The CloudSIEM component primarily provides alert processing and member account management actions for SOAR playbooks.
Actions
| Action | Description | When to use it |
|---|---|---|
createAlert | Writes alert data to the user alert channel. | In playbooks that perform custom detection—use this action to push detected alert data into the CloudSIEM alert pipeline. |
describeAlertsByIncidentUuid | Returns the alerts correlated to an incident, looked up by incident UUID. | When you need to retrieve all alerts associated with a specific incident. Requires an incident UUID obtained from the DescribeCloudSiemEvents API or an upstream action. |
describeSubUserInfo | Returns the member accounts managed by the current management account or delegated administrator. | In multi-account management playbooks that need to enumerate member accounts. |
describeAlertsByIncidentUuid requires an incident UUID as input. Call the DescribeCloudSiemEvents API before this action to get the UUID.Configuration example
The following JSON defines a test playbook that chains all three actions in sequence. Import it into the visualization flow editor to explore and test each action's parameters. For the import procedure, see Playbook import.
Save the example data as a JSON file before importing.
{
"cells": [
{
"position": {
"x": -570,
"y": -170
},
"size": {
"width": 36,
"height": 36
},
"attrs": {
"body": {
"fill": "white",
"strokeOpacity": 0.95,
"stroke": "#63ba4d",
"strokeWidth": 2
},
"label": {
"text": "start",
"fontSize": 12,
"refX": 0.5,
"refY": "100%",
"refY2": 4,
"textAnchor": "middle",
"textVerticalAnchor": "top"
},
"path": {
"stroke": "#63ba4d"
}
},
"visible": true,
"shape": "circle",
"id": "58d87b7d-28d9-4f0e-b135-4adc4f1a70e4",
"zIndex": 1,
"data": {
"nodeType": "startEvent",
"appType": "basic",
"nodeName": "start",
"icon": "icon-circle",
"description": "Playbook start node. A playbook must have one and only one start node, which requires input data configuration for the playbook."
},
"markup": [
{
"tagName": "circle",
"selector": "body"
},
{
"tagName": "text",
"selector": "label"
}
],
"isNode": true
},
{
"shape": "custom-edge",
"attrs": {
"line": {
"stroke": "#63ba4d",
"targetMarker": {
"stroke": "#63ba4d"
}
}
},
"zIndex": 1,
"id": "5293c3f9-e1c9-4a49-b0eb-635067dc67e8",
"data": {
"nodeType": "sequenceFlow",
"appType": "basic",
"icon": "icon-upper-right-arrow",
"isRequired": false
},
"isNode": false,
"source": {
"cell": "58d87b7d-28d9-4f0e-b135-4adc4f1a70e4"
},
"target": {
"cell": "4bae035e-39fe-4f16-8a63-61d55e5fab41"
},
"vertices": []
},
{
"position": {
"x": 590,
"y": -190
},
"size": {
"width": 36,
"height": 36
},
"attrs": {
"body": {
"fill": "white",
"strokeOpacity": 0.95,
"stroke": "#63ba4d",
"strokeWidth": 2
},
"path": {
"r": 12,
"refX": "50%",
"refY": "50%",
"fill": "#63ba4d",
"strokeOpacity": 0.95,
"stroke": "#63ba4d",
"strokeWidth": 4
},
"label": {
"text": "end",
"fontSize": 12,
"refX": 0.5,
"refY": "100%",
"refY2": 4,
"textAnchor": "middle",
"textVerticalAnchor": "top"
