BeyondTrust - Authorization Requests

Use this integration to handle Beyond Trust authorization requests through XSOAR.

Utilities · BeyondTrust - Authorization Requests

Details

IDBeyondTrust - Authorization Requests
ProviderBeyondTrust
CategoryUtilities
From Version6.0.0
Docker Imagedemisto/python3:3.12.8.3296088
Supported ModulesAgentix XSIAM

README

Use this integration to handle Beyond Trust authorization requests through XSOAR.
This integration was integrated and tested with version 2 of BeyondTrust - Authorization Requests.

Configure BeyondTrust - Authorization Requests in Cortex

Parameter Required
  True
  True
  True
  True

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

bt-authorize-ticket


approve or deny authorization requests for BT.

Base Command

bt-authorize-ticket

Input

Argument Name Description Required
sys_id sctask id. Required
record_id PMC record Id. Required
decision The decision regarding the authorization request. Possible values are: Denied, Approved, Pending. Required
duration action duration (once or in seconds). Possible values are: Once. Required
user The request’s user. Optional

Context Output

There is no context output for this command.

bt-get-ticket


retrieves an existing ticket.

Base Command

bt-get-ticket

Input

Argument Name Description Required
sys_id the ticket system ID. Required

Context Output

There is no context output for this command.

Configuration parameters

  • client_id — (required)
  • client_secret — (required)
  • base_url — (required)
  • token_url — (required)

Commands (2)

  • bt-authorize-ticket

    approve or deny authorization requests for BT.

  • bt-get-ticket

    retrieves an existing ticket.

category: Utilities
provider: BeyondTrust
commonfields:
  id: BeyondTrust - Authorization Requests
  version: -1
configuration:
- display: ''
  hiddenpassword: true
  name: client_id
  required: true
  type: 4
- display: ''
  hiddenpassword: true
  name: client_secret
  required: true
  type: 4
- display: ''
  name: base_url
  required: true
  type: 0
- display: ''
  name: token_url
  required: true
  type: 0
display: BeyondTrust - Authorization Requests
name: BeyondTrust - Authorization Requests
description: Use this integration to handle Beyond Trust authorization requests through XSOAR.
script:
  commands:
  - arguments:
    - description: sctask id.
      name: sys_id
      required: true
    - description: PMC record Id.
      name: record_id
      required: true
    - auto: PREDEFINED
      description: The decision regarding the authorization request.
      name: decision
      predefined:
      - Denied
      - Approved
      - Pending
      required: true
    - auto: PREDEFINED
      description: action duration (once or in seconds).
      name: duration
      predefined:
      - Once
      required: true
    - name: user
      description: The request's user.
    description: approve or deny authorization requests for BT.
    name: bt-authorize-ticket
  - arguments:
    - description: the ticket system ID.
      name: sys_id
      required: true
    description: retrieves an existing ticket.
    name: bt-get-ticket
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)