REST-Call to provision new device with Cisco ISE for TACACS access via Ansible

ise.yml

# REST-Call to provision new device with Cisco ISE for TACACS access
#
# The 'NetworkDeviceGroupList' in the request body needs to be adapted to your environment, or substituted with variables.

---
- name: ISE
  hosts: test_switch
  gather_facts: false
  connection: network_cli
  vars:
    ise_user: <username>
    ise_password: <password>
    tacacs_secret: <secret>

  tasks:

  - name: Provision new device with Cisco ISE for TACACS access
    uri:
      url: https://10.10.10.10:9060/ers/config/networkdevice
      user: "{{ ise_user }}"
      password: "{{ ise_password }}"
      headers:
        Accept: application/json
        content-type: application/json
        ers-media-type: network.networkdevice.1.1
      status_code: 201
      method: POST
      body_format: json
      body: '{"NetworkDevice":{"name": "{{ inventory_hostname }}","description":"nx-os","tacacsSettings":{"sharedSecret":"{{ tacacs_secret }}","connectModeOptions":"ON_LEGACY"},"NetworkDeviceIPList":[{"ipaddress": "{{ ansible_host }}","mask":32}],"NetworkDeviceGroupList":["Location#All Locations#LAN","Device Type#All Device Types#InternalNet"]}}'
      validate_certs: no