BeyondTrust Endpoint Privilege Management

What is BeyondTrust Endpoint Privilege Management? #

BeyondTrust Endpoint Privilege Management elevates privileges as needed to known, trusted applications, controls application usage, and logs and reports on privileged activities. BeyondTrust Endpoint Privilege Management implements zero trust endpoint security controls.

Why Should You Use the BeyondTrust Endpoint Privilege Management Connector? #

The BeyondTrust Endpoint Privilege Management connector provides visibility into the assets managed by BeyondTrust Endpoint Privilege Management. You can use this visibility to:

• ensure assets are managed per your security policies

• monitor each endpoint and its status

• associate users with assets and data

• monitor user access to assets and data

How Does This Connector Work? #

Lucidum executes read-only requests to the BeyondTrust Endpoint Privilege Management REST API and ingests only meta-data about devices and users. Lucidum does not retrieve any data stored on your assets.

Configuring the Connector in Lucidum #

Source Documentation #

Creating Credentials #

To generate the Client ID and Client Secret:

1. Log in to the Privilege Management Console.

2. Follow the steps in:

   https://www.beyondtrust.com/docs/privilege-management/console/pm-cloud/configuration/configure-api-settings.htm

3. Assign all the read-only permissions to the Client ID.

Required Permissions #

API Documentation #

https://www.beyondtrust.com/docs/privilege-management/console/pm-cloud/api/index.htm

Specifically:

• https://www.beyondtrust.com/docs/privilege-management/console/pm-cloud/api/methods-and-models.htm#v2ComputersGet

• https://www.beyondtrust.com/docs/privilege-management/console/pm-cloud/api/methods-and-models.htm#v2UsersGet