All integrationsIdentity & Access
BeyondTrust
Use BeyondTrust Password Safe in workflows: request, retrieve and check in privileged credentials, approve requests, change passwords, read and save Secrets Safe secrets, end sessions and manage users' groups.
- actions
- 25
- triggers
- 8
Triggers
Start a workflow when something happens in BeyondTrust.
- New request to approveRuns for each new credential request waiting for your approval in BeyondTrust Password Safe. Ones already waiting when the workflow is turned on don't start it. How often it checks follows your workspace plan.
- Request approvedRuns each time a request is approved in BeyondTrust. Ones approved before the workflow is turned on don't start it. How often it checks follows your workspace plan.
- New managed accountRuns for each new managed account you can request in BeyondTrust Password Safe. Ones already there when the workflow is turned on don't start it. It can watch up to 5,000. How often it checks follows your workspace plan.
- New managed systemRuns for each new managed system in BeyondTrust. Ones already there when the workflow is turned on don't start it. It can watch up to 5,000. How often it checks follows your workspace plan.
- New secretRuns for each new secret in BeyondTrust Secrets Safe. Ones already there when the workflow is turned on don't start it. How often it checks follows your workspace plan.
- Secret changedRuns each time a secret changes in BeyondTrust Secrets Safe. Changes made before the workflow is turned on don't start it. How often it checks follows your workspace plan.
- New sessionRuns for each RDP or SSH session that starts in BeyondTrust Password Safe. Sessions already open when the workflow is turned on don't start it, and one that starts and ends between two checks isn't seen. How often it checks follows your workspace plan.
- New userRuns for each new user in BeyondTrust. Ones already there when the workflow is turned on don't start it. How often it checks follows your workspace plan.
Actions
Steps a workflow can run in BeyondTrust.
- List managed systemsList the systems Password Safe manages accounts on (servers, databases, directories, cloud platforms), or find one by name.
- List managed accountsList the managed accounts you can request credentials for, on one system or all of them, or find one by name.
- Change account passwordChange a managed account's password now, on the system and in Password Safe: a new random one by its password rule, or the one you give, such as after someone saw it.
- List requestsList credential requests: your own, or the ones waiting on you to approve, by status.
- Request credentialsAsk for a managed account's credentials for a time, with a reason. Password Safe approves it at once or waits for an approver, as its policy says; once approved, 'Retrieve credentials' reads them.
- Retrieve credentialsRead the password (or SSH key or passphrase) of an approved, active request, to use in a later step. The value is in the step's result for later steps, so anyone who can see this workflow's runs can see it; the run's summary doesn't print it.
- Check in requestGive a request's access back before it ends, which may change the account's password, as its policy says.
- Approve requestApprove a request waiting for you, such as after someone approved it in Teams or a ticket.
- Deny requestDeny a request waiting for you, or cancel one of your own still waiting.
- List sessionsList the RDP and SSH sessions Password Safe recorded, newest first, by status or user.
- End sessionEnd a live RDP or SSH session at once, such as one flagged as risky.
- List foldersList the safes and folders in Secrets Safe you can see, with their paths.
- Create folderCreate a folder in a Secrets Safe safe or folder.
- Delete folderDelete a Secrets Safe folder.
- List secretsList the Secrets Safe secrets you can see, in a folder, by title or changed since a time. Values aren't read.
- Read secretRead a Secrets Safe secret's username and password, or its text, to use in a later step. The value is in the step's result for later steps, so anyone who can see this workflow's runs can see it; the run's summary doesn't print it.
- Create secretSave a username and password, or text, as a secret in a Secrets Safe folder, owned by the user Lodol runs as.
- Delete secretDelete a Secrets Safe secret.
- List usersList BeyondInsight users, or find one by username.
- List user groupsList BeyondInsight user groups, or find one by name.
- Add user to groupAdd a user to a user group, giving them the group's roles, such as when someone joins a team.
- Remove user from groupTake a user out of a user group, removing the group's roles, such as when someone leaves a team.
- Quarantine userQuarantine a user so they can't use Password Safe, keeping their account, such as when their sign-in looks compromised. An administrator releases them in BeyondInsight.
- Search assetsFind assets (servers, workstations, devices) by name, IP address or range, DNS name, domain or type. Give at least one.
- List Smart RulesList the Smart Rules you can see, which group accounts, systems and assets in Password Safe, or find one by title.
No actions match that.
Automate BeyondTrust with Lodol.
Connect BeyondTrust, then hand Lodol the job in Slack, Claude or ChatGPT.
Free plan, no credit card