Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About padgettmv
padgettmv
New here
Member since Jun 20, 2024
Jun 20 2024
Community Record
6
Posts
2
Kudos
0
Solutions
Badges
Jun 21 2024
2:43 PM
I'll have to give it a shot; seems reasonable. We do pull all orgs, but at most we only do a basic sorted list of orgs by customer type flag we have (Enterprise, SMB, etc), then iterate through that customer type. We're not taking into account any distribution of where things are today, but I do know our orgs span multiple based on just seeing the n# change in the path, so I think it makes sense. Thank you for the direction, I'll try it next time I'm in there messing with it.
... View more
Jun 21 2024
7:48 AM
Not sure yet to be honest, but I so have plans to re-write this to not use Meraki's async lib and instead utilize python's threading or something to handle any concurrent operations with the standard Meraki lib (with necessary rate-limiting of course given the API's restriction). Long story short, but at the time it was written, I was not over any Meraki automation, we had a contractor write some scripts to help us with a few operations and this was one of them. We're just hoping to see what may be the issue until that point we can re-write it (or at least get around to testing the other lib out).
... View more
Jun 21 2024
7:39 AM
2 Kudos
I appreciate the suggestion, but it's a bit outside of the scope of the issue. We do use SAML, that is how all our typical business users authenticate into the dashboard as well as our customers. This is specifically for when we need to add local admins (which are typically our Architects who use their API key to run automation, so it's not a common task we're running). As I mentioned in my original post, there are certain tasks that we've encountered that require the use of a local admin built into the Org (like deleting an Org requires SAML to be disabled prior to deleting, see requirements: https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Deleting_an_Organization), hence why we're doing this as a stop-gap permissions/RBAC can be further expanded. ::EDIT:: Now I may be interpreting that doc page incorrectly, I'm partially going off the notes and documentation the previous Meraki architect and developer we had left behind. The understanding was that it required a local admin to Delete (I'm assuming they tested it then). I have not directly tested it, but I can when I encounter another Org that needs deleting.
... View more
Jun 20 2024
7:31 AM
Hmm, so just for clarification, were you adding a user to a base-template Org, then having them set up their user through the invite that gets sent? Or just have them go directly to the dashboard and create an account, even without being tied to an Org yet? We've been adding the user to a base-template Org and the user sets up their account through that invite first, then we run our sync later on, but maybe we should change that up and have the next user create an account directly prior to adding to any Org.
... View more
Jun 20 2024
6:36 AM
I have, this has happened with multiple admin email accounts, both brand new and adding existing users to more Orgs. If I re-run the script, it'll work on an Org that previously failed and then start to fail elsewhere later in the list of Orgs while iterating for the same user. I can re-run the whole script multiple times for the same user and it'll eventually add my new user to all the Orgs without any verification or additional user input in the dashboard. This seems like a queue limit or rate-limiting on Meraki's side with an incorrect response code, but wanted to see if anybody had an idea or experience with the same issue using the same aiomeraki library prior to reaching out to Meraki support. As for the rest of the code; I'm Importing API Keys, taking in user input, getting Org IDs, then passing that input as args to a worker function. All that works fine as I get 200 responses for it 80-90% of the time, then it just suddenly starts returning a 400 Bad Request at a random point in the iteration, using the same exact input args. Respectfully, I honestly don't see how clouding the post with that portion of the code really adds value to the problem description.
... View more
Jun 20 2024
5:34 AM
We have a rather large setup with thousands of organizations (we're an ISP) and one of the challenges we encounter is adding local admins to each org. We have to do this due to the limitation of some actions that can only be done by such an admin. We've built some automation (using python) to allow us to quickly add/remove admins to every organization, however we're struggling to find an answer to an annoying issue. The payload is fine, the script is fine, it works for as many orgs as we can throw at it, we get 200s on most of them. Randomly though, we'll get about 70-80% of the way through and the API Endpoint will start returning 400 Bad Request with a message of: organizations, createOrganizationAdmin - 400 Bad Request, {'errors': ['Email <omitted> is already registered with a Cisco Meraki Dashboard account. For security purposes, that user must verify their email address before administrator permissions can be granted here.']} That email does not exist in the org that returned the error, the user has already verified their email, and the weird part, if we run the script again, it works for that failed Org and then starts to fail later on in the list of orgs with the same thing. Sometimes it works flawlessly and we'll mass add the user to over 1000 orgs, other times we may get 50 orgs before it gives the 400 error. We'd expect a 429 if it was rate-limited, and b/c each iteration of the loop uses the same payload it doesn't seem like the payload itself is bad (confirmed through debugging). We're not really sure what the cause is here, but figured I'd throw it out into the wind and see if anybody had any thoughts. Relevant code snippet: # Imports import json import time import asyncio import platform import meraki.aio import tqdm.asyncio from InquirerPy import inquirer < irrelevant code omitted > # Worker's task, done at each iteration (for each org, using the same args). try: response = await aiomeraki.organizations.createOrganizationAdmin(org["id"], admin_email, admin_name, org_access, tags=[]) except meraki.AsyncAPIError as error: print(f"{org['name']}: {error}")
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 1272 |
© 2024 Cisco Systems, Inc.
