BeyondTrust - Authorization Requests

Use this integration to handle Beyond Trust authorization requests through XSOAR.

Utilities · BeyondTrust - Authorization Requests

Details

IDBeyondTrust - Authorization Requests
ProviderBeyondTrust
CategoryUtilities
From Version6.0.0
Docker Imagedemisto/python3:3.12.8.3296088
Supported ModulesAgentix XSIAM

README

Use this integration to handle Beyond Trust authorization requests through XSOAR.
This integration was integrated and tested with version 2 of BeyondTrust - Authorization Requests.

Configure BeyondTrust - Authorization Requests in Cortex

Parameter Required
  True
  True
  True
  True

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

bt-authorize-ticket


approve or deny authorization requests for BT.

Base Command

bt-authorize-ticket

Input

Argument Name Description Required
sys_id sctask id. Required
record_id PMC record Id. Required
decision The decision regarding the authorization request. Possible values are: Denied, Approved, Pending. Required
duration action duration (once or in seconds). Possible values are: Once. Required
user The request’s user. Optional

Context Output

There is no context output for this command.

bt-get-ticket


retrieves an existing ticket.

Base Command

bt-get-ticket

Input

Argument Name Description Required
sys_id the ticket system ID. Required

Context Output

There is no context output for this command.

Configuration parameters

  • client_id — (required)
  • client_secret — (required)
  • base_url — (required)
  • token_url — (required)

Commands (2)

  • bt-authorize-ticket

    approve or deny authorization requests for BT.

  • bt-get-ticket

    retrieves an existing ticket.

To configure an integration instance, you need your BeyondTrust client secret and client ID. The API key is generated after you configure an API Registration. For detailed instructions, see the [BeyondTrust Password Safe Admin Guide](https://www.beyondtrust.com/docs/privilege-management/console/pm-cloud/configuration/api-settings/view-api-account-details.htm).