TotalCloud Release 2.25 API
June 29, 2026
Before understanding the API release highlights, learn more about the API server URL to be used in your API requests by referring to the Know Your Qualys API Server URL section. In these API Release Notes, <qualys_base_url> is used in the sample API requests.
New Get Policy v2 API with Pagination Support
Applicable for: 
| New or Updated API | New |
| API Endpoint | /rest/v2/policies |
| Method | GET |
| DTD or XSD changes | Not Applicable |
With this release, we have added the Get Policy v2 API with pagination support to help you reliably retrieve and manage large numbers of policies across AWS, Azure, GCP, and OCI.
Previously, the APIs could return only 100 policies per request, with no pagination. As a result, ingestion was limited to just 100 policies across all cloud platforms, making it challenging to handle larger policy sets. The new pagination capability overcomes this limitation, ensuring complete and scalable policy retrieval.
Sample API: Get Policy (v2)Sample API: Get Policy (v2)
API Request
curl -X 'GET' \ '<qualys_gateway_url>/cloudview-api/rest/v2/policies?pageNo=0&pageSize=50' \ -H 'accept: application/json' \ -H 'Authorization: Bearer <JWT_token>'
Response
{
"content": [
{
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"title": "Azure Database Service Best Practices Policy",
"cloudType": "AZURE",
"version": "1.0",
"createdBy": "SYSTEM",
"modifiedBy": "SYSTEM",
"createdDate": "2020-07-09T11:33:36+0000",
"modifiedDate": "2020-07-09T11:33:36+0000",
"header": "This policy helps in automated auditing and reporting on the Azure Database service resources misconfigurations, unwarranted access and non-standard deployments, and provides remediation steps to manage risks. To help secure your Azure resources, follow these recommendations for the Database services of Azure.",
"steps": [],
"footer": "",
"customerCreated": false,
"type": "SYSTEM_DEFINED_POLICY",
"scope": "GLOBAL",
"controlIds": [
50179,
50243,
50180,
50121,
50122,
50123,
50124,
50221,
50350,
50095,
50098,
50100,
50108,
50013
],
"executionType": "RUN_TIME",
"tagIds": []
},
{
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"title": "GCP Cloud SQL Best Practices Policy",
"cloudType": "GCP",
"version": "1.0",
"createdBy": "SYSTEM",
"modifiedBy": "quays_zn68",
"createdDate": "2020-05-06T12:07:15+0000",
"modifiedDate": "2026-01-30T05:57:46+0000",
"header": "This Policy covers Cloud SQL Service of Google Cloud Platform. The controls in this policy are targeted to Cloud SQL service only.",
"steps": [],
"footer": "",
"customerCreated": true,
"type": "SYSTEM_DEFINED_POLICY",
"scope": "CUSTOMER",
"controlIds": [
52128,
52097,
52069,
52070,
52169,
52106,
52074,
52107,
52112,
52113,
52114,
52146,
52115,
52149,
52150,
52119,
52151,
52152,
52121,
52153,
52122,
52154,
52155,
52061
],
"executionType": "RUN_TIME",
"tagIds": []
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 13,
"totalElements": 25,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Manage Account Tags Across All AWS Inventory APIs
Applicable for:
| New or Updated API | Updated |
| API Endpoint | /rest/v2/resource/{resourceType}/AWS /rest/v1/resource/{resourceType}/uuid/{resourceUuid}/AWS /rest/v1/resource/{resourceType}/AWS |
| Method | GET |
| DTD or XSD changes | Not Applicable |
All AWS Inventory and Evaluation APIs now return account tags in their response payloads.
Key Features:
- Displays account-level tags in inventory details to improve resource context.
- Enables tag compliance validation without relying only on QQL queries.
