Group Policy Fields

These fields apply to the group_policy_added, group_policy_changed, and group_policy_removed events. Group policy events also include the Permission Fields.

Field	Value	Explanation
account:disabled	1 or 0	1: The accounts associated with this group policy are disabled. 0: The accounts associated with this group policy are active.
account:expiration	Unix timestamp	The date and time the accounts associated with this group policy will expire, if ever.
allow_override	1 or 0	1: This setting can be overridden by a policy with a lower priority. 0: This setting cannot be overridden by a policy with a lower priority.
comments	string	Any comments associated with this group policy.
id	string	The unique identifier for this group policy.
idle_timeout	integer or site_wide_setting	The maximum number of seconds these users can be idle within the access console before being logged out. The site_wide_setting option defaults to the timeout set on the Management > Security page. If no timeout, uses none.
jumpoints	serialized labeled list	The group's Jumpoint access in the form of permission:id:name, where permission is one of added, removed, or unknown; id is the unique identifier of the Jumpoint; and name is the name of the Jumpoint.
login_code:enabled	1 or 0	1: Users must enter an emailed login code to log in. 0: Users may log in without an emailed login code.
name	string	The name of this group policy.
policy:id	string	The unique identifier of the group policy for which this setting is configured.
policy:name	string	The name of the group policy for which this setting is configured.
priority	integer	The priority of this group policy, in order of execution, starting from 1.
tz	string	The time zone to use for the login schedule for this group policy.