Save/Update Device Realm With Policy Groups

Request Overview

The Save/Update Device Realm With Policy Groups method is the combined endpoint the current PAM web UI uses to add or edit a Device Realm together with its Single Connect Policy Group linkage (Policy Enforcement must be enabled). This is the endpoint that changed/was added in newer PAM versions relative to the plain saveDeviceRealms/updateDeviceRealms pair, and is the one to use for the full add/edit Realm flow when policy groups are involved.

Behavior:

• dbId absent/null on the realm object -> create a new device realm.
• dbId set -> update the existing device realm.
• For each entry in policyKeyRealms (existing Policy Realm dbIds), the linked Policy Realm's Policy Groups are replaced with the policyGroups supplied. If policyKeyRealms is empty, a brand-new Policy Realm is created and linked to this device realm using the supplied policyGroups.

Required Fields:

{
  "name": "<name of the realm>",
  "deviceGroups": [ { "dbId": "<device group ID>" } ],
  "userGroups": [ { "id": "<user group ID>" } ],
  "policyGroups": [ { "dbId": "<policy group ID>" } ],
  "policyKeyRealms": [ "<existing Policy Realm dbId, or empty to auto-create>" ]
}