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/EC2_INSTANCE/AWS?updated=%5Bnow-365d..now%5D&filter=cloud.accountId%3A%2xxxx2485' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"currentPageSize": 1,
"content": [
{
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorUuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorUuids": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
],
"region": "us-east-1",
"name": "Qualys Snapshot Scanner",
"cloudType": "AWS",
"createdOn": "2025-11-20T09:06:20+0000",
"created": "2025-11-20T09:06:20.749+00:00",
"remediationEnabled": null,
"cloudAccountId": "xxxxxxxxxxxx",
"accountAlias": null,
"tags": [
{
"key": "Name",
"value": "Qualys Snapshot Scanner"
},
{
"key": "InstancePurpose",
"value": "Scanning"
},
{
"key": "App",
"value": "qualys-snapshot-scanner"
}
],
"resourceId": "i-0XXXXXX4e",
"controlsFailed": 0,
"qualysTags": null,
"additionalDetails": null,
"deletedFromCloud": null,
"isSnapshotScanEnabled": false,
"accountTags": [
{
"key": "alert_test_key",
"value": "alert_test_val"
},
{
"key": "name",
"value": "automation"
},
{
"key": "Testing3",
"value": "Test_2.15.0-3"
},
{
"key": "auto_master_key",
"value": "auto_master_value"
}
],
"failedControlCids": null,
"notDiscoveredInLast7Days": null,
"instanceId": "i-0XXXXXa4e",
"instanceState": "terminated",
"spotInstanceRequestId": null,
"networkInterfaceAddresses": [],
"privateIpAddress": null,
"secondaryPrivateIpAddress": null,
"elasticIpAddress": null,
"securityGroups": [],
"resourceType": "EC2_INSTANCE",
"instanceType": "t3.xlarge",
"availabilityZone": "us-east-1a",
"imageId": "ami-0XXX2bbce",
"launchTime": "2025-11-20T08:31:21+0000",
"vpcId": null,
"subnetId": null,
"publicDnsName": "",
"privateDnsName": "",
"publicIpAddress": null,
"ipAddress": null,
"instanceStatus": null,
"events": null,
"iamInstanceProfile": null,
"vulnerabilities": null,
"criticalityScore": null,
"arsScore": null,
"vulnerabilityStats": null,
"secretStats": null,
"secrets": null,
"hasSecrets": null,
"iamInstanceProfileRoleDetails": null,
"classifications": null,
"privateIpv6Address": null,
"publicIpv6Address": null,
"sev3Sev4Sev5VulnCount": 0,
"updated": "2025-11-20T09:06:20+0000"
}
],
"hasNext": true,
"totalHits": 43,
"hasContent": true,
"marker": "WzE3NjM2MjXXXXXXXTk5NGUtM2Q2MC04Y2UwXXXXXXXXTdlZGMyMGQxNSJd"
}
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/EC2_INSTANCE/uuid/58eecb45-085c-3598-8794-89662646900e/AWS?updated=%5Bnow-365d..now%5D&filter=cloud.accountId%3A%203xxxx85' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"subnetId": "subnet-04a7xxxx021e0",
"resourceId": "i-081a07xxxxcbe9",
"arsScore": null,
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"availabilityZone": "ap-northeast-3a",
"remediationEnabled": null,
"lastUpdated": "2026-05-11T06:16:49+0000",
"instanceState": "running",
"networkInterfaceAddresses": [
{
"networkInterfaceId": "eni-039xxx54095",
"subnetId": "subnet-04axxxx021e0",
"ipv6Ip": [],
"secondaryPrivateIp": [],
"description": "",
"groups": [
{
"groupName": "launch-wizard-1",
"groupId": "sg-0e9xxxxx1c0b"
}
],
"privateDnsName": "ip-xxx-xx-xx-xxx.ap-northeast-3.compute.internal",
"publicIp": "xx.xxx.xx.xx",
"privateIpAddress": "xxx.xx.xx.xxx"
}
],
"cloudType": "AWS",
"isSnapshotScanEnabled": false,
"events": null,
"iamInstanceProfileRoleDetails": null,
"connectorUuids": [
"17ca8a57-b4ab-37e8-a20d-b4xxxx7e"
],
"imageId": "ami-0430a9fcxxxx225",
"created": "2026-04-16T08:00:49.412+00:00",
"cloudAccountId": "xxxxxxxxxxxxx",
"ipAddress": null,
"privateIpv6Address": null,
"publicDnsName": "xxx-xx-xxx-xx-xx.ap-northeast-3.compute.amazonaws.com",
"secrets": null,
"privateIpAddress": "xxx.xx.xx.xxx",
"tags": [
{
"value": "Osaka",
"key": "Name"
}
],
"launchTime": "2026-04-16T05:14:30+0000",
"classifications": null,
"name": "Osaka",
"secondaryPrivateIpAddress": null,
"region": "ap-northeast-3",
"accountAlias": null,
"controlsFailed": 3,
"notDiscoveredInLast7Days": false,
"accountTags": [
{
"value": "alert_test_val",
"key": "alert_test_key"
},
{
"value": "automation",
"key": "name"
},
{
"value": "Test_2.15.0-3",
"key": "Testing3"
},
{
"value": "auto_master_value",
"key": "auto_master_key"
