Activities
- Add Attribute
- Add Folder
- Add Global Variable
- Connect To GVManager
- Delete Attribute
- Delete Folder
- Delete Global Variable
- Disconnect From GVManager
- Edit Attribute
- Edit Folder
- Edit Global Variable
- Get Attribute
- Get Attributes
- Get Folder
- Get Folders
- Get Global Variable
- Get Global Variables
Add Attribute
...
The Add Attribute activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Attribute Name (text box editor type) (type: string): enter the new attribute's name. E.g. 'Role'
- Attribute Type (combobox editor type) (type: string): choose the new attribute-'s type. E.g. 'Text' . NOTE: If 'Password' type is selected, a password in plain text is required. If 'Binary' type is selected, the full path of the file is required.
- Attribute Value (text box editor type) (type: string): enter the new attribute's value. E.g. 'Administrator'
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Description (text box editor type) (type: string): enter the new attribute's description.
- Global Variable ID (text box editor type) (type: string): enter the ID for the parent global variable or choose it from the Global Variables tree, as shown below:
...
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
Close PAM Request
This activity closes a request that was initiated to elevate to a PAM role.
Activity Parameters
...
Add Folder
This activity adds a new Global Variable Folder.
Activity Parameters
The Add Folder activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Description (text box editor type) (type: string): enter the new folder's description. E.g. 'New folder description'
- Folder Name (text box editor type) (type: string): enter the new folder's name. E.g. 'Cluster1'
- Parent Folder ID (text box editor type) (type: string): enter the new folder's parent ID , or choose it from the Global Variables tree. If left empty, it will be a root folder, otherwise a subfolder.
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
- Output ID : outputs the new folder Id
Add Global Variable
This activity adds a new Global Variable.
Activity Parameters
The Add Global Variable activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.Request ID
- Description (text box editor type) (type: string): enter the new folder's description. E.g. 'New folder description'
- Folder ID (text box editor type) (type: string): enter the parent folder's ID for the new variable , or choose it from the Global Variables tree, as shown below:
- Variable Name (text box editor type) (type: string): The identifier (GUID) of the PAM request to be approved. enter the new variable's name. E.g. 'BinarySSH'
- Variable Type (combobox editor type) (type: string): choose the new variable's type. E.g. 'Binary'. NOTE: If 'Password' type is selected, a password in plain text is required. If 'Binary' type is selected, the full path of the file is required.
- Variable Value (text box editor type) (type: string): enter the new variable's value. E.g. 'C:\SSHCertificate\CertWithoutPassword' (full path)
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
- Output ID : outputs the new global variable Id
Connect To
...
GVManager
This activity connects to the privileged account and outputs returns a PAM GVManager connection.
Activity Parameters
The The Connect To PAMGVManager activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- PAM Hostname ClientHash (text box editor type) (type: string): enter the hostname for the PAM.Password (text box client hash for RestAPI client. It can be copied from Flowster Administrator by selecting the RestAPI clientApp in Integrator page.
- Password (password editor type) (type: string): enter the password.
- Password Binding (text box editor type) (type: string): bind to a variable containing the encrypted password for connection. This parameter is used only when the user wants to send an encrypted password from outside the task, for example Flowster Studio Portal.
- Use SecureRest API Address (combo box editor type) (type: string): choose whether to use secure communication ("https") or standard ('http')enter the RestAPI address. It can be copied from Flowster Administrator by selecting the RestAPI clientApp in Integrator page.
- Username (text box editor type) (type: string): enter the username with domain. E.g. 'fmrp.intern\demouser'
The Read Only Output variable is the possible output value that the activity will provide:
- Connection (type: string): outputs the PAM GVManager connection. The output of this activity should be used as input for all Connection parameters used for all activities placed under PAM Global Variables Manager category.
...
Delete Attribute
This activity creates a request to elevate the privileged account to a PAM role.deletes the specified Global Variable Attribute.
Activity Parameters
The Create PAM Request activity parameters Delete Attribute activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.
- Justification Attribute ID (text box editor type) (type: string): enter the global variable attribute ID, or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'. the user-supplied reason for the elevation request.RequestedTTL
Delete Folder
This activity deletes the specified Global Variable Folder.
Activity Parameters
The Delete Folder activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Folder ID (text box editor type) (type: string): enter the global variable folderID, or choose it from the Global Variables tree, as shown below: the requested expiration time, in seconds.RoleID
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
Delete Global Variable
This activity deletes the specified Global Variable.
Activity Parameters
The Delete Global Variable activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): the unique identifier (GUID) of the PAM role to elevate to.GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Variable ID (text box editor type) (type: string): enter the global variable ID, or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: List<KeyValuePair<String,String>>boolean): outputs a list of dictionaries containing the request's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'CreationMethod', 'CreationTime', 'CreatorID', 'ExpirationTime', 'Justification', 'RequestedTime', 'RequestedTTL', 'RequestID', 'RequestStatus' and 'RoleID'.
Disconnect From PAM
This activity disconnects the specified PAM connection.
Activity Parameters
...
- the operation status. If succeeded the output value is 'True', otherwise is 'False'.
Disconnect From GVManager
This activity disconnects the specified GVManager connection.
Activity Parameters
The Disconnect From GVManager activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
Edit Attribute
This activity edits a Global Variable Attribute.
Activity Parameters
The Edit Attribute activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Attribute ID (text box editor type) (type: string): enter the ID for the attribute to be edited or choose it from the Global Variables tree, as shown below:
- Attribute Name (text box editor type) (type: string): enter the new attribute's name. E.g. 'Role'
- Attribute Type (combobox editor type) (type: string): choose the new attribute's type. E.g. 'Text' . NOTE: If 'Password' type is selected, a password in plain text is required. If 'Binary' type is selected, the full path of the file is required.
