zscaler-sdk-python 1.11.0__tar.gz → 1.11.2__tar.gz

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: zscaler-sdk-python
-Version: 1.11.0
+Version: 1.11.2
 Summary: Official Python SDK for the Zscaler Products
 Home-page: https://github.com/zscaler/zscaler-sdk-python
 License: MIT
@@ -716,6 +716,20 @@ The header `x-ratelimit-reset` is returned in the API response for each API call
 * [ZIA Rate Limiting][rate-limiting-zia] for rate limiting requirements.
 * [ZPA Rate Limiting][rate-limiting-zpa] for rate limiting requirements.
 
+## ZPA Update Responses
+
+ZPA update endpoints return `204 No Content`. In that case the SDK returns an object that carries only the `id`;
+its other attributes are model defaults, not data returned by the API. Use `response.get_status()` to detect this,
+and call the matching `get_*` method to read the updated resource:
+
+```py
+segment, response, err = client.zpa.application_segment.update_segment(segment_id, description="new description")
+if err:
+    ...
+if response.get_status() == 204:
+    segment, _, err = client.zpa.application_segment.get_segment(segment_id)
+```
+
 ## Pagination
 
 The pagination system in this SDK is unified across `ZCC`, `ZTW`, `ZDX`, `ZIA`, `ZPA`, `ZWA`, `ZCell`

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/README.md

@@ -677,6 +677,20 @@ The header `x-ratelimit-reset` is returned in the API response for each API call
 * [ZIA Rate Limiting][rate-limiting-zia] for rate limiting requirements.
 * [ZPA Rate Limiting][rate-limiting-zpa] for rate limiting requirements.
 
+## ZPA Update Responses
+
+ZPA update endpoints return `204 No Content`. In that case the SDK returns an object that carries only the `id`;
+its other attributes are model defaults, not data returned by the API. Use `response.get_status()` to detect this,
+and call the matching `get_*` method to read the updated resource:
+
+```py
+segment, response, err = client.zpa.application_segment.update_segment(segment_id, description="new description")
+if err:
+    ...
+if response.get_status() == 204:
+    segment, _, err = client.zpa.application_segment.get_segment(segment_id)
+```
+
 ## Pagination
 
 The pagination system in this SDK is unified across `ZCC`, `ZTW`, `ZDX`, `ZIA`, `ZPA`, `ZWA`, `ZCell`

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "zscaler-sdk-python"
-version = "1.11.0"
+version = "1.11.2"
 description = "Official Python SDK for the Zscaler Products"
 authors = ["Zscaler, Inc. <devrel@zscaler.com>"]
 license = "MIT"

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/__init__.py

@@ -29,7 +29,7 @@ __license__ = "MIT"
 __contributors__ = [
     "William Guilherme",
 ]
-__version__ = "1.11.0"
+__version__ = "1.11.2"
 
 
 from zscaler.oneapi_client import Client as ZscalerClient  # noqa

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zia/models/cloudappcontrol.py

@@ -112,8 +112,10 @@ class CloudApplicationControl(ZscalerObject):
                 config["formSharingDomainProfiles"] if "formSharingDomainProfiles" in config else [],
                 common_reference.ResourceReference,
             )
-            self.cloud_app_risk_profile = ZscalerCollection.form_list(
-                config["cloudAppRiskProfile"] if "cloudAppRiskProfile" in config else [], common_reference.ResourceReference
+            self.cloud_app_risk_profile = (
+                common_reference.ResourceReference(config["cloudAppRiskProfile"])
+                if config.get("cloudAppRiskProfile")
+                else None
             )
 
             # Assign the cbi_profile as-is; conversions are handled by ZscalerObject

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zia/shadow_it_report.py

@@ -19,7 +19,7 @@ from typing import List, Optional
 from zscaler.api_client import APIClient
 from zscaler.request_executor import RequestExecutor
 from zscaler.types import APIResult
-from zscaler.utils import convert_keys, format_url
+from zscaler.utils import format_url
 from zscaler.zia.models.shadow_it_report import CloudapplicationsAndTags
 
 
@@ -258,7 +258,7 @@ class ShadowITAPI(APIClient):
         result = self.form_response_body(body) if body else {}
         return (result, response, None)
 
-    def export_shadow_it_report(self, duration: str = "LAST_1_DAYS", **kwargs) -> APIResult[dict]:
+    def export_shadow_it_report(self, duration: str = "LAST_1_DAYS", **kwargs) -> APIResult[str]:
         """
         Export the Shadow IT Report (in CSV format) for the cloud applications recognized by Zscaler
         based on their usage in your organisation.
@@ -441,12 +441,12 @@ class ShadowITAPI(APIClient):
                 ``BITS_3072``, ``BITS_384``, ``BITS_4096``, ``BITS_1024``.
 