}
],
"failedControlCids": null,
"publicIpv6Address": null,
"createdOn": "2026-04-16T08:00:49+0000",
"secretStats": null,
"instanceId": "i-081a07d6a1abbcbe9",
"vulnerabilityStats": null,
"vpcId": "vpc-xxxxxxxxxxxxx",
"hasSecrets": null,
"publicIpAddress": "56.155.87.63",
"instanceType": "t3.micro",
"additionalDetails": null,
"connectorUuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"instanceStatus": null,
"iamInstanceProfile": null,
"spotInstanceRequestId": null,
"elasticIpAddress": null,
"sev3Sev4Sev5VulnCount": 0,
"qualysTags": [],
"deletedFromCloud": null,
"vulnerabilities": null,
"securityGroups": [
{
"groupName": "launch-wizard-1",
"groupId": "sg-0e9056xxxxx71c0b"
}
],
"privateDnsName": "ip-172-31-38-195.ap-northeast-3.compute.internal",
"criticalityScore": null,
"resourceType": "EC2_INSTANCE"
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 1,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 43,
"totalElements": 43,
"last": false,
"number": 0,
"size": 1,
"numberOfElements": 1,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/EC2_INSTANCE/AWS?updated=%5Bnow-365d..now%5D&filter=cloud.accountId%3A%20393xxxx485' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorUuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorUuids": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
],
"region": "ap-northeast-3",
"name": "Osaka",
"cloudType": "AWS",
"createdOn": "2026-04-16T08:00:49+0000",
"created": "2026-04-16T08:00:49.412+00:00",
"remediationEnabled": false,
"lastUpdated": "2026-05-11T06:16:49+0000",
"cloudAccountId": "3xxxxx5",
"accountAlias": null,
"tags": [
{
"key": "Name",
"value": "Osaka"
}
],
"resourceId": "i-081axxxxxxcbe9",
"controlsFailed": 3,
"qualysTags": [],
"additionalDetails": null,
"deletedFromCloud": null,
"isSnapshotScanEnabled": false,
"accountTags": [
{
"key": "alert_test_key",
"value": "alert_test_val"
},
{
"key": "name",
"value": "automation"
},
{
"key": "Testing3",
"value": "Test_2.15.0-3"
},
{
"key": "auto_master_key",
"value": "auto_master_value"
}
],
"failedControlCids": null,
"notDiscoveredInLast7Days": null,
"instanceId": "i-xxxxxxxxxxxxxxxx",
"instanceState": "running",
"spotInstanceRequestId": null,
"networkInterfaceAddresses": [
{
"networkInterfaceId": "eni-0391c0xxxx95",
"description": "",
"subnetId": "subnet-04a7f41xxx021e0",
"groups": [
{
"groupName": "launch-wizard-1",
"groupId": "sg-0e90xxxx71c0b"
}
],
"privateDnsName": "ip-172-31-38-195.ap-northeast-3.compute.internal",
"privateIpAddress": "172.31.38.195",
"secondaryPrivateIp": [],
"publicIp": "56.155.87.63",
"ipv6Ip": []
}
],
"privateIpAddress": "xxx.xx.xx.xxx",
"secondaryPrivateIpAddress": null,
"elasticIpAddress": null,
"securityGroups": [
{
"groupId": "sg-0e905xxxxx1c0b",
"groupName": "launch-wizard-1"
}
],
"resourceType": "EC2_INSTANCE",
"instanceType": "t3.micro",
"availabilityZone": "ap-northeast-3a",
"imageId": "ami-0430a9fcd912f6225",
"launchTime": "2026-04-16T05:14:30+0000",
"vpcId": "vpc-07d37c3f170114456",
"subnetId": "subnet-04a7xxxxx21e0",
"publicDnsName": "ec2-xx-xxx-xx-xx.ap-northeast-3.compute.amazonaws.com",
"privateDnsName": "ip-xxx-xx-xx-xxx.ap-northeast-3.compute.internal",
"publicIpAddress": "xx.xxx.xx.xx",
"ipAddress": null,
"instanceStatus": null,
"events": null,
"iamInstanceProfile": null,
"vulnerabilities": null,
"criticalityScore": null,
"arsScore": null,
"vulnerabilityStats": null,
"secretStats": null,
"secrets": null,
"hasSecrets": null,
"iamInstanceProfileRoleDetails": null,
"classifications": null,
"privateIpv6Address": null,
"publicIpv6Address": null,
"sev3Sev4Sev5VulnCount": 0
}
Manage Exception APIs - Support added for OCI
Applicable for:
| New or Updated API | Updated |
| API Endpoint | /rest/v1/exceptions/{exceptionId} /rest/v1/exceptions/create /rest/v1/exceptions/list /rest/v1/exceptions/delete |
| Method | GET, POST, PUT, DELETE |
| DTD or XSD changes | Not Applicable |
This update adds support for Oracle Cloud Infrastructure (OCI) connectors to the TotalCloud Exception Public APIs. Full CRUD (Create, Read, Update, Delete) operations for OCI cloud exceptions are now available, consistent with existing support for AWS, Azure, and GCP.
