openapi: 3.2.0
info:
title: Cisco ISE API - Policy Device Administration - Conditions API
version: 1.0.0
x-provenance:
method: harvested
authored_by: Cisco
harvested_by: API Evangelist
harvested_on: '2026-08-19'
first_party: true
provider_published: true
source_host: pubhub.devnetcloud.com
note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
x-evidence:
- type: source
url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/
- type: source
url: https://developer.cisco.com/docs/identity-services-engine/
servers:
- url: https://172.23.9.91:443
description: Inferred Url
tags:
- name: Device Administration - Conditions
paths:
/api/v1/policy/device-admin/condition:
get:
tags:
- Device Administration - Conditions
summary: Device Admin - Returns list of library conditions.
description: Device Admin - Returns list of library conditions.
operationId: getDeviceAdminConditions
parameters:
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: List of library conditions
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionListResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
post:
tags:
- Device Administration - Conditions
summary: Device Admin - Creates a library condition.
description: 'Device Admin - Creates a library condition: <ul> <li> Library Condition has hierarchical structure which define a set of condition for which authentication and authorization policy rules could be match.</li> <li> Condition can be compose from single dictionary attribute name and value using model <b>LibraryConditionAttributes</b> , or from combination of dictionary attributes with logical operation of AND/OR between them, using models: <b>LibraryConditionAndBlock</b> or <b>LibraryConditionOrBlock</b>.</li> <li> When using AND/OR blocks, the condition will include inner layers inside these blocks, these layers are built using the inner condition models: <b>ConditionAttributes</b>, <b>ConditionAndBlock</b>, <b>ConditionOrBlock</b>, that represent dynamically built Conditions which are not stored in the conditions Library, or using <b>ConditionReference</b>, which includes an ID to existing stored condition in the library.</li> <li> The LibraryCondition models can only be used in the outer-most layer (root of the condition) and must always include the condition name.</li> <li> When using one of the 3 inner condition models (<b>ConditionAttributes, ConditionAndBlock, ConditionOrBlock</b>), condition name cannot be included in the request, since these will not be stored in the conditions library, and used only as inner members of the root condition.</li> <li> When using <b>ConditionReference</b> model in inner layers, the condition name is not required.</li> <li> ConditionReference objects can also include a reference ID to a condition of type <b>TimeAndDate</b>.</li> </ul> '
operationId: postDeviceAdminCondition
parameters:
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/Condition'
exampleSetFlag: false
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionResponseEntity'
exampleSetFlag: false
'201':
description: Library condition object
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
security:
- BasicAuth: []
/api/v1/policy/device-admin/condition/authentication:
get:
tags:
- Device Administration - Conditions
summary: Device Admin - Returns list of library conditions for authentication rules.
description: Device Admin - Returns list of library conditions for authentication rules.
operationId: getDeviceAdminConditionsForAuthenticationRule
parameters:
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: List of library conditions
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionListResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
/api/v1/policy/device-admin/condition/authorization:
get:
tags:
- Device Administration - Conditions
summary: Device Admin - Returns list of library conditions for authorization rules.
description: Device Admin - Returns list of library conditions for authorization rules.
operationId: getDeviceAdminConditionsForAuthorizationRule
parameters:
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: List of library conditions
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionListResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
/api/v1/policy/device-admin/condition/condition-by-name/{conditionName}:
get:
tags:
- Device Administration - Conditions
summary: Device Admin - Returns a library condition.
description: Device Admin - Returns a library condition.
operationId: getDeviceAdminConditionByConditionName
parameters:
- name: conditionName
in: path
description: Condition name
required: true
style: simple
schema:
type: string
exampleSetFlag: true
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: Library condition object
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
put:
tags:
- Device Administration - Conditions
summary: Device Admin - Update library condition by condition name.
description: Device Admin - Update library condition using condition name.
operationId: putDeviceAdminConditionByConditionName
parameters:
- name: conditionName
in: path
description: Condition name
required: true
style: simple
schema:
type: string
exampleSetFlag: true
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/Condition'
exampleSetFlag: false
responses:
'200':
description: Library condition object
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionResponseEntity'
exampleSetFlag: false
'201':
description: Created
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
delete:
tags:
- Device Administration - Conditions
summary: Device Admin - Delete a library condition by condition Name.
description: NDevice Admin - Delete a library condition using condition Name.
operationId: deleteDeviceAdminConditionByConditionName
parameters:
- name: conditionName
in: path
description: Condition name
required: true
style: simple
schema:
type: string
exampleSetFlag: true
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: Response with object ID
content:
application/json:
schema:
$ref: '#/components/schemas/IdResponseEntity'
exampleSetFlag: false
'204':
description: No Content
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
/api/v1/policy/device-admin/condition/policyset:
get:
tags:
- Device Administration - Conditions
summary: Device Admin - Returns list of library conditions for policy sets.
description: Device Admin - Returns list of library conditions for policy sets.
operationId: getDeviceAdminConditionsForPolicySet
parameters:
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: List of library conditions
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionListResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
/api/v1/policy/device-admin/condition/{conditionId}:
get:
tags:
- Device Administration - Conditions
summary: Device Admin - Returns a library condition.
description: Device Admin - Returns a library condition.