- Attribute Value (text box editor type) (type: string): enter the new attribute's value. E.g. 'Administrator'
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Description (text box editor type) (type: string): enter a new attribute's description.
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
Edit Folder
This activity edits a Global Variable Folder.
Activity Parameters
The Edit Folder activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Description (text box editor type) (type: string): enter a new attribute's description.
- Folder ID (text box editor type) (type: string): enter the folder ID, or choose it from the Global Variables tree, as shown below:
- Folder Name (text box editor type) (type: string): enter a new name for the folder.
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
Edit Global Variable
This activity edits a Global Variable.
Activity Parameters
The Edit Global Variable activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.
- Description (text box editor type) (type: string): enter a new attribute's description.
- Global Variable ID (text box editor type) (type: string): enter the ID for the variable to be edited, or choose it from the Global Variables tree, as shown below:
- Variable Name (text box editor type) (type: string): enter the new variable name. If left empty, it will not be changed.
Get PAM Requests
...
- Variable Type (combobox editor type) (type: string): choose the new attribute's type. If left empty, it will not be changed. NOTE: If 'Password' type is selected, a password in plain text is required. If 'Binary' type is selected, the full path of the file is required.
- Variable Value (text box editor type) (type: string): enter the new attribute's value. If left empty, it will not be changed.
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status (type: boolean): outputs the operation status. If succeeded the output value is 'True', otherwise is 'False'.
Get Attribute
This activity returns the specified global variable attribute.
Activity Parameters
The Get PAM Requests activity parameters Attribute activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.
- Filter Role ID Attribute ID (text box editor type) (type: string): enter the role ID for the request to be retrevied.the attribute or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output (type: List<KeyValuePair<StringDictionary<String,String>>String>): outputs a list of dictionaries dictionary containing the requestGlobal Variable Attribute's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'CreationMethodID', 'CreationTimeName' , 'CreatorIDDescription' , 'ExpirationTime', 'Justification'ID_GV_Variable' , 'RequestedTimeType' , and 'RequestedTTLValue', 'RequestID', 'RequestStatus' and 'RoleID'.
...
- .
Get Attributes
This activity gets the PAM roles for which the account is a candidate.returns the global variable attributes.
Activity Parameters
The Get PAM Roles activity parameters Attributes activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.
- Filter Display Name Variable ID (text box editor type) (type: string): enter the display name for the role to be retrieved.ID for the global variable or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output Output (type: List<KeyValuePair<StringList<Dictionary<String,String>>): outputs a list of dictionaries containing the roleGlobal Variable Attribute's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'RoleIDID', 'ApprovalEnabledName' , 'AvailableFromDescription' , 'AvailableToID_GV_Variable' , 'AvailabilityWindowEnabled', 'Description', 'DisplayName', 'MFAEnabled' and 'TTL'.
Get PAM Session Info
This activity gets the username of the account that is logged in to the session.
Activity Parameters
...
- Type' and 'Value'.
Get Folder
This activity returns the specified global variable folder.
Activity Parameters
The Get Folder activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): GVManager Connection. The Output from Connect To GVManager activity should be used as Input for this parameter.
- Folder ID (text box editor type) (type: string): enter the ID for the folder to be returned or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output (type: Dictionary<String,String>): outputs a dictionary containing the Global Variable Folder's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'ID', 'Name' , 'Description' and 'ParentName'.
Get Folders
This activity returns the global variable folders.
Activity Parameters
The Get Folders activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.
The Read Only Output variable is the possible output value that the activity will provide:
- Output Output (type: list<string>List<Dictionary<String,String>>): outputs a list of active usernames.
Get Pending PAM Requests
...
- dictionaries containing the Global Variable Attribute's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'ID', 'Name' , 'Description' and 'ParentName'.
Get Global Variable
This activity returns the specified global variable.
Activity Parameters
The Get Pending PAM Requests activity parameters Global Variable activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.Filter Role Name
- Global Variable ID (text box editor type) (type: string): filter requests by role name.enter the ID for the variable to be returned or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output Output (type: List<KeyValuePair<StringDictionary<String,String>>String>): outputs outputs a list of dictionaries dictionary containing the pending requestGlobal Variable's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'ApprovalObjectIDID', 'FIMRequestIDFolderName' , 'RequestorIDName' , 'CreationTimeDescription' , 'JustificationType' , and 'RequestedTime', 'RequestedTTL', 'Requestor' and 'RoleName'.
Reject PAM Request
...
- Value'.
Get Global Variables
This activity returns the global variables from the specified folder.
Activity Parameters
The Reject PAM Request activity parameters Get Global Variables activity parameters can be provided by manual inserted values or via IN arguments or variables:
Parameters:
- Connection (text box editor type) (type: string): PAM GVManager Connection. The Output from Connect To PAM GVManager activity should be used as Input for this parameter.
- Request
Folder ID (text box editor type) (type: string):
the identifier (GUID) of the PAM request to reject.enter the parent folder ID for the variables to be returned from , or choose it from the Global Variables tree, as shown below:
The Read Only Output variable is the possible output value that the activity will provide:
- Output Status Output (type: booleanList<Dictionary<String,String>>): outputs the operation status. If succeeded, the output value is 'True', otherwise is false.outputs a list of dictionaries containing the Global Variable Attribute's details. In order to use the output you can use the GetKeyValuePair activity with the keys: 'ID', 'FolderName' , 'Name' , 'Description' , 'Type' and 'Value'.