Sample: List all Exceptions for OCISample: List all Exceptions for OCI
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/exceptions/list?pageNo=0&pageSize=50' \ --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
HTTPS request
https://<qualys_platform_url>/cloudview-api/rest/v1/exceptions/list?pageNo=0&pageSize=50'
Response (JSON)
{
"content": [
{
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"name": "OCI Resource Level Exception",
"description": "OCI",
"reason": "Risk Accepted",
"state": "ACTIVE",
"startingDate": "2026-05-17T18:30:00.000Z",
"endingDate": "2026-05-20T18:29:59.000Z",
"createdBy": "qatesxsn",
"updatedBy": "qatesxsn",
"createdOn": "2026-05-18T07:01:05+0000",
"updatedOn": "2026-05-18T07:01:05+0000",
"scope": "CONNECTOR"
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 50,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 1,
"totalElements": 1,
"last": true,
"number": 0,
"size": 50,
"numberOfElements": 1,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Azure Resources API - Support added for new CIEM resource types
Applicable for:
| New or Updated API | Updated |
| API Endpoint | rest/v1/resource/{resourceType}/Azure |
| Method | GET |
| DTD or XSD changes | Not Applicable |
This update enhances the TotalCloud Get Azure Resource API by adding support for the following new Cloud Entity Entitlement Management (CIEM) resource types to provide better visibility into identity and access management resources.
- Tenant-level resources: Entra ID Users, Entra ID Groups, Service Principals, and App Registrations.
- Subscription-level resources: Role Assignments, Role Definitions, Deny Assignments, and Managed Identities.
Sample: Get Managed Identities ResourcesSample: Get Managed Identities Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/MANAGED_IDENTITIES/Azure?pageNo=0&pageSize=2&updated=%5Bnow-3w..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"resourceId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourcegroups/sipatiltestKSPM/providers/Microsoft.ManagedIdentity/userAssignedIdentities/disk-csi-driver-uami-1775627459327",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-29T15:55:55.419+0000",
"displayName": "disk-csi-driver-uami-1775627459327",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "qlys-dev-cvsignature",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "managed_identities",
"resourceGroupName": "sipatiltestKSPM",
"clientId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"isolationScope": "None",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"location": "eastus",
"firstDiscoveredOn": "2026-04-29T15:55:55.419+0000",
"updated": "2026-04-29T15:55:55.419732641Z",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T15:55:55.419705821Z",
"tags": []
},
{
"notDiscoveredInLast7Days": false,
"resourceId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourcegroups/sipatiltestKSPM/providers/Microsoft.ManagedIdentity/userAssignedIdentities/aro-operator-uami-1775627459327",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-29T15:55:55.419+0000",
"displayName": "aro-operator-uami-1775627459327",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "qlys-dev-cvsignature",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "managed_identities",
"resourceGroupName": "sipatiltestKSPM",
"clientId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"isolationScope": "None",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"location": "eastus",
"firstDiscoveredOn": "2026-04-29T15:55:55.419+0000",
"updated": "2026-04-29T15:55:55.419788219Z",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T15:55:55.419762281Z",
"tags": []
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 3,
"totalElements": 52,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Sample: Get Role Definitions ResourcesSample: Get Role Definitions Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/ROLE_DEFINITIONS/Azure?pageNo=0&pageSize=2&updated=%5Bnow-3w..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"resourceId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Authorization/roleDefinitions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-27T13:11:50.2443387Z",
"displayName": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "CloudviewQA2",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "role_definitions",
"updatedBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"dataActions": [],
"description": "Qualys custom role to discover and scan VMs across all subscriptions in the tenant.",
"roleType": "CustomRole",
"firstDiscoveredOn": "2026-04-29T13:26:36.619+0000",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T13:26:36.619593961Z",
"tags": [],
"notActions": [],
"createdBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"roleName": "qualys_snapshot_scanner_role",
"notDataActions": [],
"updated": "2026-04-27T13:11:50.2443387Z",
"actions": [
"Microsoft.Compute/disks/beginGetAccess/action",
"Microsoft.Compute/disks/endGetAccess/action",
