Skip to main content
Zscaler OneAPI app icon

Zscaler OneAPI

This app implements containment and investigative actions for Zscaler Internet AccessBuilt by Splunk LLC
soar product badge
Default Version 1.0.1

August 22, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported

This app implements containment and investigative actions for Zscaler Internet Access

Supported actions

  • test connectivity: Authenticate through OneAPI and read the ZIA configuration activation status.
  • list url categories: List all URL categories
  • block web destination: Add web destinations to the global blocklist
  • remove blocked web destination: Remove web destinations from the global blocklist
  • allow web destination: Add web destinations to the global allowlist
  • remove allowed web destination: Remove web destinations from the global allowlist
  • lookup web destination: Look up ZIA classifications for web destinations
  • get admin users: Get a list of admin users
  • get users: Get users, optionally filtered by name, department, or group
  • get groups: Get a list of groups
  • add user to group: Add a user to a group
  • remove user from group: Remove a user from a group
  • get allowlist: Get web destinations on the allowlist
  • get denylist: Get web destinations on the denylist
  • update user: Update the user with the specified ID
  • add category destination: Add web destinations to a custom URL category
  • remove category destination: Remove web destinations from a custom URL category
  • create destination group: Create a destination group
  • list destination groups: List destination groups
  • edit destination group: Edit a destination group
  • delete destination group: Delete destination groups
  • get departments: Get a list of departments
  • get category details: Get the URLs and keywords of a category
  • make request: Send an authenticated request to a ZIA OneAPI endpoint