Feature Request: Support Roles / Incident Field Creation

[Xboarder56]

I have been utilizing this provider and it’s very handy however it would be cool if it could support provisioning roles/incident fields.

Additionally, if a data source could fetch the main host. This could then be used to pass into the account creation for the multi tenant step.

If you don’t plan to support this go ahead and close it out. Thank you again for all the work you have put into this thus far.

[badarsebard]

Roles are possible. The endpoints are there but undocumented. Will take some time to suss out the payloads.

Incident fields have some documented endpoints and some not. Same deal, will take some time.

I'm not sure what parameter in the account creation requires the main host. What data from the main host are you trying to use and where?

[Xboarder56]

I can probably get you some example payloads if it helps for the roles/incident fields and the API endpoints.

For the host I was able to just fill it in as "" and that fixed the issue. Propagation labels I had to leave off because it appears the provider won't create them only utilize existing ones. I run all the tenants on the same single main host.

[badarsebard]

You just use the account attribute. See the example in the docs https://github.com/badarsebard/terraform-provider-xsoar/blob/main/docs/resources/integration_instance.md

The second stanza references StarkIndustries for the account name.