"Microsoft.Compute/snapshots/write"
],
"assignableScopes": [
"/providers/Microsoft.Management/managementGroups/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
]
},
{
"notDiscoveredInLast7Days": false,
"resourceId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Authorization/roleDefinitions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-27T13:11:50.2443387Z",
"displayName": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "QFLOW_PERF_SilverWolf",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "role_definitions",
"updatedBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"dataActions": [],
"description": "Qualys custom role to discover and scan VMs across all subscriptions in the tenant.",
"roleType": "CustomRole",
"firstDiscoveredOn": "2026-04-29T13:28:37.509+0000",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T13:28:37.509483091Z",
"tags": [],
"notActions": [],
"createdBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"roleName": "qualys_snapshot_scanner_role",
"notDataActions": [],
"updated": "2026-04-27T13:11:50.2443387Z",
"actions": [
"Microsoft.Compute/disks/beginGetAccess/action",
"Microsoft.Compute/disks/endGetAccess/action",
"Microsoft.Compute/snapshots/write"
],
"assignableScopes": [
"/providers/Microsoft.Management/managementGroups/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
]
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 376,
"totalElements": 7515,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Sample: Get Role Assignment ResourcesSample: Get Role Assignment Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/ROLE_ASSIGNMENT/Azure?pageNo=0&pageSize=2&updated=%5Bnow-24h..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"controlsFailed": 0,
"resourceId": "/providers/Microsoft.Management/managementGroups/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Authorization/roleAssignments/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-27T13:12:55.9352975Z",
"displayName": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "User1",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "role_assignment",
"updatedBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"description": "",
"principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"firstDiscoveredOn": "2026-04-29T15:54:17.392+0000",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T15:54:17.39266579Z",
"tags": [],
"roleDefinitionId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Authorization/roleDefinitions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"createdBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scope": "/providers/Microsoft.Management/managementGroups/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"updated": "2026-04-27T13:12:55.9352975Z",
"principalType": "ServicePrincipal"
},
{
"notDiscoveredInLast7Days": false,
"controlsFailed": 0,
"resourceId": "/providers/Microsoft.Management/managementGroups/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Authorization/roleAssignments/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-27T13:12:54.9069360Z",
"displayName": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "user12",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "role_assignment",
"updatedBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"description": "",
"principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"firstDiscoveredOn": "2026-04-29T15:54:17.392+0000",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T15:54:17.392607035Z",
"tags": [],
"roleDefinitionId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Authorization/roleDefinitions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"createdBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scope": "/providers/Microsoft.Management/managementGroups/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"updated": "2026-04-27T13:12:54.9069360Z",
"principalType": "ServicePrincipal"
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 38,
"totalElements": 752,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Sample: Get Deny Assignment ResourcesSample: Get Deny Assignment Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/DENY_ASSIGNMENT/Azure?pageNo=0&pageSize=2&updated=%5Bnow-24h..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"controlsFailed": 0,
"resourceId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/hktest20/providers/Microsoft.Network/networkSecurityGroups/SecGroupNet/providers/Microsoft.Authorization/denyAssignments/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-07T07:25:46.3532325Z",
"displayName": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "qlys-xxx-xxxxxxx",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "deny_assignment",
"conditionVersion": "2.0",
"updatedBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"isSystemProtected": true,
"dataActions": [],
"description": "Created by Deployment Stack '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Resources/deploymentStacks/denyDeploymentStack'.",
