This article will encompass all portalAPI calls that are related to /portalAPI/Tag/* endpoints
Be sure to input the instance your organization exists on for each call. This is indicated with the "INSTANCE" text in each endpoint. Linked here is a KB to find your instance:
Locating Your Organization's Instance | ThreatLocker Help Center
TagGetDowndownOptionsByOrganizationId
https://portalapi.INSTANCE.threatlocker.com/portalapi/Tag/TagGetDowndownOptionsByOrganizationId
- Method: GET
- Description: This API is used when clicking the Modules drop-down menu on the left side of the ThreatLocker Portal, clicking on either Network Control or Web Control, and clicking the New Policy button in the top left of the corresponding page where this API is called to populate the drop-down menu for the Tags available for use with the corresponding policy. This API is also used when modifying an existing Application Control policy that has Ringfencing enabled to populate the drop-down menu for Tags available for use. If looking to return Tags from a different organization than the currently logged in/managed organization, utilize the managedOrganizationId header as described below. When viewing Tags in an organization different from the currently logged in/managed organization, Built-in Tags (if applied), Tags from the direct parent organization, and Tags in the managed organization will be returned and can be used when applying Tags to policies. Tags from a parent organization will be returned with this naming convention: "parentOrganizationName\\tagName"
- Required Body/Parameters
- Requires valid APIKey/Authorization Token in header
- Optional Body/Parameters
- includeBuiltIns: This field determines whether ThreatLocker Built-In Tags will be included in the Tags returned by this API. The default value for this field is false, meaning only Tags created in the organization will be returned by this API.
- Expects: true or false
- In header: "managedOrganizationId": <GUID> in format "00000000-0000-0000-0000-000000000000"
- includeBuiltIns: This field determines whether ThreatLocker Built-In Tags will be included in the Tags returned by this API. The default value for this field is false, meaning only Tags created in the organization will be returned by this API.
- Permissions Needed for User
- Edit Network Control Policies
- Manage Tags
- Manage Community
- View Community
- Edit Application Control Policies
- View Web Control Policies
- Edit Web Control Policies