         Returns:
-            :obj:`str`: The Shadow IT Report in CSV format.
+            :obj:`Tuple`: A tuple containing (CSV report as ``str``, Response, error)
 
         Examples:
             Export the Shadow IT Report for the last 7 days::
 
-                report = zia.shadow_it.export_shadow_it_report('LAST_7_DAYS')
+                report, _, err = client.zia.shadow_it_report.export_shadow_it_report(duration="LAST_7_DAYS")
 
         Notes:
             Zscaler has a rate limit of 1 report per-minute, ensure you take this into account when calling this method.
@@ -459,28 +459,21 @@ class ShadowITAPI(APIClient):
         """)
 
         payload = {"duration": duration}
-        payload.update(kwargs)  # Update the payload with kwargs
-        convert_keys(payload)  # Convert keys after updating
-
-        body = {}
-        headers = {"Accept": "text/csv"}  # Explicitly request a CSV response
+        payload.update(kwargs)
 
-        # Creating the request
-        request, error = self._request_executor.create_request(http_method, api_url, body, headers)
+        headers = {"Accept": "text/csv"}
 
+        request, error = self._request_executor.create_request(http_method, api_url, payload, headers)
         if error:
-            return (None, error)
+            return (None, None, error)
 
-        # Executing the request
         response, error = self._request_executor.execute(request)
-
         if error:
-            return (response.get_body(), error)
+            return (None, response, error)
 
-        # Return the CSV content directly
-        return (response.get_body(), None)
+        return (response.get_body(), response, None)
 
-    def export_shadow_it_csv(self, application: str, entity: str, duration: str = "LAST_1_DAYS", **kwargs):
+    def export_shadow_it_csv(self, application: str, entity: str, duration: str = "LAST_1_DAYS", **kwargs) -> APIResult[str]:
         """
         Export the Shadow IT Report (in CSV format) for the list of users or known locations
         identified with using the cloud applications specified in the request. The report
@@ -529,12 +522,14 @@ class ShadowITAPI(APIClient):
                 ``id`` and ``name`` fields specify the department information.
 
         Returns:
-            :obj:`str`: The Shadow IT Report in CSV format.
+            :obj:`Tuple`: A tuple containing (CSV report as ``str``, Response, error)
 
         Examples:
-            Export the Shadow IT Report for GitHub the last 15 days::
+            Export the Shadow IT Report for GitHub users over the last 15 days::
 
-                report = zia.shadow_it.export_shadow_it_report(application="Github", duration="LAST_15_DAYS")
+                report, _, err = client.zia.shadow_it_report.export_shadow_it_csv(
+                    application="Github", entity="USER", duration="LAST_15_DAYS"
+                )
 
         Notes:
             Zscaler has a rate limit of 1 report per-minute, ensure you take this into account when calling this method.
@@ -551,20 +546,15 @@ class ShadowITAPI(APIClient):
                 payload[key] = self._convert_ids_to_dict_list(id_list)
 
         payload.update(kwargs)
-        convert_keys(payload)
 
-        body = {}
         headers = {"Accept": "text/csv"}
-        params = {}
-
-        request, error = self._request_executor.create_request(http_method, api_url, body, headers, params=params)
 
+        request, error = self._request_executor.create_request(http_method, api_url, payload, headers)
         if error:
-            return (None, error)
+            return (None, None, error)
 
         response, error = self._request_executor.execute(request)
-
         if error:
-            return (response.get_body(), error)
+            return (None, response, error)
 
-        return (response.get_body(), None)
+        return (response.get_body(), response, None)

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/app_connector_groups.py

@@ -20,6 +20,7 @@ from zscaler.api_client import APIClient
 from zscaler.request_executor import RequestExecutor
 from zscaler.types import APIResult
 from zscaler.utils import format_url
+from zscaler.zpa.enrollment_certificates import EnrollmentCertificateAPI
 from zscaler.zpa.models.app_connector_groups import AppConnectorGroup
 