"principals": [
{
"id": "00000000-0000-0000-0000-000000000000",
"type": "SystemDefined"
}
],
"firstDiscoveredOn": "2026-04-29T15:55:54.354+0000",
"excludePrincipals": [],
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T15:55:54.354811909Z",
"tags": [],
"notActions": [
"*/read"
],
"condition": "@Environment[Microsoft.Resources/TokenClaims:ApplicationId] GuidNotEquals xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx || @Request[Microsoft.Resources/headers:deploymentStacksResourceId] StringNotEqualsIgnoreCase '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Resources/deploymentStacks/denyDeploymentStack'",
"denyAssignmentName": "Deny assignment 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' created by Deployment Stack '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Resources/deploymentStacks/denyDeploymentStack'.",
"createdBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scope": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/hktest20/providers/Microsoft.Network/networkSecurityGroups/SecGroupNet",
"notDataActions": [],
"updated": "2026-04-07T07:35:53.5694695Z",
"actions": [
"*"
],
"doNotApplyToChildScopes": true
},
{
"notDiscoveredInLast7Days": false,
"controlsFailed": 0,
"resourceId": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/hktest20/providers/Microsoft.Network/publicIPAddresses/simpleLinuxVMPublicIP/providers/Microsoft.Authorization/denyAssignments/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-07T07:25:44.5286818Z",
"displayName": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"subscriptionName": "qlys-dev-cvsignature",
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"resourceType": "deny_assignment",
"conditionVersion": "2.0",
"updatedBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"isSystemProtected": true,
"dataActions": [],
"description": "Created by Deployment Stack '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Resources/deploymentStacks/denyDeploymentStack'.",
"principals": [
{
"id": "00000000-0000-0000-0000-000000000000",
"type": "SystemDefined"
}
],
"firstDiscoveredOn": "2026-04-29T15:55:54.354+0000",
"excludePrincipals": [],
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T15:55:54.354730111Z",
"tags": [],
"notActions": [
"*/read"
],
"condition": "@Environment[Microsoft.Resources/TokenClaims:ApplicationId] GuidNotEquals xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx || @Request[Microsoft.Resources/headers:deploymentStacksResourceId] StringNotEqualsIgnoreCase '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Resources/deploymentStacks/denyDeploymentStack'",
"denyAssignmentName": "Deny assignment 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' created by Deployment Stack '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/providers/Microsoft.Resources/deploymentStacks/denyDeploymentStack'.",
"createdBy": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"scope": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/hktest20/providers/Microsoft.Network/publicIPAddresses/simpleLinuxVMPublicIP",
"notDataActions": [],
"updated": "2026-04-07T07:35:52.3202925Z",
"actions": [
"*"
],
"doNotApplyToChildScopes": true
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 20,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 1,
"totalElements": 9,
"last": true,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Sample: Get Entra ID ResourcesSample: Get Entra ID Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/ENTRA_ID_USER/Azure?pageNo=0&pageSize=2&updated=%5Bnow-3w..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-21T07:45:56Z",
"displayName": "Bhartesh Surwashi",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_user",
"preferredLanguage": "",
"mail": "[email protected]",
"jobTitle": "",
"givenName": "",
"associatedIdentities": [
"qlxxxx.onmicrosoft.com"
],
"firstDiscoveredOn": "2026-04-29T07:12:06.025+0000",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T13:54:49.598832018Z",
"tags": [],
"identities": "",
"onPremisesSyncEnabled": "No",
"mobilePhone": "",
"officeLocation": "",
"surname": "",
"userType": "Guest",
"updated": "2026-04-29T13:54:49.598891563Z",
"userPrincipalName": "[email protected]"
},
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-20T09:56:15Z",
"displayName": "User1",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_user",
"preferredLanguage": "",
"mail": "",
"jobTitle": "",
"givenName": "",
"associatedIdentities": [
"qlysDev.onmicrosoft.com"
],
"firstDiscoveredOn": "2026-04-29T07:14:02.703+0000",
"uuid": "d0a12adf-bf8d-3949-9c23-df38c2c7cb7e",
"lastDiscoveredOn": "2026-04-29T13:55:59.898985764Z",
"tags": [],
"identities": "",
"onPremisesSyncEnabled": "No",
"mobilePhone": "",
"officeLocation": "",
"surname": "",
"userType": "Member",
"updated": "2026-04-29T13:55:59.899016908Z",
"userPrincipalName": "[email protected]"
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 5561,
