Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -346,3 +346,4 @@ Hunting Queries/DeployedQueries.json
.script/**/*.js.map
.script/**/*.d.ts
.script/**/*.d.ts.map
/.vscode
Binary file not shown.
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@
},
{
"name": "BeyondTrust PM Cloud API credentials",
"description": "BeyondTrust PM Cloud OAuth Client ID and Client Secret are required. Contact BeyondTrust support for API access."
"description": "BeyondTrust PM Cloud OAuth Client ID and Client Secret are required. The API account requires the following permissions: Audit - Read Only and Reporting - Read Only"
}
]
},
Expand All @@ -98,7 +98,7 @@
},
{
"title": "STEP 1 - Obtain BeyondTrust PM Cloud API credentials",
"description": "Contact BeyondTrust support to obtain OAuth API credentials (Client ID and Client Secret) for accessing the BeyondTrust PM Cloud API."
"description": "Create an API Account in your BeyondTrust PM Cloud instance with OAuth API credentials (Client ID and Client Secret). The API account requires the following permissions:\n\n- **Audit** - Read Only\n- **Reporting** - Read Only"
},
{
"title": "STEP 2 - Deploy the connector and the associated Azure Function",
Expand Down
2 changes: 1 addition & 1 deletion Solutions/BeyondTrustPMCloud/Data Connectors/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -368,7 +368,7 @@ Estimated monthly costs depend on data volume and polling frequency. Monitor usa

## Version History

- **v1.0**: Initial release with Activity Audits and Client Events support
- **v3.0**: Initial release with Activity Audits and Client Events support
- OAuth 2.0 authentication with automatic token refresh
- Rate limiting and state management
- Configurable polling intervals
Expand Down

Large diffs are not rendered by default.

Binary file modified Solutions/BeyondTrustPMCloud/Package/3.0.0.zip
Binary file not shown.
8 changes: 4 additions & 4 deletions Solutions/BeyondTrustPMCloud/Package/mainTemplate.json
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@
},
{
"name": "BeyondTrust PM Cloud API credentials",
"description": "BeyondTrust PM Cloud OAuth Client ID and Client Secret are required. Contact BeyondTrust support for API access."
"description": "BeyondTrust PM Cloud OAuth Client ID and Client Secret are required. The API account requires the following permissions: Audit - Read Only and Reporting - Read Only"
}
]
},
Expand All @@ -183,7 +183,7 @@
"description": ">**NOTE:** This connector uses the OAuth 2.0 client credentials flow to authenticate with the BeyondTrust PM Cloud API."
},
{
"description": "Contact BeyondTrust support to obtain OAuth API credentials (Client ID and Client Secret) for accessing the BeyondTrust PM Cloud API.",
"description": "Create an API Account in your BeyondTrust PM Cloud instance with OAuth API credentials (Client ID and Client Secret). The API account requires the following permissions:\n\n- **Audit** - Read Only\n- **Reporting** - Read Only",
"title": "STEP 1 - Obtain BeyondTrust PM Cloud API credentials"
},
{
Expand Down Expand Up @@ -356,7 +356,7 @@
},
{
"name": "BeyondTrust PM Cloud API credentials",
"description": "BeyondTrust PM Cloud OAuth Client ID and Client Secret are required. Contact BeyondTrust support for API access."
"description": "BeyondTrust PM Cloud OAuth Client ID and Client Secret are required. The API account requires the following permissions: Audit - Read Only and Reporting - Read Only"
}
]
},
Expand All @@ -368,7 +368,7 @@
"description": ">**NOTE:** This connector uses the OAuth 2.0 client credentials flow to authenticate with the BeyondTrust PM Cloud API."
},
{
"description": "Contact BeyondTrust support to obtain OAuth API credentials (Client ID and Client Secret) for accessing the BeyondTrust PM Cloud API.",
"description": "Create an API Account in your BeyondTrust PM Cloud instance with OAuth API credentials (Client ID and Client Secret). The API account requires the following permissions:\n\n- **Audit** - Read Only\n- **Reporting** - Read Only",
"title": "STEP 1 - Obtain BeyondTrust PM Cloud API credentials"
},
{
Expand Down
6 changes: 4 additions & 2 deletions Solutions/BeyondTrustPMCloud/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,9 @@ BeyondTrustPM_ClientEvents_CL
To integrate with BeyondTrust PM Cloud make sure you have the following:

- **Microsoft.Web/sites permissions:** Read and write permissions to Azure Functions to create a Function App is required. See the [Azure Functions documentation](https://learn.microsoft.com/azure/azure-functions/) for details.
- **BeyondTrust PM Cloud API credentials:** OAuth Client ID and Client Secret with appropriate permissions. Contact BeyondTrust support to obtain API access credentials.
- **BeyondTrust PM Cloud API credentials:** OAuth Client ID and Client Secret with appropriate permissions. Create an API Account in your BeyondTrust PM Cloud instance with OAuth API credentials (Client ID and Client Secret). The API account requires the following permissions:
- **Audit** - Read Only
- **Reporting** - Read Only.
- **Azure Log Analytics workspace** configured for Microsoft Sentinel

## Installation
Expand Down Expand Up @@ -390,7 +392,7 @@ Estimated monthly costs depend on data volume and polling frequency. Monitor usa

## Version History

- **v1.0**: Initial release with Activity Audits and Client Events support
- **v3.0**: Initial release with Activity Audits and Client Events support
- OAuth 2.0 authentication with automatic token refresh
- Rate limiting and state management
- Configurable polling intervals
Expand Down
Loading