 
@@ -33,6 +34,7 @@ class AppConnectorGroupAPI(APIClient):
         self._request_executor: RequestExecutor = request_executor
         customer_id = config["client"].get("customerId")
         self._zpa_base_endpoint = f"/zpa/mgmtconfig/v1/admin/customers/{customer_id}"
+        self._enrollment_certificates = EnrollmentCertificateAPI(request_executor, config)
 
     def list_connector_groups(self, query_params: Optional[dict] = None) -> APIResult[List[AppConnectorGroup]]:
         """
@@ -290,8 +292,11 @@ class AppConnectorGroupAPI(APIClient):
                 The version profile to use. This will automatically set ``override_version_profile`` to True.
                 Accepted values are:
                 ``default``, ``previous_default`` and ``new_release``
-            **enrollment_cert_id (str): ID of the enrollment certificate used for OAuth2 enrollment. 
-                If not set, the provider will automatically look up the "Connector" enrollment certificate by name and populate this attribute for you.
+            **enrollment_cert_id (str):
+                ID of the enrollment certificate used for App Connector enrollment. Required by the ZPA API.
+                If not provided, the SDK looks up the ``Connector`` enrollment certificate via
+                ``client.zpa.enrollment_certificates.list_enrolment(query_params={"search": "Connector"})``
+                and sends its ID. Pass it explicitly to use a different certificate.
 
         Returns:
             :obj:`Tuple`: A tuple containing (AppConnectorGroup, Response, error)
@@ -326,6 +331,12 @@ class AppConnectorGroupAPI(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
+        if not body.get("enrollment_cert_id"):
+            cert, _, error = self._enrollment_certificates.get_enrolment_by_name("Connector")
+            if error:
+                return (None, None, error)
+            body["enrollment_cert_id"] = cert.id
+
         # Create the request
         request, error = self._request_executor.create_request(http_method, api_url, body=body, params=params)
         if error:
@@ -383,6 +394,11 @@ class AppConnectorGroupAPI(APIClient):
                 Accepted values are:
 
                 ``default``, ``previous_default`` and ``new_release``
+            **enrollment_cert_id (str):
+                ID of the enrollment certificate used for App Connector enrollment. Required by the ZPA API.
+                If not provided, the SDK looks up the ``Connector`` enrollment certificate via
+                ``client.zpa.enrollment_certificates.list_enrolment(query_params={"search": "Connector"})``
+                and sends its ID. Pass it explicitly to keep a different certificate.
 
         Returns:
             tuple: A tuple containing (AppConnectorGroup, Response, error)
@@ -418,6 +434,12 @@ class AppConnectorGroupAPI(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
+        if not body.get("enrollment_cert_id"):
+            cert, _, error = self._enrollment_certificates.get_enrolment_by_name("Connector")
+            if error:
+                return (None, None, error)
+            body["enrollment_cert_id"] = cert.id
+
         request, error = self._request_executor.create_request(http_method, api_url, body, {}, params)
         if error:
             return (None, None, error)

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/app_segments_ba.py

@@ -272,9 +272,6 @@ class ApplicationSegmentBAAPI(APIClient):
         microtenant_id = kwargs.get("microtenant_id") or body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         # --- Prevent mixed legacy + structured port range usage ---
         if "tcp_port_ranges" in body and "tcp_port_range" in body:
             return None, None, ValueError("Cannot use both 'tcp_port_ranges' and 'tcp_port_range' in the same request.")
@@ -315,6 +312,9 @@ class ApplicationSegmentBAAPI(APIClient):
         """
         Update an existing browser access application segment.
 
+        Port fields (``tcp_port_range(s)`` / ``udp_port_range(s)``) that are omitted are sent as empty
+        lists and therefore cleared. To keep the existing ports, pass them on every update.
+
         See the
         `Updating Application Segments Using API reference:
         <https://help.zscaler.com/zpa/application-segment-management#/mgmtconfig/v1/admin/customers/{customerId}/application/{applicationId}-put>`_
@@ -409,9 +409,6 @@ class ApplicationSegmentBAAPI(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         if "clientless_app_ids" in body:
             clientless_apps = body.pop("clientless_app_ids")
 

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/app_segments_ba_v2.py

@@ -253,10 +253,6 @@ class AppSegmentsBAV2API(APIClient):
         microtenant_id = kwargs.get("microtenant_id") or body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        # Reformat server_group_ids to match the expected API format (serverGroups)
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         # Auto-add `"app_types": ["BROWSER_ACCESS"]` if missing
         common_apps_dto = kwargs.get("common_apps_dto")
         if common_apps_dto and "apps_config" in common_apps_dto:
@@ -300,6 +296,9 @@ class AppSegmentsBAV2API(APIClient):
         """
         Update an existing browser access application segment.
 
