WALLIX Bastion

Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

Authentication & Identity Management · WALLIX Bastion

Configuration parameters

  • url — Server URL (e.g. localhost) (required)
  • auth_user — API Auth User (required)
  • auth_key — API Auth Key or user password
  • is_password — Password authentication mode (set false if you provided an API key)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • api_version — API version to use. Leave the field empty to use the latest API version available.
  • timeout — API requests timeout in seconds. The default value is 60 seconds.

Commands (188)

  • wab-add-account-in-global-domain

    Add an account in a global domain category: Domain Accounts.

  • wab-add-account-to-local-domain-of-application

    Add an account to a local domain of an application category: Application Accounts.

  • wab-add-account-to-local-domain-on-device

    Add an account to a local domain on a device category: Device Accounts.

  • wab-add-authorization

    Add an authorization category: Authorizations.

  • wab-add-connection-policy

    Add a connection policy category: Connection Policies.

  • wab-add-credential-to-application-account

    Add a credential to an application account on a local domain category: Application Account Credentials.

  • wab-add-credential-to-device-account

    Add a credential to a device account on a local domain category: Device Account Credentials.

  • wab-add-credential-to-global-domain-account

    Add a credential to a global domain account category: Domain Account Credentials.

  • wab-add-device

    Add a device category: Devices.

  • wab-add-global-domain

    Add a global domain category: Domains.

  • wab-add-local-domain-in-application

    Add a local domain in an application category: Application Local Domains.

  • wab-add-local-domain-in-device

    Add a local domain in a device category: Device Local Domains.

  • wab-add-mapping-in-domain

    Add a mapping in a domain and set mapping fallback. If the field "external_group" is set to "*", it is used as the fallback mapping, which allows mapping of users in the domain that do not belong to the external_group to be mapped to the user_group by default category: Auth Domain Mappings.

  • wab-add-mapping-in-group

    Add a mapping in a group and set mapping fallback. If the field "external_group" is set to "*", it is used as the fallback mapping, which allows mapping of users in the domain that do not belong to the external_group to be mapped to the user group by default category: User Group Mappings.

  • wab-add-notification

    Add a notification category: Notifications.

  • wab-add-password-change-policy

    Add a password change policy. Note: at least password or SSH options must be given in the policy (and both can be used at same time) category: Password Change Policies.

  • wab-add-password-target-to-target-group

    Add a password checkout account to a target group.

  • wab-add-restriction-to-target-group

    Add a restriction in a targetgroup category: Target Group Restrictions.

  • wab-add-restriction-to-usergroup

    Add a restriction to a usergroup category: User Group Restrictions.

  • wab-add-service-in-device

    Add a service in a device category: Device Services.

  • wab-add-session-target-to-target-group

    Add a target account to a target group.

  • wab-add-target-group

    Add a target group category: Target Groups.

  • wab-add-timeframe

    Add a timeframe category: Timeframes.

  • wab-add-timeframe-period

    Add a period to a timeframe category: Timeframes.

  • wab-add-user

    Add a user category: Users.

  • wab-add-user-group

    Add a user group category: User Groups.

  • wab-cancel-accepted-approval

    Cancel an accepted approval. Note: you can cancel an approval only if you are in approvers groups of authorization and the end date is still not reached category: Approvals Assignments.

  • wab-cancel-approval-request

    Cancel an approval request category: Approvals Requests.

  • wab-cancel-scan-job

    Cancel a scan job category: Scan Jobs.

  • wab-change-password-or-ssh-key-of-account

    Change password or SSH key of an account and propagate changes on the target host. If the body is empty, an automatic password change is performed: the password or the SSH key are changed to a newly generated value, according to the password change policy on the domain. Note: the password change must be enabled on the domain, with a plugin that will be used to change the password on the target host category: Account Change Password.

  • wab-check-if-approval-is-required-for-target

    Check if an approval is required for this target (optionally for a given date in future) category: Approvals Requests Target.

  • wab-create-session-request

    Create a session request category: Sessions Requests.

  • wab-delete-account

    Delete an account category: Accounts.

  • wab-delete-account-from-global-domain

    Delete an account from a global domain category: Domain Accounts.

  • wab-delete-account-from-local-domain-of-application

    Delete an account from a local domain of an application category: Application Accounts.

  • wab-delete-account-from-local-domain-of-device

    Delete an account from a local domain of a device category: Device Accounts.

  • wab-delete-application

    Delete an application category: Applications.

  • wab-delete-authorization

    Delete an authorization category: Authorizations.