}
},
"visible": true,
"shape": "circle",
"id": "317dd1be-2d20-460e-977e-1fc936ffb583",
"zIndex": 1,
"data": {
"nodeType": "endEvent",
"appType": "basic",
"nodeName": "end",
"icon": "icon-radio-off-full",
"description": "end"
},
"markup": [
{
"tagName": "circle",
"selector": "body"
},
{
"tagName": "circle",
"selector": "path"
},
{
"tagName": "text",
"selector": "label"
}
],
"isNode": true
},
{
"position": {
"x": -440,
"y": -185
},
"size": {
"width": 137,
"height": 66
},
"view": "react-shape-view",
"shape": "activity",
"id": "4bae035e-39fe-4f16-8a63-61d55e5fab41",
"zIndex": 1,
"data": {
"nodeType": "action",
"appType": "component",
"nodeName": "createAlert",
"icon": "https://sophon-gen-v2.oss-cn-zhangjiakou.aliyuncs.com/componentUpload/1709541669751_CloudSIEM_logo.png?Expires=1745562674&OSSAccessKeyId=STS.NWc1************&Signature=Vs0tPkphQLQ%2BYZH0gzilupYu%2FFk%3D&security-token=CAIS2AJ1q6Ft5B2yfSjIr5TWeo7nhrxYgLXabFLnqGMePdpq25bnoTz2IHhMenFpAegcv%2Fw%2BlGFZ6%2F8elrp6SJtIXleCZtF94oxN9h2gb4fb404tSmiK0s%2FLI3OaLjKm9u2wCryLYbGwU%2FOpbE%2B%2B5U0X6LDmdDKkckW4OJmS8%2FBOZcgWWQ%2FKBlgvRq0hRG1YpdQdKGHaONu0LxfumRCwNkdzvRdmgm4NgsbWgO%2Fks0OP3AOrlrBN%2Bdiuf8T9NvMBZskvD42Hu8VtbbfE3SJq7BxHybx7lqQs%2B02c5onDWwAJu0%2FXa7uEo4wydVNjFbM9A65Dqufxn%2Fpgt%2Braj4X7xhhEIOVJSSPbSZBbSxJNvU1RXDxQVcEYWxylurjnXvF%2Bo769YMdAf0rM946UoJvc3YDI5hWbc8mJsTnhSSTAEIv%2By8ptqoFOtH7DkLTHWR7hCtv2304sPNLRMytAXxqAAaglhs%2B6DlU%2FIHanI3q9FkX0mo3yfOc0Ss1ZsGvN9%2BnXXtzWGt83MapH5JAn16uLSoj%2BI3t6Am%2FQ5Fn9m3861NqcE61p%2FApRaQsd%2B7W5e064KJpPVqEmSMYmHklczKH7YoajMahNccoLvXJluV8NgTweh8P3HRGYzZqJzn9mGyEfIAA%3D",
"description": "Writes alert data to the user alert channel, used with playbook-based detection.",
"advance": {
"inputParamMode": false,
"onError": "stop_cur_flow",
"rspStatusType": 3,
"rspStatusThreshold": 0
},
"componentName": "CloudSIEM",
"actionName": "createAlert",
"cascaderValue": [],
"valueData": {
"content": "[{\"fieldName\":\"start_time\",\"fieldValue\":\"1745477322\"},{\"fieldName\":\"end_time\",\"fieldValue\":\"\"},{\"fieldName\":\"user_id\",\"fieldValue\":\"1766185894104675\"},{\"fieldName\":\"cloud_code\",\"fieldValue\":\"alibaba_cloud\"},{\"fieldName\":\"product_code\",\"fieldValue\":\"waf\"},{\"fieldName\":\"cloud_user_id\",\"fieldValue\":\"\"},{\"fieldName\":\"extend_content\",\"fieldValue\":\"\"},{\"fieldName\":\"relate_alert_uuids\",\"fieldValue\":\"\"}]"
},
"isDebug": false,
"status": "success"
},
"isNode": true
},
{
"shape": "custom-edge",
"attrs": {
"line": {
"stroke": "#63ba4d",
"targetMarker": {
"stroke": "#63ba4d"
}
}
},
"zIndex": 1,
"id": "86381b78-e22e-46ac-b16e-3c31b83c3e9c",
"data": {
"nodeType": "sequenceFlow",
"appType": "basic",
"icon": "icon-upper-right-arrow",
"isRequired": false
},
"isNode": false,
"source": {
"cell": "4bae035e-39fe-4f16-8a63-61d55e5fab41"
},
"target": {
"cell": "5bbbfdb4-5bd6-4f13-bf24-c4065bb6dd80"
},
"vertices": []
},
{
"position": {
"x": -120,
"y": -185
},
"size": {
"width": 137,
"height": 66
},
"view": "react-shape-view",
"shape": "activity",
