IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

API key accounts and scripts with Resilient API with MSSP functionality

  • 1.  API key accounts and scripts with Resilient API with MSSP functionality

    Posted Fri December 13, 2019 06:59 AM
    Hello,

    I Heard about this option: 

    API key accounts are designed to enable external scripts or integrations to authenticate to the Resilient platform through the REST API, with the minimum required permissions. A system-generated token is used to authenticate. API key accounts are not linked to LDAP and cannot access the Resilient user interface, own incidents or be members of an incident or group. The API key display name is unique for each organization in Resilient.

    But as I can see MSSP disables this option, and I want to create custom scripts with the Resilient API. Is there any way to create an API user or create scripts with Resilient API with MSSP functionality?

    Thank you.

    ------------------------------
    Aitor Vivanco Sata Cruz
    ------------------------------


  • 2.  RE: API key accounts and scripts with Resilient API with MSSP functionality

    Posted Mon December 16, 2019 08:44 AM
    Unfortunately API keys are not currently supported for an MSSP organization. I would suggest creating an idea for this on the ideas forum.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------