  • wab-delete-connection-policy

    Delete a connection policy. Note: it is not possible to delete the default Bastion connection policies category: Connection Policies.

  • wab-delete-device

    Delete a device category: Devices.

  • wab-delete-global-domain

    Delete a global domain category: Domains.

  • wab-delete-local-domain-from-application

    Delete a local domain from an application category: Application Local Domains.

  • wab-delete-local-domain-from-device

    Delete a local domain from a device category: Device Local Domains.

  • wab-delete-mapping-of-domain

    Delete the mapping of the given domain category: Auth Domain Mappings.

  • wab-delete-mapping-of-user-group

    Delete the mapping of the given user group category: User Group Mappings.

  • wab-delete-notification

    Delete a notification category: Notifications.

  • wab-delete-password-change-policy

    Delete a password change policy category: Password Change Policies.

  • wab-delete-pending-or-live-session-request

    Delete a pending or a live session request category: Sessions Requests.

  • wab-delete-resource-from-global-domain-account

    delete a resource from the global domain account category: Domain Accounts.

  • wab-delete-restriction-from-targetgroup

    Delete a restriction from a targetgroup category: Target Group Restrictions.

  • wab-delete-restriction-from-usergroup

    Delete a restriction from a usergroup category: User Group Restrictions.

  • wab-delete-scan

    Delete a scan category: Scans.

  • wab-delete-service-from-device

    Delete a service from a device category: Device Services.

  • wab-delete-target-from-group

    Delete a target from a group category: Target Groups.

  • wab-delete-target-group

    Delete a target group category: Target Groups.

  • wab-delete-timeframe

    Delete a timeframe category: Timeframes.

  • wab-delete-user-group

    Delete a user group category: User Groups.

  • wab-edit-account-in-global-domain

    Edit an account in a global domain category: Domain Accounts.

  • wab-edit-account-on-local-domain-of-application

    Edit an account on a local domain of an application category: Application Accounts.

  • wab-edit-account-on-local-domain-of-device

    Edit an account on a local domain of a device category: Device Accounts.

  • wab-edit-application

    Edit an application category: Applications.

  • wab-edit-authorization

    Edit an authorization category: Authorizations.

  • wab-edit-connection-policy

    Edit a connection policy category: Connection Policies.

  • wab-edit-credential-of-application-account

    Edit a credential of an application account on a local domain category: Application Account Credentials.

  • wab-edit-credential-of-device-account

    Edit a credential of an account on a local domain of a device category: Device Account Credentials.

  • wab-edit-credential-of-global-domain-account

    Edit a credential of a global domain account category: Domain Account Credentials.

  • wab-edit-device

    Edit a device category: Devices.

  • wab-edit-mapping-of-domain

    Edit a mapping of a domain category: Auth Domain Mappings.

  • wab-edit-mapping-of-user-group

    Edit a mapping of a user group category: User Group Mappings.

  • wab-edit-mappings-of-domain

    Edit mappings of a domain category: Auth Domain Mappings.

  • wab-edit-notification

    Edit a notification category: Notifications.

  • wab-edit-password-change-policy

    Edit a password change policy category: Password Change Policies.

  • wab-edit-restriction-from-targetgroup

    Edit a restriction from a targetgroup category: Target Group Restrictions.

  • wab-edit-restriction-from-usergroup

    Edit a restriction from a usergroup category: User Group Restrictions.

  • wab-edit-scan

    Edit a scan category: Scans.

  • wab-edit-service-of-device

    Edit a service of a device category: Device Services.

  • wab-edit-session

    Edit a session category: Sessions.

  • wab-edit-target-group

    Edit a target group category: Target Groups.

  • wab-edit-timeframe

    Edit a timeframe category: Timeframes.

  • wab-edit-user

    Edit a user category: Users.

  • wab-edit-user-group

    Edit a user group category: User Groups.

  • wab-extend-duration-time-to-get-passwords-for-target

    Extend the duration time to get the passwords for a given target category: Target Passwords.

  • wab-generate-trace-for-session

    Generate a trace for a session category: Sessions Traces.

  • wab-get-account-of-global-domain

    Get the account of a global domain category: Domain Accounts.

  • wab-get-account-reference

    Get account reference category: Account References.

  • wab-get-account-references

    Get account references category: Account References.

  • wab-get-accounts-of-global-domain

    Get the accounts of a global domain category: Domain Accounts.

  • wab-get-all-accounts

    Get all accounts category: Accounts.

  • wab-get-all-accounts-on-device-local-domain

    Get all accounts on a device local domain category: Device Accounts.