"id": "5bbbfdb4-5bd6-4f13-bf24-c4065bb6dd80",
"zIndex": 1,
"data": {
"nodeType": "action",
"appType": "component",
"nodeName": "describeAlertsByIncidentUuid",
"icon": "https://sophon-gen-v2.oss-cn-zhangjiakou.aliyuncs.com/componentUpload/1709541669751_CloudSIEM_logo.png?Expires=1745562674&OSSAccessKeyId=STS.NWc1************&Signature=Vs0tPkphQLQ%2BYZH0gzilupYu%2FFk%3D&security-token=CAIS2AJ1q6Ft5B2yfSjIr5TWeo7nhrxYgLXabFLnqGMePdpq25bnoTz2IHhMenFpAegcv%2Fw%2BlGFZ6%2F8elrp6SJtIXleCZtF94oxN9h2gb4fb404tSmiK0s%2FLI3OaLjKm9u2wCryLYbGwU%2FOpbE%2B%2B5U0X6LDmdDKkckW4OJmS8%2FBOZcgWWQ%2FKBlgvRq0hRG1YpdQdKGHaONu0LxfumRCwNkdzvRdmgm4NgsbWgO%2Fks0OP3AOrlrBN%2Bdiuf8T9NvMBZskvD42Hu8VtbbfE3SJq7BxHybx7lqQs%2B02c5onDWwAJu0%2FXa7uEo4wydVNjFbM9A65Dqufxn%2Fpgt%2Braj4X7xhhEIOVJSSPbSZBbSxJNvU1RXDxQVcEYWxylurjnXvF%2Bo769YMdAf0rM946UoJvc3YDI5hWbc8mJsTnhSSTAEIv%2By8ptqoFOtH7DkLTHWR7hCtv2304sPNLRMytAXxqAAaglhs%2B6DlU%2FIHanI3q9FkX0mo3yfOc0Ss1ZsGvN9%2BnXXtzWGt83MapH5JAn16uLSoj%2BI3t6Am%2FQ5Fn9m3861NqcE61p%2FApRaQsd%2B7W5e064KJpPVqEmSMYmHklczKH7YoajMahNccoLvXJluV8NgTweh8P3HRGYzZqJzn9mGyEfIAA%3D",
"description": "Retrieves the alert list for an event.",
"advance": {
"inputParamMode": false,
"onError": "stop_cur_flow",
"rspStatusType": 3,
"rspStatusThreshold": 0
},
"componentName": "CloudSIEM",
"actionName": "describeAlertsByIncidentUuid",
"cascaderValue": [
{
"label": "createAlert",
"value": "${createAlert}",
"children": [
{
"label": "createAlert.total_data_with_dup",
"name": "createAlert.total_data_with_dup",
"value": "${createAlert.total_data_with_dup}"
},
{
"label": "createAlert.total_data_successful",
"name": "createAlert.total_data_successful",
"value": "${createAlert.total_data_successful}"
},
{
"label": "createAlert.total_data",
"name": "createAlert.total_data",
"value": "${createAlert.total_data}"
},
{
"label": "createAlert.total_exe_successful",
"name": "createAlert.total_exe_successful",
"value": "${createAlert.total_exe_successful}"
},
{
"label": "createAlert.total_exe",
"name": "createAlert.total_exe",
"value": "${createAlert.total_exe}"
},
{
"label": "createAlert.status",
"name": "createAlert.status",
"value": "${createAlert.status}"
}
]
}
],
"valueData": {
"incidentUuid": "test"
},
"status": "success"
},
"isNode": true
},
{
"shape": "custom-edge",
"attrs": {
"line": {
"stroke": "#63ba4d",
"targetMarker": {
"stroke": "#63ba4d"
}
}
},
"zIndex": 1,
"id": "9a5d4522-039a-420f-82a6-1c86d708ac4e",
"data": {
"nodeType": "sequenceFlow",
"appType": "basic",
"icon": "icon-upper-right-arrow",
"isRequired": false
},
"isNode": false,
"source": {
"cell": "5bbbfdb4-5bd6-4f13-bf24-c4065bb6dd80"
},
"target": {
"cell": "118deef0-6fe4-4a36-b1bf-3f6d2d015e95"
},
"vertices": [],
"visible": true,
"router": {
"name": "manhattan",
"args": {
"padding": 5,
"excludeHiddenNodes": true,
"excludeNodes": [
"clone_node_id"
]
}
}
},
{
"position": {
"x": 204,
"y": -185
},
"size": {
"width": 137,
"height": 66
},
"view": "react-shape-view",
"shape": "activity",
"id": "118deef0-6fe4-4a36-b1bf-3f6d2d015e95",
