Manage Zscaler Internet Access URL categories, allow and deny lists, and read users, locations, rules and Sandbox reports through Zscaler OneAPI.
Explore 44 workflow actions for Zscaler ZIA, including account permissions and operation limits.
35 read actions9 write actions
WORKFLOW ACTIONS
What you can configure.
Choose an action in the workflow builder, connect an account, and map its inputs. These actions are available in the catalog; your account access and a successful test determine whether they work for your setup.
Activate changes
Write
Activate the saved configuration changes, as the Admin Portal's Activate does.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Create custom URL category
Write
Create a custom URL category; activate changes to apply it.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Delete custom URL category
Write
Delete a custom URL category.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Delete IP destination group
Write
Delete a destination IP group.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Delete rule label
Write
Delete a rule label.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Delete user
Write
Delete a user.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Get activation status
Read
Read whether saved changes are active, pending or activating.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get allowlist
Read
Read the URLs whose content is not scanned.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get denylist
Read
Read the Advanced Threat Protection denylist.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get department
Read
Read a department.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get firewall rule
Read
Read a firewall filtering rule.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get group
Read
Read a user group.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get IP destination group
Read
Read a destination IP group.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get IP source group
Read
Read a source IP group.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get location
Read
Read a location.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get organization
Read
Read the organization's details.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get rule label
Read
Read a rule label.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get Sandbox quota
Read
Read the Sandbox report quota use.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get Sandbox report
Read
Read the Sandbox verdict for a file by its MD5 hash, as a summary or in full.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get URL category
Read
Read a URL category with its URLs, keywords and IP ranges.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get URL filtering rule
Read
Read a URL filtering rule.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get URL quota
Read
Read how many custom URLs are provisioned and remain.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Get user
Read
Read a user.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List departments
Read
List departments.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List firewall rules
Read
List firewall filtering rules by name, label, action, location, user and addresses.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List groups
Read
List user groups.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List IP destination groups
Read
List destination IP groups.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List IP source groups
Read
List source IP groups.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List location groups
Read
List location groups.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List location names
Read
List location IDs and names, with sublocations when asked.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List locations
Read
List top-level locations by name and settings.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List network services
Read
List network services.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List rule labels
Read
List rule labels.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List sublocations
Read
List a location's sublocations.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List subscriptions
Read
List the organization's subscriptions and licenses.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List time intervals
Read
List time intervals.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List URL categories
Read
List URL categories, custom ones only when asked.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List URL category names
Read
List URL category IDs and names.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List URL filtering rules
Read
List URL filtering rules.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
List users
Read
List users by name, department or group, a page at a time.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Look up URLs
Read
Look up the categories and security alerts of up to 100 URLs.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
Set allowlist
Write
Replace the allowlist (up to 255 URLs); activate changes to apply.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Set denylist
Write
Replace the Advanced Threat Protection denylist (up to 25,000 URLs); activate changes to apply.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
Update URL category
Write
Replace a category's settings, or add or remove URLs with action; activate changes to apply.
Permissions and limits
Account permissions
A Zscaler OneAPI client with a ZIA role in Authentication Service
A repeated request may repeat the external action. Review the previous result before retrying a write.
SETUP
Start with a controlled test.
01Connect the intended account
Use the account and permissions required for your process. Review the connection check before configuring a workflow action.
02Review inputs and access
Select a listed operation and map its required inputs. Use test records and add a human approval before writes that need review.
03Confirm the result
Inspect step outputs and confirm the result in Zscaler ZIA. A saved workflow is not a completed provider action.
Security & Identity ยท CONNECTION
