create_bulk_job

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/mandiant/main/json-schema/mandiant-create-bulk-job-schema.json",
  "title": "create_bulk_job",
  "x-generated": "2026-10-20",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/mandiant-ma-sv-openapi.yml#/components/schemas/create_bulk_job",
  "type": "object",
  "required": [
    "id",
    "name",
    "source_actor_tags"
  ],
  "properties": {
    "id": {
      "type": "string",
      "description": "The id of the Sim Action to run when creating the job."
    },
    "name": {
      "type": "string",
      "description": "The name to give the new bulk job."
    },
    "source_actor_tags": {
      "type": "string",
      "description": "Comma separated list of source actors by id."
    },
    "destination_actor_tags": {
      "type": "string",
      "description": "Comma separated list of destination actors by id."
    },
    "tag_combination_strategy": {
      "type": "string",
      "enum": [
        "OR",
        "AND"
      ],
      "description": "Determines how actors are lookedup. 'OR' - any actor with at least one of the tags. 'AND' - any actor with all of the tags.",
      "default": "OR"
    },
    "action_user_profile_id": {
      "type": "string",
      "description": "Action user profile to use when running the job."
    },
    "run_time_params": {
      "type": "array",
      "description": "If supplied, must be of the form 'run_time_params[1][key1]=value1&run_time_params[1][key2]=value2'. Only run_time_params[1]... will be included. Anything starting with run_time_params[2]... etc., will be ignored.",
      "items": {
        "type": "array",
        "items": {
          "type": "string",
          "description": "Hash of runtime params set when running the job."
        }
      }
    }
  }
}