  • wab-get-application

    Get the application category: Applications.

  • wab-get-application-account

    Get the application account category: Application Accounts.

  • wab-get-application-account-credential

    Get the application account credential category: Application Account Credentials.

  • wab-get-application-account-credentials

    Get the application account credentials category: Application Account Credentials.

  • wab-get-application-accounts

    Get the application accounts category: Application Accounts.

  • wab-get-applications

    Get the applications category: Applications.

  • wab-get-approval-request-pending-for-user

    Get the approval request pending for this user (by default the user logged on the REST API), or the approval request with the given id category: Approvals Requests.

  • wab-get-approvals

    Get the approvals category: Approvals.

  • wab-get-approvals-for-all-approvers

    Get the approvals for a given approver category: Approvals Assignments.

  • wab-get-approvals-for-approver

    Get the approvals for a given approver category: Approvals Assignments.

  • wab-get-auth-domain

    Get the auth domain category: Auth Domains.

  • wab-get-auth-domains

    Get the auth domains category: Auth Domains.

  • wab-get-authentication

    Get the authentication category: Authentications.

  • wab-get-authentications

    Get the authentications category: Authentications.

  • wab-get-authorization

    Get the authorization category: Authorizations.

  • wab-get-authorizations

    Get the authorizations category: Authorizations.

  • wab-get-certificate-on-device

    Get the certificate on a device category: Device Certificates.

  • wab-get-certificates-on-device

    Get the certificates on a device category: Device Certificates.

  • wab-get-checkout-policies

    Get the checkout policies category: Checkout Policies.

  • wab-get-checkout-policy

    Get the checkout policy category: Checkout Policies.

  • wab-get-cluster

    Get the cluster category: Clusters.

  • wab-get-clusters

    Get the clusters category: Clusters.

  • wab-get-connection-policies

    Get the connection policies category: Connection Policies.

  • wab-get-connection-policy

    Get the connection policy category: Connection Policies.

  • wab-get-current-serial-configuration-number-of-bastion

    Get current serial configuration number of the Bastion. This number can be used to know if the Bastion configuration was changed category: Configuration Number.

  • wab-get-device

    Get the device category: Devices.

  • wab-get-device-account-credential

    Get one credential of an account on a device local domain category: Device Account Credentials.

  • wab-get-device-account-credentials

    Get all credentials of an account on a device local domain category: Device Account Credentials.

  • wab-get-devices

    Get the devices category: Devices.

  • wab-get-external-authentication

    Get the external authentication category: External Authentications.

  • wab-get-external-authentication-group-mappings

    Get the external authentication group mappings category: Ldap Mappings.

  • wab-get-external-authentications

    Get the external authentications category: External Authentications.

  • wab-get-global-domain

    Get the global domain category: Domains.

  • wab-get-global-domain-account-credential

    Get the credential of a global domain account category: Domain Account Credentials.

  • wab-get-global-domain-account-credentials

    Get the credentials of a global domain account category: Domain Account Credentials.

  • wab-get-global-domains

    Get the global domains category: Domains.

  • wab-get-information-about-wallix-bastion-license

    Get information about the WALLIX Bastion license category: License Info.

  • wab-get-latest-snapshot-of-running-session

    Get the latest snapshot of a running session category: Sessions Snapshots.

  • wab-get-ldap-user-of-domain

    Get the LDAP user of a given domain category: Ldap Users.

  • wab-get-ldap-users-of-domain

    Get the LDAP users of a given domain category: Ldap Users.

  • wab-get-local-domain-data-for-application

    Get local domain data for a given application category: Application Local Domains.

  • wab-get-local-domain-of-device

    Get the local domain of a device category: Device Local Domains.

  • wab-get-local-domains-data-for-application

    Get local domains data for a given application category: Application Local Domains.

  • wab-get-local-domains-of-device

    Get the local domains of a device category: Device Local Domains.

  • wab-get-mapping-of-domain

    Get the mapping of a domain category: Auth Domain Mappings.

  • wab-get-mapping-of-user-group

    Get the mapping of a user group category: User Group Mappings.

  • wab-get-mappings-of-domain

    Get the mappings of a domain category: Auth Domain Mappings.

  • wab-get-mappings-of-user-group

    Get the mappings of a user group category: User Group Mappings.

  • wab-get-notification

    Get the notification category: Notifications.

  • wab-get-notifications

    Get the notifications category: Notifications.

  • wab-get-object-to-onboard

    Get object to onboard, by type (either devices with their linked accounts or global accounts alone) category: Onboarding Objects.