+        Port fields (``tcp_port_range(s)`` / ``udp_port_range(s)``) that are omitted are sent as empty
+        lists and therefore cleared. To keep the existing ports, pass them on every update.
+
         Args:
             segment_id (str): The unique identifier of the application segment.
 
@@ -357,9 +356,6 @@ class AppSegmentsBAV2API(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": gid} for gid in body.pop("server_group_ids")]
-
         # Auto-add `"app_types": ["BROWSER_ACCESS"]` if missing
         common_apps_dto = kwargs.get("common_apps_dto")
         if common_apps_dto and "apps_config" in common_apps_dto:

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/app_segments_inspection.py

@@ -240,10 +240,6 @@ class AppSegmentsInspectionAPI(APIClient):
         if "udp_port_ranges" in body and "udp_port_range" in body:
             return None, None, ValueError("Cannot use both 'udp_port_ranges' and 'udp_port_range' in the same request.")
 
-        # Reformat server_group_ids to match the expected API format (serverGroups)
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         # Auto-add `"app_types": ["INSPECT"]` if missing
         common_apps_dto = kwargs.get("common_apps_dto")
         if common_apps_dto and "apps_config" in common_apps_dto:
@@ -289,6 +285,9 @@ class AppSegmentsInspectionAPI(APIClient):
         """
         Update an AppProtection application segment.
 
+        Port fields (``tcp_port_range(s)`` / ``udp_port_range(s)``) that are omitted are sent as empty
+        lists and therefore cleared. To keep the existing ports, pass them on every update.
+
         Args:
             segment_id (str):
                 The unique identifier for the AppProtection application segment.
@@ -393,9 +392,6 @@ class AppSegmentsInspectionAPI(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": gid} for gid in body.pop("server_group_ids")]
-
         # Auto-add `"app_types": ["INSPECT"]` if missing
         common_apps_dto = kwargs.get("common_apps_dto")
         if common_apps_dto and "apps_config" in common_apps_dto:

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/app_segments_pra.py

@@ -248,10 +248,6 @@ class AppSegmentsPRAAPI(APIClient):
         microtenant_id = kwargs.get("microtenant_id") or body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        # Reformat server_group_ids to match the expected API format (serverGroups)
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         # Auto-add `"app_types": ["SECURE_REMOTE_ACCESS"]` if missing
         common_apps_dto = kwargs.get("common_apps_dto")
         if common_apps_dto and "apps_config" in common_apps_dto:
@@ -295,6 +291,9 @@ class AppSegmentsPRAAPI(APIClient):
         """
         Update an existing application segment.
 
+        Port fields (``tcp_port_range(s)`` / ``udp_port_range(s)``) that are omitted are sent as empty
+        lists and therefore cleared. To keep the existing ports, pass them on every update.
+
         Args:
             segment_id (str): The unique identifier of the application segment.
 
@@ -353,9 +352,6 @@ class AppSegmentsPRAAPI(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": gid} for gid in body.pop("server_group_ids")]
-
         common_apps_dto = kwargs.get("common_apps_dto")
         if common_apps_dto and "apps_config" in common_apps_dto:
             for app_config in common_apps_dto["apps_config"]:

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/application_segment.py

@@ -270,9 +270,6 @@ class ApplicationSegmentAPI(APIClient):
         microtenant_id = kwargs.get("microtenant_id") or body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         # --- Prevent mixed legacy + structured port range usage ---
         if "tcp_port_ranges" in body and "tcp_port_range" in body:
             return None, None, ValueError("Cannot use both 'tcp_port_ranges' and 'tcp_port_range' in the same request.")
@@ -313,6 +310,9 @@ class ApplicationSegmentAPI(APIClient):
         """
         Update an existing application segment.
 
