: Device Admin - Returns list of library conditions for authorization rules.
      operationId: getDeviceAdminConditionsForAuthorizationRule
      parameters:
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: List of library conditions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionListResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
  /api/v1/policy/device-admin/condition/condition-by-name/{conditionName}:
    get:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Returns a library condition
      description: Device Admin - Returns a library condition.
      operationId: getDeviceAdminConditionByConditionName
      parameters:
      - name: conditionName
        in: path
        description: Condition name
        required: true
        style: simple
        schema:
          type: string
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: Library condition object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
    put:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Update library condition by condition name
      description: Device Admin - Update library condition using condition name.
      operationId: putDeviceAdminConditionByConditionName
      parameters:
      - name: conditionName
        in: path
        description: Condition name
        required: true
        style: simple
        schema:
          type: string
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Condition'
              exampleSetFlag: false
      responses:
        '200':
          description: Library condition object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionResponseEntity'
                exampleSetFlag: false
        '201':
          description: Created
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
    delete:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Delete a library condition by condition Name
      description: NDevice Admin - Delete a library condition using condition Name.
      operationId: deleteDeviceAdminConditionByConditionName
      parameters:
      - name: conditionName
        in: path
        description: Condition name
        required: true
        style: simple
        schema:
          type: string
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: Response with object ID
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdResponseEntity'
                exampleSetFlag: false
        '204':
          description: No Content
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
  /api/v1/policy/device-admin/condition/policyset:
    get:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Returns list of library conditions for policy sets
      description: Device Admin - Returns list of library conditions for policy sets.
      operationId: getDeviceAdminConditionsForPolicySet
      parameters:
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: List of library conditions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionListResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
  /api/v1/policy/device-admin/condition/{conditionId}:
    get:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Returns a library condition
      description: Device Admin - Returns a library condition.
      operationId: getDeviceAdminConditionByConditionId
      parameters:
      - name: conditionId
        in: path
        description: Condition id
        required: true
        style: simple
        schema:
          type: string
          format: uuid
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: Library condition object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionResponseEntity'
                exampleSetFlag: false
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
    put:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Update library condition
      description: Device Admin - Update library condition.
      operationId: putDeviceAdminConditionByConditionId
      parameters:
      - name: conditionId
        in: path
        description: Condition id
        required: true
        style: simple
        schema:
          type: string
          format: uuid
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Condition'
              exampleSetFlag: false
      responses:
        '200':
          description: Library condition object
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LibraryConditionResponseEntity'
                exampleSetFlag: false
        '201':
          description: Created
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
    delete:
      tags:
      - Device Administration - Conditions
      summary: Device Admin - Delete a library condition
      description: Device Admin - Delete a library condition.
      operationId: deleteDeviceAdminConditionByConditionId
      parameters:
      - name: conditionId
        in: path
        description: Condition id
        required: true
        style: simple
        schema:
          type: string
          format: uuid
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: request Id, will return in the response headers, and appear in logs
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: Response with object ID
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdResponseEntity'
                exampleSetFlag: false
        '204':
          description: No Content
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: The specified resource was not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                exampleSetFlag: false
      security:
      - BasicAuth: []
components:
  schemas:
    Condition:
      title: Condition
      required:
      - conditionType
      type: object
      properties:
        conditionType:
          type: string
          description: <ul><li>Inidicates whether the record is the condition itself(data) or a logical(or,and) aggregation</li> <li>Data type enum(reference,single) indicates than "conditonId" OR "ConditionAttrs" fields should contain condition data but not both</li> <li>Logical aggreation(and,or) enum indicates that additional conditions are present under the children field</li></ul>
          example: ConditionAttributes
          exampleSetFlag: true
          enum:
          - ConditionAndBlock
          - ConditionAttributes
          - ConditionOrBlock
          - ConditionReference
          - LibraryConditionAndBlock
          - LibraryConditionAttributes
          - LibraryConditionOrBlock
          - TimeAndDateCondition
        isNegate:
          type: boolean
          description: Indicates whereas this condition is in negate mode
          example: false
          exampleSetFlag: true
        link:
          $ref: '#/components/schemas/Link'
          exampleSetFlag: true
      description: <ul><li>Hierarchical structure which defines a set of conditions for which authentication or authorization policy rules could be matched.</li> <li>Logical operations(AND, OR) relationship between conditions are supported</li> <li>Each condition can have subconditions with relation to logical operations</li></ul>
      exampleSetFlag: false
    IdResponseEntity:
      title: IdResponseEntity
      required:
      - id
      type: object
      properties:
        id:
          type: string
          format: uuid
          example: 07da6fd8-5abc-4dc4-bcec-df309dbf4d17
          exampleSetFlag: true
      description: response object containing object ID
      exampleSetFlag: false
    LibraryConditionListResponseEntity:
      title: LibraryConditionListResponseEntity
      required:
      - response
      - version
      type: object
      properties:
        response:
          type: array
          example: '[{"name":"WirelessMAB","conditionType":"LibraryConditionAttributes","description":"Match only wireless MAB","dictionaryName":"Normalised Radius","attributeName":"RadiusFlowType","operator":"equals","attributeValue":"WirelessMAB","id":"ad947f38-7063-4da2-8723-652e0ca2ea41","isNegate":false,"link":{"rel":"self","href":"https://{{ISE_IP}}/api/v1/policy/{{protocol}}/condition/ad947f38-7063-4da2-8723-652e0ca2ea41","type":"application/json"}},{"name":"Wired_MAB","conditionType":"LibraryConditionAttributes","description":"Match only Wired MAB","dictionaryName":"Normalised Radius","attributeName":"RadiusFlowType","operator":"equals","attributeValue":"WiredMAB","id":"ad947f38-7063-4da2-8723-652e0ca2ea42","isNegate":false,"link":{"rel":"self","href":"https://{{ISE_IP}}/api/v1/policy/{{protocol}}/condition/ad947f38-7063-4da2-8723-652e0ca2ea42","type":"application/json"}}]'
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/Condition'
            exampleSetFlag: false
        version:
          type: string
          example: 1.0.0
          exampleSetFlag: true
      exampleSetFlag: false
    LibraryConditionResponseEntity:
      title: LibraryConditionResponseEntity
      required:
      - response
      - version
      type: object
      properties:
        response:
          $ref: '#/components/schemas/Condition'
          exampleSetFlag: true
        version:
          type: string
          example: 1.0.0
          exampleSetFlag: true
      exampleSetFlag: false
    Link:
      title: Link
      required:
      - href
      type: object
      properties:
        href:
          type: string
          example: https://{{ISE_IP}}/api/v1/policy/{{protocol}}/policy-set/{{resource-id}}
          exampleSetFlag: true
        rel:
          type: string
          example: self
          exampleSetFlag: true
          enum:
          - next
          - previous
          - self
          - status
        type:
          type: string
          example: application/json
          exampleSetFlag: true
      exampleSetFlag: false
    Error:
      title: Error
      type: object
      properties:
        code:
          type: string
          example: '400'
          exampleSetFlag: true
        message:
          type: string
          example: Bad Request
          exampleSetFlag: true
      exampleSetFlag: false
  securitySchemes:
    BasicAuth:
      type: http
      description: Basic authorization
      scheme: basic