--- title: "CyberArk Privilege Cloud" slug: "cyberark-privilege-cloud" updated: 2026-06-25T03:31:51Z published: 2026-06-25T03:31:51Z canonical: "docs.databee.buzz/cyberark-privilege-cloud" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # CyberArk Privilege Cloud CyberArk Privilege Cloud is a SaaS solution that enables organizations to securely store, rotate and isolate credentials (for both human and non-human users), monitor sessions, and deliver scalable risk reduction to the business. Privilege Cloud protects, controls, and monitors privileged access across on-premises, cloud, and hybrid infrastructures. More information can be found at official [CyberArk Documentation.](https://docs.cyberark.com/privilege-cloud-standard/latest/en/content/privilege%20cloud/privcloud-introduction.htm) **Integration Method**: API **Tables**: Account Change (3001), Application Lifecycle (6002), Group Management (3006), User Inventory (5003) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Accounts | Returns a list of all the accounts in Privilege Cloud. | | Applications | Returns a list of all the applications in Privilege Cloud. | | Groups | Returns a list of all existing user groups in Privilege Cloud. | | Users | Returns a list of all existing users in Privilege Cloud. | > [!NOTE] > **Note:** > > CyberArk Privilege Cloud it is a SaaS service and is continuously updated. This article was prepared using version 14.9 in June 2026**.** ## Prerequisites - The user should have admin privileges as we need to use service users's credentials while configuring data source as “Key Id” and “Secret Key”. - The Cyberark service user should have the “Privilege Cloud Auditors” role. - The user should have access to DataBee console. ## Configuration Overview 1. Create a new service user for DataBee or use an existing one with “Privilege Cloud Auditors” role. The service user’s username and password will be used as “Key Id” and “Secret Key” respectively while configuring data source. 2. Add the [CyberArk Privilege Cloud data feed](/user-manual/docs/cyberark-privileged-cloud#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **CyberArk Privilege Cloud Parameter** | | --- | --- | | Token: | CyberArk identity tenant id | | Key Id | Service User Username | | Secret Key | Service User Password | | API Base URL: | CyberArk subdomain | ## CyberArk Configuration Integration with CyberArk happens with a service user username/password credentials. The CyberArk Subdomain and Identity Tenant Id are also needed to configure the data source. ### Find CyberArk subdomain 1. Find the on the login page of CyberArk Identity User Portal from the URL as highlighted below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark1.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) ### Find CyberArk identity tenant id 1. Find the on the login page of CyberArk Identity Administration Portal from the URL as highlighted below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) ## Create a CyberArk Service User 1. Navigate to Inventory > Identities > Users and click on Users. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark3.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 2. Click on the **Add user** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark4.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 3. Fill out the user details as required. Save the **Account name and Password** for further use.DataBee Configuration ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark5.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 4. In the **Status** section, check the **Is OAuth confidential client** and click on **Create User**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark6.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) ## Assigning Roles to the CyberArk Service User 5. Navigate to Inventory > Identities > Roles and click on Roles. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark7.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 6. Search for “**Privilege Cloud Auditors**” role and click it. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 7. Navigate to **Members** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark9.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 8. Click on **Add** to add the newly created new service user ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark10.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 9. Search for newly created Service user and select the checkbox. Click on the **Add** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark11.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 10. Verify the user is added to the Members list and click **Save** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cyberark12.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databee1.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 2. Search for the **CyberArk Privilege Cloud** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databee2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databee3.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 4. Enter feed contact information and click **Next.** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databee4.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 5. In the configuration page, confirm the following: - **API Base URL**: replace the placeholder with your **CyberArk subdomain.** - **Authorization Method**: Bearer Token - **Secret Key:** paste the service user password. - **Key Id:** paste the service user username. - **Token URL:** replace placeholder with your **CyberArk identity tenant id.** - **Event Types:** preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databee5.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A33%3A23Z&se=2026-10-30T12%3A33%3A23Z&sr=c&sp=r&sig=fRCttc08Zutk6%2BGCrLCdtPyQQPSsI%2FHO6lUKZNvrVZ8%3D) 6. Click **Submit.** ## Troubleshooting Tips - Make sure the service user’s username and password of CyberArk for DataBee configuration is being used - Make sure the service user who runs Privilege Cloud web service has the “Privilege Cloud Auditors” role.