+        Port fields (``tcp_port_range(s)`` / ``udp_port_range(s)``) that are omitted are sent as empty
+        lists and therefore cleared. To keep the existing ports, pass them on every update.
+
         See the
         `Updating Application Segments Using API reference:
         <https://help.zscaler.com/zpa/application-segment-management#/mgmtconfig/v1/admin/customers/{customerId}/application/{applicationId}-put>`_
@@ -405,9 +405,6 @@ class ApplicationSegmentAPI(APIClient):
         microtenant_id = body.get("microtenant_id", None)
         params = {"microtenantId": microtenant_id} if microtenant_id else {}
 
-        if "server_group_ids" in body:
-            body["serverGroups"] = [{"id": group_id} for group_id in body.pop("server_group_ids")]
-
         if "clientless_app_ids" in body:
             clientless_apps = body.pop("clientless_app_ids")
 
@@ -418,18 +415,21 @@ class ApplicationSegmentAPI(APIClient):
             if err:
                 return (None, None, f"Error fetching application segment data: {err}")
 
-            matched_segment = next((app for app in segments_list if app.get("appId") == segment_id), None)
-
-            if not matched_segment:
-                return (None, None, f"Error: No matching clientless App found with appId '{segment_id}' in existing segments.")
-
-            clientless_app_id = matched_segment["id"]
-
             body["clientlessApps"] = []
             for app in clientless_apps:
-                app["appId"] = segment_id
-                app["id"] = clientless_app_id
+                matched_segment = next(
+                    (seg for seg in segments_list if seg.domain == app.get("domain") and str(seg.app_id) == segment_id), None
+                )
+
+                if not matched_segment:
+                    return (
+                        None,
+                        None,
+                        f"Error: No matching clientless App found for domain '{app.get('domain')}' in existing segments.",
+                    )
 
+                app["appId"] = segment_id
+                app["id"] = matched_segment.id
                 body["clientlessApps"].append(app)
 
         if "tcp_port_ranges" in body:

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/enrollment_certificates.py

@@ -143,6 +143,33 @@ class EnrollmentCertificateAPI(APIClient):
             return (None, response, error)
         return (result, response, None)
 
+    def get_enrolment_by_name(self, name: str) -> APIResult[EnrollmentCertificate]:
+        """
+        Returns the enrollment certificate whose name matches ``name`` (case-insensitive).
+
+        Args:
+            name (str): The name of the enrollment certificate, e.g. ``Connector`` or ``Service Edge``.
+
+        Returns:
+            :obj:`Tuple`: A tuple containing (EnrollmentCertificate, Response, error). If no certificate
+            matches, the error is a ``ValueError``.
+
+        Examples:
+            >>> cert, _, err = client.zpa.enrollment_certificates.get_enrolment_by_name("Connector")
+            ... if err:
+            ...     print(f"Error fetching certificate by name: {err}")
+            ...     return
+            ... print(cert.id)
+        """
+        certs, response, error = self.list_enrolment(query_params={"search": name})
+        if error:
+            return (None, response, error)
+
+        cert = next((c for c in certs or [] if (c.name or "").lower() == name.lower()), None)
+        if cert is None or not cert.id:
+            return (None, response, ValueError(f"Enrollment certificate '{name}' not found"))
+        return (cert, response, None)
+
     def add_enrollment_cert(self, **kwargs) -> APIResult[dict]:
         """
         Creates a new Enrollment Certificate.

{zscaler_sdk_python-1.11.0 → zscaler_sdk_python-1.11.2}/zscaler/zpa/models/service_edge_groups.py

@@ -42,6 +42,7 @@ class ServiceEdgeGroup(ZscalerObject):
             self.location = config["location"] if "location" in config else None
             self.version_profile_id = config["versionProfileId"] if "versionProfileId" in config else None
             self.version_profile_name = config["versionProfileName"] if "versionProfileName" in config else None
+            self.enrollment_cert_id = config["enrollmentCertId"] if "enrollmentCertId" in config else None
             self.override_version_profile = config["overrideVersionProfile"] if "overrideVersionProfile" in config else None
             self.version_profile_visibility_scope = (
                 config["versionProfileVisibilityScope"] if "versionProfileVisibilityScope" in config else None
@@ -87,6 +88,7 @@ class ServiceEdgeGroup(ZscalerObject):
             self.version_profile_id = None
             self.override_version_profile = None
             self.version_profile_name = None
+            self.enrollment_cert_id = None
             self.upgrade_priority = None
             self.version_profile_visibility_scope = None
             self.alt_cloud = None
@@ -127,6 +129,7 @@ class ServiceEdgeGroup(ZscalerObject):
             "versionProfileId": self.version_profile_id,
             "overrideVersionProfile": self.override_version_profile,
             "versionProfileName": self.version_profile_name,
+            "enrollmentCertId": self.enrollment_cert_id,
             "upgradePriority": self.upgrade_priority,
             "versionProfileVisibilityScope": self.version_profile_visibility_scope,
             "altCloud": self.alt_cloud,