Delinea Privilege Manager (Thycotic)

Delinea Privilege Manager (formerly Thycotic) mitigates malware and security threats from exploiting applications by removing local administrative rights and enforcing least privilege on endpoints.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users

APIs

Axonius uses the Delinea Privilege Manager API. The following endpoints are called:

Authentication:

• POST /tms/services/api/logon/token

Device Data:

• POST /tms/services/api/datasource/GetThinDataSourceResults - Search for the device report.
• POST /tms/services/api/v1/reports/{report_id} - Fetch the devices from the report.
• GET /tms/services/api/item/GetItem - Fetch additional device information and its data classes (when Fetch Extra Information is enabled).
• POST /tms/services/api/datasource/GetThinDataSourceResults - Fetch device policies (when Fetch Device Policies is enabled).

User Data:

• POST /tms/services/api/datasource/GetThinDataSourceResults - Search for the user report.
• POST /tms/services/api/v1/reports/{report_id} - Fetch the users from the report.
• GET /tms/services/api/item/GetItem - Fetch additional user information and its data classes (when Fetch Extra Information is enabled).

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Delinea Privilege Manager server.

2. API Client and API Secret (required) - An API Key associated with a user account that has permissions to fetch assets.

3. Search Object ID (required, default: 27c3943d-d46c-4801-bb06-b3fa416756f6) - Enter the ID for the object of the search query. This option is available for legacy support and shouldn't be changed unless the object ID is changed in later versions.

4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

5. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

6. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

7. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch Extra Information (optional, default: disabled) - Select whether to fetch additional information regarding users and devices, such as IP addresses.
2. Fetch Device Policies (optional, default: disabled) - Select whether to fetch device security policies applied by Delinea.

Supported From Version

Supported from Axonius version 4.5