"totalElements": 111207,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Sample: Get Entra ID Group ResourcesSample: Get Entra ID Group Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/ENTRA_ID_GROUP/Azure?pageNo=0&pageSize=2&updated=%5Bnow-3w..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-18T13:48:42Z",
"displayName": "ciem_group_in_group",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_group",
"preferredLanguage": "",
"membershipRule": "",
"expirationDateTime": "",
"membershipRuleProcessingState": "",
"mail": "",
"visibility": "",
"mailEnabled": false,
"createdDateTime": "2026-04-18T13:48:42Z",
"description": "",
"firstDiscoveredOn": "2026-04-29T07:14:46.139+0000",
"classification": "",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T13:55:56.510415163Z",
"tags": [],
"onPremisesSyncEnabled": "",
"renewedDateTime": "2026-04-18T13:48:42Z",
"isAssignableToRole": "",
"securityIdentifier": "S-1-12-1-3412842251-1198285635-xxxxxxxxxxxx-xxxxxxxxx",
"securityEnabled": true,
"updated": "2026-04-29T13:55:56.51045078Z",
"mailNickname": "1dcc60db-2"
},
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-17T08:48:08Z",
"displayName": "ciem_rec_group_single_group_multi_mem",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [
"ciem_test_2"
],
"groupIds": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_group",
"preferredLanguage": "",
"membershipRule": "",
"expirationDateTime": "",
"membershipRuleProcessingState": "",
"mail": "",
"visibility": "",
"mailEnabled": false,
"createdDateTime": "2026-04-17T08:48:08Z",
"description": "",
"firstDiscoveredOn": "2026-04-29T07:14:46.139+0000",
"classification": "",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T13:55:56.538375548Z",
"tags": [],
"onPremisesSyncEnabled": "",
"renewedDateTime": "2026-04-17T08:48:08Z",
"isAssignableToRole": "",
"securityIdentifier": "S-1-12-1-1770773698-1211181085-2660371096-2777322049",
"securityEnabled": true,
"updated": "2026-04-29T13:55:56.538465778Z",
"mailNickname": "xxxxxxxx-c"
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 2,
"totalElements": 36,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/ENTRA_ID_APPLICATION_REGISTRATION/Azure?pageNo=0&pageSize=2&updated=%5Bnow-3w..now%5D --header 'accept: */*' \ --header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-24T07:28:19Z",
"displayName": "qualys-cspm",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_app_registration",
"applicationTemplateId": "",
"replyUrl": [],
"notes": "",
"disabledByMicrosoftStatus": "",
"description": "",
"deletedDateTime": "",
"preferredSingleSignOnMode": "",
"createdByAppId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T14:08:06.380549593Z",
"accountEnabled": true,
"samlSingleSignOnSetting": {},
"signInAudience": "AzureADMyOrg",
"oauth2PermissionScope": [],
"servicePrincipalName": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
],
"loginUrl": "",
"appId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tokenEncryptionKeyId": "",
"resourceSpecificApplicationPermissions": [],
"tag": [
"qualys-cspm"
],
"isDisabled": "",
"alternativeName": [],
"keyCredential": [],
"servicePrincipalType": "Application",
"preferredTokenSigningKeyThumbprint": "",
"notificationEmailAddresses": [],
"addIn": [],
"verifiedPublisherDetails": {},
"passwordCredential": [],
"appDisplayName": "qualys-cspm",
"appDescription": "",
"firstDiscoveredOn": "2026-04-29T11:23:40.796+0000",
"appOwnerOrganizationId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tags": [],
"appRoleAssignmentRequired": false,
"information": {},
"updated": "2026-04-29T14:08:06.275+0000",
"appRoles": [],
"homepage": ""
},
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-04-22T02:35:22Z",
"displayName": "cnapp-test-connector-sp",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_app_registration",
"applicationTemplateId": "",
"replyUrl": [],
"notes": "",
"disabledByMicrosoftStatus": "",
"description": "",
"deletedDateTime": "",
"preferredSingleSignOnMode": "",
"createdByAppId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-04-29T13:56:03.327725678Z",
"accountEnabled": true,
"samlSingleSignOnSetting": {},
"signInAudience": "AzureADMyOrg",
"oauth2PermissionScope": [],
"servicePrincipalName": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
],
"loginUrl": "",
"appId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tokenEncryptionKeyId": "",
"resourceSpecificApplicationPermissions": [],
"tag": [],
"isDisabled": "",
"alternativeName": [],
"keyCredential": [],
"servicePrincipalType": "Application",
"preferredTokenSigningKeyThumbprint": "",
"notificationEmailAddresses": [],
"addIn": [],
"verifiedPublisherDetails": {},
"passwordCredential": [],
"appDisplayName": "cnapp-test-connector-sp",
"appDescription": "",
"firstDiscoveredOn": "2026-04-29T11:23:41.020+0000",
"appOwnerOrganizationId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tags": [],
"appRoleAssignmentRequired": false,
"information": {},
"updated": "2026-04-29T13:56:03.227+0000",
"appRoles": [],
"homepage": ""