"zIndex": 1,
"data": {
"nodeType": "action",
"appType": "component",
"nodeName": "describeSubUserInfo",
"icon": "https://sophon-gen-v2.oss-cn-zhangjiakou.aliyuncs.com/componentUpload/1709541669751_CloudSIEM_logo.png?Expires=1745562674&OSSAccessKeyId=STS.NWc1************&Signature=Vs0tPkphQLQ%2BYZH0gzilupYu%2FFk%3D&security-token=CAIS2AJ1q6Ft5B2yfSjIr5TWeo7nhrxYgLXabFLnqGMePdpq25bnoTz2IHhMenFpAegcv%2Fw%2BlGFZ6%2F8elrp6SJtIXleCZtF94oxN9h2gb4fb404tSmiK0s%2FLI3OaLjKm9u2wCryLYbGwU%2FOpbE%2B%2B5U0X6LDmdDKkckW4OJmS8%2FBOZcgWWQ%2FKBlgvRq0hRG1YpdQdKGHaONu0LxfumRCwNkdzvRdmgm4NgsbWgO%2Fks0OP3AOrlrBN%2Bdiuf8T9NvMBZskvD42Hu8VtbbfE3SJq7BxHybx7lqQs%2B02c5onDWwAJu0%2FXa7uEo4wydVNjFbM9A65Dqufxn%2Fpgt%2Braj4X7xhhEIOVJSSPbSZBbSxJNvU1RXDxQVcEYWxylurjnXvF%2Bo769YMdAf0rM946UoJvc3YDI5hWbc8mJsTnhSSTAEIv%2By8ptqoFOtH7DkLTHWR7hCtv2304sPNLRMytAXxqAAaglhs%2B6DlU%2FIHanI3q9FkX0mo3yfOc0Ss1ZsGvN9%2BnXXtzWGt83MapH5JAn16uLSoj%2BI3t6Am%2FQ5Fn9m3861NqcE61p%2FApRaQsd%2B7W5e064KJpPVqEmSMYmHklczKH7YoajMahNccoLvXJluV8NgTweh8P3HRGYzZqJzn9mGyEfIAA%3D",
"description": "Retrieves RD account's managed sub-accounts.",
"advance": {
"inputParamMode": false,
"onError": "stop_cur_flow",
"rspStatusType": 3,
"rspStatusThreshold": 0
},
"componentName": "CloudSIEM",
"actionName": "describeSubUserInfo",
"cascaderValue": [
{
"label": "describeAlertsByIncidentUuid",
"value": "${describeAlertsByIncidentUuid}",
"children": []
},
{
"label": "createAlert",
"value": "${createAlert}",
"children": [
{
"label": "createAlert.total_data_with_dup",
"name": "createAlert.total_data_with_dup",
"value": "${createAlert.total_data_with_dup}"
},
{
"label": "createAlert.total_data_successful",
"name": "createAlert.total_data_successful",
"value": "${createAlert.total_data_successful}"
},
{
"label": "createAlert.total_data",
"name": "createAlert.total_data",
"value": "${createAlert.total_data}"
},
{
"label": "createAlert.total_exe_successful",
"name": "createAlert.total_exe_successful",
"value": "${createAlert.total_exe_successful}"
},
{
"label": "createAlert.total_exe",
"name": "createAlert.total_exe",
"value": "${createAlert.total_exe}"
},
{
"label": "createAlert.status",
"name": "createAlert.status",
"value": "${createAlert.status}"
}
]
}
],
"status": "success"
},
"isNode": true
},
{
"shape": "custom-edge",
"attrs": {
"line": {
"stroke": "#63ba4d",
"targetMarker": {
"stroke": "#63ba4d"
}
}
},
"zIndex": 1,
"id": "7e8d0ff4-0e85-46cc-bd4b-2ff7e0a3f739",
"data": {
"nodeType": "sequenceFlow",
"appType": "basic",
"icon": "icon-upper-right-arrow",
"isRequired": false
},
"isNode": false,
"source": {
"cell": "118deef0-6fe4-4a36-b1bf-3f6d2d015e95"
},
"target": {
"cell": "317dd1be-2d20-460e-977e-1fc936ffb583"
},
"vertices": [],
"visible": true,
"router": {
"name": "manhattan",
"args": {
"padding": 5,
"excludeHiddenNodes": true,
"excludeNodes": [
"clone_node_id"
]
}
}
}
]
}createAlert
Writes alert data to the user alert channel. Use this action in custom detection playbooks to push alert data into the CloudSIEM alert pipeline.
