CyberArk Privilege Cloud

CyberArk Privilege Cloud is a SaaS solution that enables organizations to securely store, rotate and isolate credentials (for both human and non-human users), monitor sessions, and deliver scalable risk reduction to the business. Privilege Cloud protects, controls, and monitors privileged access across on-premises, cloud, and hybrid infrastructures.

Integration 

Integration Method: API

Tables: Account Change

This integration has been tested against the CyberArk Cloud API service.

CyberArk Configuration

DataBee integrates with CyberArk Privilege Cloud for the purpose of getting account details. DataBee connects to CyberArk APIs to get a the account list managed by the CyberArk platform.  

• Create an admin user with API access permissions on CyberArk platform.

• This service admin’s API credentials (KeyID, SecretKey) along with “username” and “password” will be used to access the API.

• DataBee only requires READONLY access

• User can find <subdomain> after login onto platform which will be used in API configuration.

Users can find <identity-tenant-id> from the Identity Administration User Portal which will be used in API configuration.

DataBee Configuration

Use the user credentials. Detailed setup documentation can be found at https://docs.databee.buzz/docs/api-ingest

• Go to the DataBee console and add a new data source.

• Select CyberArk Privilege Cloud

• Click on the API Ingest button.

• While configuring data source in DataBee UI, enter the following:

  • Authorization Method: Token URL Auth

  • Username/Password: Enter the admin user credentials

  • KeyID, Secret: Enter the previously generated API credentials