Remote Access User - Flexible Security Service API References (1.4.0)
Download OpenAPI specification:Download
manage remote access users (Paloalto users)
Get Remote Access Users
Get remote access user resources.
Authorizations:
query Parameters
| id | string ^[a-fA-F0-9]{8}(-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}$ The ID of the resource. |
| userId | string ^[a-zA-Z0-9-_]{1,31}$ A remote access user name of the resource. |
| fraGroupId | string ^[a-fA-F0-9]{8}(-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}$ ID of the FRA group to which the resource belongs. |
| serviceGroupId | string ^[a-fA-F0-9]{8}(-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}$ ID of the service group to which the resource belongs. |
| tenantId | string ^[a-fA-F0-9]{32}$ ID of the tenant to which the resource belongs. |
| includeUserGroups | boolean Default: false Whether to include userGroups field in the response. |
| limit | integer [ 1 .. 32000 ] Default: 32000 Maximum number of remote access users to return. |
| offset | integer >= 0 Default: 0 Offset for pagination. |
| orderBy | string Default: "userId" Value: "userId" Field to sort by. |
| order | string Default: "asc" Enum: "asc" "desc" Sort direction. |
Responses
OK
Bad Request
Unauthorized
Internal Server Error
Service Unavailable
Response samples
- 200
- 400
- 401
- 500
- 503
{- "remoteAccessUsers": [
- {
- "id": "12345678-1234-1234-1234-1234567890a1",
- "userId": "remote-access-user-a",
- "description": "remote-access-user-a",
- "enable": true,
- "userGroups": [
- "12345678-1234-1234-1234-1234567890c1",
- "12345678-1234-1234-1234-1234567890c2"
], - "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "serviceGroupId": "12345678-1234-1234-1234-1234567890b1",
- "tenantId": "1234567890abcdef1234567890abcdef",
- "operationStatus": "COMPLETE",
- "createdAt": "2026-01-22T12:34:56.000Z",
- "updatedAt": "2026-01-22T12:34:56.000Z"
}, - {
- "id": "12345678-1234-1234-1234-1234567890a2",
- "userId": "remote-access-user-b",
- "description": "remote-access-user-b",
- "enable": false,
- "userGroups": [
- "12345678-1234-1234-1234-1234567890c1"
], - "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "serviceGroupId": "12345678-1234-1234-1234-1234567890b2",
- "tenantId": "1234567890abcdef1234567890abcdef",
- "operationStatus": "COMPLETE",
- "createdAt": "2026-01-22T12:34:56.000Z",
- "updatedAt": "2026-01-22T12:34:56.000Z"
}
], - "pagination": {
- "total": 5000,
- "requestedLimit": 1000,
- "returnedCount": 2,
- "offset": 0
}, - "truncation": {
- "truncated": true,
- "reason": "Response size limit exceeded. Not all remote access users are included in the response."
}
}Create Remote Access Users
Create multiple remote access users resources at once.
Authorizations:
Request Body schema: application/json
| remoteAccessUsers required | object (RemoteAccessUserCreateRequest) |
Responses
Accepted
Bad Request
Unauthorized
Conflict
Internal Server Error
Service Unavailable
Request samples
- Payload
{- "remoteAccessUsers": {
- "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "users": [
- {
- "userId": "remote-access-user-a",
- "description": "remote-access-user-a",
- "password": "Passw0rd",
- "userGroups": [
- "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa",
- "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb",
- "cccccccc-cccc-cccc-cccc-cccccccccccc"
], - "enable": true
}, - {
- "userId": "remote-access-user-b",
- "description": "remote-access-user-b",
- "password": "Passw0rd",
- "userGroups": [
- "dddddddd-dddd-dddd-dddd-dddddddddddd",
- "eeeeeeee-eeee-eeee-eeee-eeeeeeeeeeee"
], - "enable": false
}
]
}
}Response samples
- 202
- 400
- 401
- 409
- 500
- 503
{- "remoteAccessUsers": {
- "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "serviceGroupId": "12345678-1234-1234-1234-123456789def",
- "tenantId": "1234567890abcdef1234567890abcdef",
- "userCount": 2,
- "operationId": "99999999-9999-9999-9999-999999999999",
- "operationStatus": "PROCESSING"
}
}Update Remote Access Users
Update multiple remote access users resources at once.
Authorizations:
Request Body schema: application/json
| remoteAccessUsers required | object (RemoteAccessUserUpdateRequest) |
Responses
Accepted
Bad Request
Unauthorized
Not Found
Conflict
Internal Server Error
Service Unavailable
Request samples
- Payload
{- "remoteAccessUsers": {
- "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "users": [
- {
- "id": "87654321-4321-4321-4321-abcdef123456",
- "description": "remote-access-user-a",
- "password": "Passw0rd",
- "enable": true,
- "userGroups": [
- "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa",
- "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb",
- "ffffffff-ffff-ffff-ffff-ffffffffffff"
]
}
]
}
}Response samples
- 202
- 400
- 401
- 404
- 409
- 500
- 503
{- "remoteAccessUsers": {
- "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "serviceGroupId": "12345678-1234-1234-1234-123456789def",
- "tenantId": "1234567890abcdef1234567890abcdef",
- "userCount": 1,
- "operationId": "99999999-9999-9999-9999-999999999998",
- "operationStatus": "PROCESSING"
}
}Delete Remote Access Users
Delete multiple remote access user resources at once.
Authorizations:
Request Body schema: application/json
| remoteAccessUsers required | object (RemoteAccessUserDeleteRequest) |
Responses
Accepted
Bad Request
Unauthorized
Not Found
Conflict
Internal Server Error
Service Unavailable
Request samples
- Payload
{- "remoteAccessUsers": {
- "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "userIds": [
- "87654321-4321-4321-4321-abcdef123456",
- "87654321-4321-4321-4321-abcdef123457"
]
}
}Response samples
- 202
- 400
- 401
- 404
- 409
- 500
- 503
{- "remoteAccessUsers": {
- "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "serviceGroupId": "12345678-1234-1234-1234-123456789def",
- "tenantId": "1234567890abcdef1234567890abcdef",
- "userCount": 2,
- "operationId": "99999999-9999-9999-9999-999999999997",
- "operationStatus": "PROCESSING"
}
}Get Remote Access User
Get remote access user resource.
Authorizations:
path Parameters
| user_id required | string ^[a-fA-F0-9]{8}(-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}$ |
Responses
OK
Bad Request
Unauthorized
Not Found
Internal Server Error
Service Unavailable
Response samples
- 200
- 400
- 401
- 404
- 500
- 503
{- "remoteAccessUser": {
- "id": "87654321-4321-4321-4321-abcdef123456",
- "userId": "remote-access-user-a",
- "description": "remote-access-user-a",
- "enable": true,
- "userGroups": [
- "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa",
- "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb",
- "cccccccc-cccc-cccc-cccc-cccccccccccc"
], - "fraGroupId": "12345678-1234-1234-1234-123456789abc",
- "serviceGroupId": "12345678-1234-1234-1234-123456789def",
- "tenantId": "1234567890abcdef1234567890abcdef",
- "operationStatus": "COMPLETE",
- "createdAt": "2026-01-22T12:34:56.000Z",
- "updatedAt": "2026-01-22T12:34:56.000Z"
}
}