Parameters
| Parameter | Description |
|---|---|
start_time | The start timestamp. Unit: seconds. Also marks the time of event occurrence. Example: 1715258000. |
end_time | The end timestamp. Unit: seconds. Example: 1715258321. |
user_id | The Alibaba Cloud account ID that the logs belong to. Example: 127XXXXXX. |
cloud_code | The cloud provider identifier. Valid values: alibaba_cloud, huawei_cloud, tencent_cloud. Example: alibaba_cloud. |
product_code | The product code of the alert source. Example: waf. |
cloud_user_id | The cloud account ID. For Alibaba Cloud accounts, this is the same as aliuid. For other cloud accounts, this is the ID of the bound account. Example: 127XXXXXX. |
extend_content | Extended field content in JSON format. Example: {"a":"111","b":"222"}. |
relate_alert_uuids | The UUID of a related alert. Example: 1001. |
describeAlertsByIncidentUuid
Retrieves the alert list for an event based on the event ID.
Call the DescribeCloudSiemEvents API to get the incident UUID before calling this action.
Parameters
| Parameter | Description |
|---|---|
incidentUuid | The event UUID. |
incidentAccount | The account ID that the event belongs to. Default value: the ID of the logged-in account. |
Output example
{
"AlertDescEn": "The IP address that is used to log on to the server is not within the IP addresses that you specify. We recommend that you check whether the logon is valid.",
"AttCk": [],
"EndTime": "2025-05-07T02:32:55.000+00:00",
"AlertTypeEn": "Unusual Logon",
"LogTime": "2025-05-07T02:32:55.000+00:00",
"GmtModified": "2025-05-08T04:01:47.000+00:00",
"AlertTypeCode": "security_event_config.event_name.unusuallogon",
"SubUserId": 123,
"IsDefend": "0",
"AlertType": "Unusual Logon",
"AlertInfoList": [
{
"KeyName": "${aliyun.siem.alert.host}",
"Values": "ed9aede1-9acd-****-****-16c54d441213",
"Key": "${aliyun.siem.alert.host}"
},
{
"KeyName": "${aliyun.siem.alert.status}",
"Values": "0",
"Key": "${aliyun.siem.alert.status}"
}
],
"AlertTitle": "Unusual Logon-Login with unusual IP",
"AlertDetail": {
"gmtModified": "2025-05-07 10:32:50",
"intra_ip": "192.***.***.51",
"proc_path": "N/A",
"pid": "N/A",
"type": "login_common_ip",
"product_code": "sas",
"uuid": "ed9aede1-9acd-****-****-16c54d441213",
"host_uuid": "ed9aede1-9acd-****-****-16c54d441213",
"loginUser": "administrator",
"protocol": 1,
"os_info": "windows",
"protocolName": "RDP",
"inter_ip": "118.***.***.158",
"cloud_code": "aliyun",
"cloud_user_id": "1766****4675",
"sub_user_id": "1766****4675",
"id": 123,
"assetInfo": "{\"aliUid\":1766****4675,\"bid\":\"233\",\"clientStatus\":\"online\",\"eip\":\"\",\"flag\":0,\"groupId\":91,\"groupName\":\"default\",\"internetIp\":\"118.***.***.158\",\"intranetIp\":\"192.***.0.51\",\"machineInstanceId\":\"i-bp13h2hjh****1pyxngn\",\"machineIp\":\"118.***.***.158\",\"machineName\":\"win11-enterprise-lenovo-manage-x64-zh\",\"machineRegion\":\"cn-hangzhou-dg-a01\",\"machineType\":0,\"os\":\"windows\",\"regionId\":\"cn-hangzhou\",\"status\":\"Running\",\"tag\":\"InternetIp\",\"uuid\":\"ed9aede1-9acd-****-****-16c54d441213\",\"vpcInstanceId\":\"vpc-bp1ih********2hyq8m5\"}",
"cmdLine": "N/A",
"loginSourceIp": "221.***.***.122",
"os": "windows",
"loginTimes": 1,
"gmtCreate": "2025-05-07 10:32:50",
"loginDestinationPort": 3329,
"clientIp": "192.***.***.51",
"location": "Xi'an",
"aliUid": 123,