operationId: getDeviceAdminConditionByConditionId
parameters:
- name: conditionId
in: path
description: Condition id
required: true
style: simple
schema:
type: string
format: uuid
exampleSetFlag: true
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: Library condition object
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionResponseEntity'
exampleSetFlag: false
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
put:
tags:
- Device Administration - Conditions
summary: Device Admin - Update library condition.
description: Device Admin - Update library condition.
operationId: putDeviceAdminConditionByConditionId
parameters:
- name: conditionId
in: path
description: Condition id
required: true
style: simple
schema:
type: string
format: uuid
exampleSetFlag: true
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/Condition'
exampleSetFlag: false
responses:
'200':
description: Library condition object
content:
application/json:
schema:
$ref: '#/components/schemas/LibraryConditionResponseEntity'
exampleSetFlag: false
'201':
description: Created
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
delete:
tags:
- Device Administration - Conditions
summary: Device Admin - Delete a library condition.
description: Device Admin - Delete a library condition.
operationId: deleteDeviceAdminConditionByConditionId
parameters:
- name: conditionId
in: path
description: Condition id
required: true
style: simple
schema:
type: string
format: uuid
exampleSetFlag: true
- name: X-Request-ID
in: header
description: request Id, will return in the response headers, and appear in logs
required: false
schema:
type: string
exampleSetFlag: true
responses:
'200':
description: Response with object ID
content:
application/json:
schema:
$ref: '#/components/schemas/IdResponseEntity'
exampleSetFlag: false
'204':
description: No Content
'400':
description: Bad request
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: The specified resource was not found
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
exampleSetFlag: false
security:
- BasicAuth: []
components:
schemas:
Link:
title: Link
required:
- href
type: object
properties:
href:
type: string
example: https://{{ISE_IP}}/api/v1/policy/{{protocol}}/policy-set/{{resource-id}}
exampleSetFlag: true
rel:
type: string
example: self
exampleSetFlag: true
enum:
- next
- previous
- self
- status
type:
type: string
example: application/json
exampleSetFlag: true
exampleSetFlag: false
IdResponseEntity:
title: IdResponseEntity
required:
- id
type: object
properties:
id:
type: string
format: uuid
example: 07da6fd8-5abc-4dc4-bcec-df309dbf4d17
exampleSetFlag: true
description: response object containing object ID
exampleSetFlag: false
Error:
title: Error
type: object
properties:
code:
type: string
example: '400'
exampleSetFlag: true
message:
type: string
example: Bad Request
exampleSetFlag: true
exampleSetFlag: false
Condition:
title: Condition
required:
- conditionType
type: object
properties:
conditionType:
type: string
description: <ul><li>Inidicates whether the record is the condition itself(data) or a logical(or,and) aggregation</li> <li>Data type enum(reference,single) indicates than "conditonId" OR "ConditionAttrs" fields should contain condition data but not both</li> <li>Logical aggreation(and,or) enum indicates that additional conditions are present under the children field</li></ul>
example: ConditionAttributes
exampleSetFlag: true
enum:
- ConditionAndBlock
- ConditionAttributes
- ConditionOrBlock
- ConditionReference
- LibraryConditionAndBlock
- LibraryConditionAttributes
- LibraryConditionOrBlock
- TimeAndDateCondition
isNegate:
type: boolean
description: Indicates whereas this condition is in negate mode
example: false
exampleSetFlag: true
link:
$ref: '#/components/schemas/Link'
exampleSetFlag: true
description: <ul><li>Hierarchical structure which defines a set of conditions for which authentication or authorization policy rules could be matched.</li> <li>Logical operations(AND, OR) relationship between conditions are supported</li> <li>Each condition can have subconditions with relation to logical operations</li></ul>
exampleSetFlag: false
LibraryConditionListResponseEntity:
title: LibraryConditionListResponseEntity
required:
- response
- version
type: object
properties:
response:
type: array
example: '[{"name":"WirelessMAB","conditionType":"LibraryConditionAttributes","description":"Match only wireless MAB","dictionaryName":"Normalised Radius","attributeName":"RadiusFlowType","operator":"equals","attributeValue":"WirelessMAB","id":"ad947f38-7063-4da2-8723-652e0ca2ea41","isNegate":false,"link":{"rel":"self","href":"https://{{ISE_IP}}/api/v1/policy/{{protocol}}/condition/ad947f38-7063-4da2-8723-652e0ca2ea41","type":"application/json"}},{"name":"Wired_MAB","conditionType":"LibraryConditionAttributes","description":"Match only Wired MAB","dictionaryName":"Normalised Radius","attributeName":"RadiusFlowType","operator":"equals","attributeValue":"WiredMAB","id":"ad947f38-7063-4da2-8723-652e0ca2ea42","isNegate":false,"link":{"rel":"self","href":"https://{{ISE_IP}}/api/v1/policy/{{protocol}}/condition/ad947f38-7063-4da2-8723-652e0ca2ea42","type":"application/json"}}]'
exampleSetFlag: true
items:
$ref: '#/components/schemas/Condition'
exampleSetFlag: false
version:
type: string
example: 1.0.0
exampleSetFlag: true
exampleSetFlag: false
LibraryConditionResponseEntity:
title: LibraryConditionResponseEntity
required:
- response
- version
type: object
properties:
response:
$ref: '#/components/schemas/Condition'
exampleSetFlag: true
version:
type: string
example: 1.0.0
exampleSetFlag: true
exampleSetFlag: false
securitySchemes:
BasicAuth:
type: http
description: Basic authorization
scheme: basic