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 23,
"totalElements": 447,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}
Sample: Get Entra ID Service Principal ResourcesSample: Get Entra ID Service Principal Resources
API request
curl --location '<qualys_platform_url>/cloudview-api/rest/v1/resource/ENTRA_ID_SERVICE_PRINCI… \
--header 'Authorization: Bearer <JWT_token>'
Response (JSON)
{
"content": [
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-06-09T06:30:30Z",
"displayName": "totalai-demo-model/projects/proj-default",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_service_principal",
"applicationTemplateId": "",
"replyUrl": [],
"notes": "",
"disabledByMicrosoftStatus": "",
"description": "",
"deletedDateTime": "",
"preferredSingleSignOnMode": "",
"createdByAppId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-06-09T08:25:04.199502545Z",
"accountEnabled": true,
"samlSingleSignOnSetting": {},
"signInAudience": "",
"oauth2PermissionScope": [],
"servicePrincipalName": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"https://identity.azure.net/BHDvYeo70ePYaCBThwht16CyZM+ogdQq6zINRGeGzWY="
],
"loginUrl": "",
"appId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tokenEncryptionKeyId": "",
"resourceSpecificApplicationPermissions": [],
"tag": [
"AgentCreatedBy:Foundry",
"AgenticInstance"
],
"isDisabled": "",
"alternativeName": [
"isExplicit=False",
"/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourcegroups/russhinde_rg/providers/Microsoft.CognitiveServices/accounts/totalai-demo-model/projects/proj-default"
],
"keyCredential": [
{
"customKeyIdentifier": "FE4DBFDBB13ADFCD0C899AD0FB49980A7050D526",
"startDateTime": "2026-06-09T06:25:00Z",
"displayName": "CN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"usage": "Verify",
"keyId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"endDateTime": "2026-09-07T06:25:00Z",
"type": "AsymmetricX509Cert"
}
],
"servicePrincipalType": "ManagedIdentity",
"preferredTokenSigningKeyThumbprint": "",
"notificationEmailAddresses": [],
"addIn": [],
"verifiedPublisherDetails": {},
"passwordCredential": [],
"appDisplayName": "",
"appDescription": "",
"firstDiscoveredOn": "2026-06-09T08:25:04.199+0000",
"appOwnerOrganizationId": "",
"tags": [],
"appRoleAssignmentRequired": false,
"information": {},
"updated": "2026-06-09T08:25:03.146+0000",
"appRoles": [],
"homepage": ""
},
{
"notDiscoveredInLast7Days": false,
"resourceId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"connectorId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"created": "2026-06-09T06:30:07Z",
"displayName": "totalai-demo-model",
"scanId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"groupNames": [],
"groupIds": [],
"subscriptionName": null,
"customerId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"qualysTags": [],
"region": "all-region",
"resourceType": "entra_id_service_principal",
"applicationTemplateId": "",
"replyUrl": [],
"notes": "",
"disabledByMicrosoftStatus": "",
"description": "",
"deletedDateTime": "",
"preferredSingleSignOnMode": "",
"createdByAppId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"uuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"lastDiscoveredOn": "2026-06-09T08:25:03.881797374Z",
"accountEnabled": true,
"samlSingleSignOnSetting": {},
"signInAudience": "",
"oauth2PermissionScope": [],
"servicePrincipalName": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"https://identity.azure.net/4fUk7XkiO96HSravJZu8J04Bsvf5P667j2qaMdapLWw="
],
"loginUrl": "",
"appId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"tokenEncryptionKeyId": "",
"resourceSpecificApplicationPermissions": [],
"tag": [],
"isDisabled": "",
"alternativeName": [
"isExplicit=False",
"/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourcegroups/russhinde_rg/providers/Microsoft.CognitiveServices/accounts/totalai-demo-model"
],
"keyCredential": [
{
"customKeyIdentifier": "56FC3FE75BA7CEB16A146846CCF033EDEE8D8A83",
"startDateTime": "2026-06-09T06:25:00Z",
"displayName": "CN=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"usage": "Verify",
"keyId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"endDateTime": "2026-09-07T06:25:00Z",
"type": "AsymmetricX509Cert"
}
],
"servicePrincipalType": "ManagedIdentity",
"preferredTokenSigningKeyThumbprint": "",
"notificationEmailAddresses": [],
"addIn": [],
"verifiedPublisherDetails": {},
"passwordCredential": [],
"appDisplayName": "",
"appDescription": "",
"firstDiscoveredOn": "2026-06-09T08:25:03.881+0000",
"appOwnerOrganizationId": "",
"tags": [],
"appRoleAssignmentRequired": false,
"information": {},
"updated": "2026-06-09T08:25:03.541+0000",
"appRoles": [],
"homepage": ""
}
],
"pageable": {
"pageNumber": 0,
"pageSize": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"offset": 0,
"paged": true,
"unpaged": false
},
"totalPages": 69,
"totalElements": 1379,
"last": false,
"number": 0,
"size": 2,
"numberOfElements": 2,
"sort": {
"sorted": false,
"empty": true,
"unsorted": true
},
"first": true,
"empty": false
}