Search documentation

…dmin consent on the Microsoft consent screen. Select the customer and scope Map the tenant to exactly one AssurIQ customer record. Confirm the first sync Wait for the connector sta…

…create a service account and enable domain-wide delegation. Authorize scopes in Admin Console In the Google Workspace Admin Console, authorize the service account's client ID for t…

…rowdStrike Falcon connector uses the Falcon OAuth2 API with read-only scopes to collect host sensor health, detection and vulnerability exposure data for endpoints protected by Fal…

…nsole with API access enabled A service user assigned the Viewer role scoped to the relevant sites or groups Outbound HTTPS from the AssurIQ Cloud Connector to the management conso…

…t tier A dedicated API application/client with read-only or reporting scope Outbound HTTPS from the AssurIQ Cloud Connector to the RMM platform's API endpoint Permissions Read-…

…gned to the service principal at the subscription or management group scope Azure Policy or Azure Monitor read access for configuration and patch compliance evidence, where used…

…e Permissions A managed policy equivalent to ReadOnlyAccess, or a scoped policy covering ec2:Describe*, iam:Get*/List*, s3:GetBucketPolicy/GetBucketAcl, and config:Get*/Describ…

…Dashboard administrator with the Read-only organization role API key scoped to that read-only administrator Setup Enable API access In Organization > Settings, enable Dashboar…

…or configuration capture on AOS-CX/AOS-Switch Aruba Central API token scoped to a Read-Only role for cloud-managed estates Setup Choose management mode Identify whether the sit…

…status Security model The connector uses application permissions scoped strictly to read access on security and device data; it cannot isolate devices, run response actions or…

…A dedicated API member/client with ticket read/write and company read scopes A mapping between PSA companies and AssurIQ customers Permissions Ticket: Read/Write — create and u…

…dentials to the vault Store the account in AssurIQ's Credential Vault scoped to the customer and site. Enable the AD assessment In Integrations, enable Active Directory for the sit…

…led. Create a read-only CLI account Create a local or TACACS+ account scoped to read-only show commands for config backup. Add the device to AssurIQ Add the device's management IP…

…Pv3 user with authPriv for interface and system OID polling API token scoped to the read-only profile, generated under System > Administrators > REST API Admin Setup Create a r…

…ator with the Auditor/Read-Only privilege level API key or credential scoped to that account for HTTPS management API polling Setup Enable the management API Under Manage > App…

…es, Objects, Network and Device tabs API key generated for that role, scoped via the standard PAN-OS API key generation endpoint Setup Create a read-only role profile Under Dev…