"host_name": "win11-enterprise-lenovo-manage-x64-zh",
"status": 0,
"siem_vpc_instance_id": "vpc-bp1ihs*****ihq2hyq8m5"
},
"AlertTitleEn": "Unusual Logon-Login with unusual IP",
"AlertLevel": "suspicious",
"AssetList": [
{
"entity_user_id": "1766****4675",
"asset_name": "win11-enterprise-lenovo-manage-x64-zh",
"os_type": "windows",
"cloud_code": "alibaba_cloud",
"asset_type": "host",
"asset_id": "win11-enterprise-lenovo-manage-x64-zh",
"product_code": "sas",
"host_uuid": "ed9aede1-9acd-****-****-16c54d441213",
"host_name": "win11-enterprise-lenovo-manage-x64-zh"
}
],
"AlertNameCode": "security_event_config.event_name.ilp",
"AlertUuid": "sas_7c316ebfa92e79b*****9d62d25c0",
"MainUserId": 12,
"CloudCode": "aliyun",
"AlertName": "Login with unusual IP",
"AlertSrcProd": "Security Center",
"AlertSrcProdModule": "aegis_login_log",
"AlertDescCode": "security_event_config.yd.lcid",
"StartTime": "2025-05-07T02:32:55.000+00:00",
"LogUuid": "sas_3c042c0*****81a7144107",
"EntityList": [
{
"entity_user_id": "1766****4675",
"entity_uuid": "909315f7c595*******b436e65f2d4",
"entity_type": "host",
"entity_name": "win11-enterprise-lenovo-manage-x64-zh",
"os_type": "windows",
"cloud_code": "alibaba_cloud",
"is_asset": "1",
"entity_id": "win11-enterprise-lenovo-manage-x64-zh",
"product_code": "sas",
"host_uuid": "ed9aede1-9acd-****-****-16c54d441213",
"host_name": "win11-enterprise-lenovo-manage-x64-zh"
},
{
"entity_user_id": "1766****4675",
"entity_uuid": "14447f89554d7bb****e389328",
"entity_type": "host_account",
"entity_name": "administrator",
"cloud_code": "alibaba_cloud",
"is_asset": "0",
"entity_id": "administrator",
"product_code": "sas",
"host_uuid": {
"entity_user_id": "17****4675",
"entity_uuid": "90931****5fef0b436e65f2d4",
"entity_type": "host",
"entity_name": "win11-enterprise-lenovo-manage-x64-zh",
"os_type": "windows",
"cloud_code": "alibaba_cloud",
"is_asset": "1",
"entity_id": "win11-enterprise-lenovo-manage-x64-zh",
"product_code": "sas",
"host_uuid": "ed9aede1-9acd-****-****-16c54d441213",
"host_name": "win11-enterprise-lenovo-manage-x64-zh"
},
"username": "administrator"
},
{
"is_private": "0",
"entity_name": "221.**.17.122",
"ip": "221.**.17.122",
"is_asset": "0",
"entity_id": "221.**.17.122",
"product_code": "sas",
"entity_user_id": "176****4104675",
"op_code": "6",
"entity_uuid": "d41d8cd98f00b****800998ecf8427e",
"entity_type": "ip",
"ip_version": "v4",
"cloud_code": "alibaba_cloud",
"net_connectDir": "in",
"aliuid": "1766****4675",
"op_level": "1",
"malware_type": "${aliyun.siem.sas.alert_tag.login_unusual_ip}"
}
],
"SubUserName": "user1",
"OccurTime": "2025-05-07T02:32:55.000+00:00",
"AlertDesc": "The IP address that is used to log on to the server is not within the IP addresses that you specify. We recommend that you check whether the logon is valid.",
"GmtCreate": "2025-05-08T04:01:47.000+00:00",
"AlertNameEn": "Login with unusual IP",
"Id": 123,
"IncidentUuid": "355955f705b34*****4232a"
}describeSubUserInfo
Returns member accounts managed by the current management account or delegated administrator in multi-account management scenarios. Use this action in multi-account management playbooks to enumerate member accounts.
Parameters
| Parameter | Description |
|---|---|
input | No actual meaning. Leave blank. |
Output example
[
{
"SubUserId": "12"
},
{
"SubUserId": "23"
}
]该文章对您有帮助吗？