CyberArk Integration

[dopamind]

Hi everyone,
I'm looking for docs about PAM integration especially CyberArk
I know that is possible via Powershell or Rest API but i would like more details if possible.
( no Gmsa in my case )
thanks a lot for advance
seb

[HannesK]

Hello,
yes, it's technically possible. I found a skeleton script from one of our engineers that might be a good start

Code: Select all

#get API to CyberArk

$resultpass = Invoke-WebRequest -Method "Get" -Uri "https://vault.domain.com/AIMWebService/api/Accounts?AppID=VeaamPOC&Safe=VeaamPOC&Folder=Root&Object=OperatingSystem-WindowsDomainAccount-30Days-Domain.com-VeeamUser" -Headers @{ "ContentType" = "application/json" } | ConvertFrom-Json

#set pass content to $VBRpass
$VBRpass = $resultpass.content 

#connect to veeam backup server
Connect-VBRServer -Server "veeampoc01"

#get credentails SVC , Set password for Credentails
Get-VBRCredentials -Name "Domain\Veeam User" | Set-VBRCredentials -Password $VBRpass

Best regards,
Hannes

[dopamind]

Thanks a lot @Hannesk , i will test it

[dacuna]

Hello,

I'm intrigued about your results with CyberArk integration. I've been task to find a way to use CyberArk managed AD accounts on Veeam backup jobs using application-aware and for our Microsoft servers under backup infrastructure.

Were you successful at integrating CyberArk with this? Did you think about using password to update the passwords on backup jobs?

Please let me know