  • wab-get-one-account

    Get one account category: Accounts.

  • wab-get-one-account-on-device-local-domain

    Get one account on a device local domain category: Device Accounts.

  • wab-get-password-change-policies

    Get the password change policies category: Password Change Policies.

  • wab-get-password-change-policy

    Get the password change policy category: Password Change Policies.

  • wab-get-password-for-target

    Get the password for a given target category: Target Passwords.

  • wab-get-passwordrights

    Get current user's or the user 'user_name' password rights on accounts (for checkout/checkin) category: Password Rights.

  • wab-get-passwordrights-user-name

    Get current user's or the user 'user_name' password rights on accounts (for checkout/checkin) category: Password Rights.

  • wab-get-profile

    Get the profile category: Profiles.

  • wab-get-profiles

    Get the profiles category: Profiles.

  • wab-get-scan

    Get the scan category: Scans.

  • wab-get-scanjob

    Get the scanjob category: Scan Jobs.

  • wab-get-scanjobs

    Get the scanjobs category: Scan Jobs.

  • wab-get-scans

    Get the scans category: Scans.

  • wab-get-service-of-device

    Get the service of a device category: Device Services.

  • wab-get-services-of-device

    Get the services of a device category: Device Services.

  • wab-get-session-metadata

    Get the metadata of one or multiple sessions category: Sessions Metadata.

  • wab-get-session-sharing-requests

    Get session sharing requests category: Sessions Requests.

  • wab-get-sessionrights

    Get current user's or the user 'user_name' session rights (connections via proxies) category: Session Rights.

  • wab-get-sessionrights-user-name

    Get current user's or the user 'user_name' session rights (connections via proxies) category: Session Rights.

  • wab-get-sessions

    Get the sessions category: Sessions.

  • wab-get-status-of-trace-generation

    Get the status of a trace generation category: Sessions Traces.

  • wab-get-target-by-type

    Get the target by type category: Targets.

  • wab-get-target-group

    Get the target group category: Target Groups.

  • wab-get-target-group-restriction

    Get one target group restriction category: Target Group Restrictions.

  • wab-get-target-group-restrictions

    Get target group restrictions category: Target Group Restrictions.

  • wab-get-target-groups

    Get the target groups category: Target Groups.

  • wab-get-timeframe

    Get the timeframe category: Timeframes.

  • wab-get-timeframes

    Get the timeframes category: Timeframes.

  • wab-get-user

    Get the user category: Users.

  • wab-get-user-group

    Get the user group category: User Groups.

  • wab-get-user-group-restriction

    Get one user group restriction category: User Group Restrictions.

  • wab-get-user-group-restrictions

    Get user group restrictions category: User Group Restrictions.

  • wab-get-user-groups

    Get the user groups category: User Groups.

  • wab-get-users

    Get the users category: Users.

  • wab-get-version

    Get the REST API and WALLIX Bastion version numbers category: Version.

  • wab-get-wallix-bastion-usage-statistics

    Get the WALLIX Bastion usage statistics. If no from_date or to_date are supplied it will return the statistics for the last full calendar month category: Statistics.

  • wab-getx509-configuration-infos

    Get the X509 configuration infos category: Config X509.

  • wab-make-new-approval-request-to-access-target

    Make a new approval request to access a target. Note: depending on the authorization settings, the fields "ticket" and "comment" may be required category: Approvals Requests.

  • wab-notify-approvers-linked-to-approval-assignment

    Notify approvers linked to an approval request by sending them an email category: Approvals Assignments.

  • wab-notify-approvers-linked-to-approval-request

    Notify approvers linked to an approval request by sending them an email category: Approvals Requests.

  • wab-post-logsiem

    Write a message in /var/log/wabaudit.log and send it to the SIEM (if configured) category: Log Siem.

  • wab-release-passwords-for-target

    Release the passwords for a given target category: Target Passwords.

  • wab-reply-to-approval-request

    Reply to an approval request (approve/reject it). Note: you can answer to an approval request only if you are in approvers groups of authorization category: Approvals Assignments.

  • wab-resetx509-configuration

    Reset X509 configuration category: Config X509.

  • wab-revoke-certificate-of-device

    Revoke a certificate of a device category: Device Certificates.

  • wab-start-scan-job-manually

    Start a scan job manually category: Scan Jobs.

  • wab-updatex509-configuration

    Update X509 Configuration category: Config X509.

  • wab-uploadx509-configuration

    Upload X509 configuration category: Config X509.