Palo Alto Networks · JSON Structure

Identity Security Posture Management Api Saa S Activity Structure

SaaSActivity schema from Incident Security Service Posture Management API

Type: object Properties: 15
Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

SaaSActivity is a JSON Structure definition published by Palo Alto Networks, describing 15 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

id userId tenant saasInstanceId appType resourceType resourceName activityType clientIP location userAgent summary rawData activityDateTime createdAt

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑ 
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/identity-security-posture-management-api-saa-s-activity-structure.json",
  "name": "SaaSActivity",
  "description": "SaaSActivity schema from Incident Security Service Posture Management API",
  "type": "object",
  "properties": {
    "id": {
      "type": "string"
    },
    "userId": {
      "type": "string"
    },
    "tenant": {
      "type": "string"
    },
    "saasInstanceId": {
      "type": "string"
    },
    "appType": {
      "type": "string"
    },
    "resourceType": {
      "type": "string"
    },
    "resourceName": {
      "type": "string"
    },
    "activityType": {
      "type": "string"
    },
    "clientIP": {
      "type": "string"
    },
    "location": {
      "type": "string"
    },
    "userAgent": {
      "type": "string"
    },
    "summary": {
      "type": "string"
    },
    "rawData": {
      "type": "string"
    },
    "activityDateTime": {
      "type": "datetime"
    },
    "createdAt": {
      "type": "datetime"
    }
  }
}