Palo Alto Networks Cloud Dynamic User Groups API

The Cloud Dynamic User Groups API from Palo Alto Networks — 4 operation(s) for cloud dynamic user groups.

Business capability
Identity & Access Management BC-620.20

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /directory-sync/v1/cloud-dug-definition/category List dynamic group categories for a directory · Retrieve Dynamic Group Categories #
Ask an LLM
“Which categories and context attributes can I use to build cloud dynamic user groups?”
“What is the first call to make before creating a cloud dynamic user group?”
Tell an agent
List dynamic user group categories for directory {domain}.
Show the context attributes available in {domain}.
GET /directory-sync/v1/user-attr-values List the values of a user attribute · Retrieve User Attribute Values #
Ask an LLM
“What distinct values does a user attribute like department have in my directory?”
“Can I filter user attribute values by risk source?”
Tell an agent
List all values of attribute {attr} in {domain}.
Show values of {attr} in {domain} for risk source {risk_source}.
POST /directory-sync/v1/cloud-dug-definition Create cloud dynamic user groups · Create Cloud Dynamic User Groups #
Ask an LLM
“How do I create a user group that updates automatically from directory attributes?”
“Can I define several cloud dynamic user groups in one request?”
Tell an agent
Create cloud dynamic user groups {groups} in {domain} with normalized attributes {normalized}.
Define new dynamic groups in directory {domain} from constraints {groups}.
GET /directory-sync/v1/cloud-dug-definition/group List or look up cloud dynamic user groups · Retrieve Cloud Dynamic User Groups #
Ask an LLM
“Which cloud dynamic user groups exist in my directory?”
“Can I fetch all groups in one category or a single group by object GUID?”
Tell an agent
List cloud dynamic user groups in {domain} with normalized attributes {normalized}.
Get the cloud dynamic user group {guid} in {domain}.
PUT /directory-sync/v1/cloud-dug-definition/group Update a cloud dynamic user group · Update Cloud Dynamic User Groups #
Ask an LLM
“How do I change the attribute constraints of an existing cloud dynamic user group?”
“Can I edit a group I already created instead of recreating it?”
Tell an agent
Update cloud dynamic user group definitions {groups} in {domain}.
Edit existing groups in {domain} to {groups} using normalized attributes {normalized}.
DELETE /directory-sync/v1/cloud-dug-definition/group Delete cloud dynamic user groups · Delete Cloud Dynamic User Groups #
Ask an LLM
“How do I delete one cloud dynamic user group by its object GUID?”
“Can I wipe every group in a category at once?”
Tell an agent destructive · confirm first
Delete cloud dynamic user group {guid} in {domain}.
Delete all cloud dynamic user groups in category {def_id} of {domain}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-cloud-dynamic-user-groups-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-cloud-dynamic-user-groups-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: CIE - Cloud Dynamic User Group CRUD Operations APIs Mounted…
  version: 1.0.0
  description: Cloud Dynamic User Groups (CDUG) API for managing dynamic user groups in the Directory Sync Service.
tags:


# --- truncated at 32 KB (46 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-cloud-dynamic-user-groups-api-openapi.yml