Skip to main content
Question

Bulk Extract Password Safe Platform Field Requirements

  • January 28, 2026
  • 2 replies
  • 19 views

We are looking to build an automated BeyondTrust Password Safe onboarding process via API, driven by user provided details in a ServiceNow form and lookups against our CMDB.

To facilitate this, I’m looking for a way to bulk export the available (and mandatory) fields for the below for every Platform:

  • Creation of an Asset
  • Creation of a Managed System
  • Creation of a Managed Account
  • Population of the ‘Manage Assets Using Password Safe’ Smart Rule Action
  • Population of the ‘Managed Account Setting’ Smart Rule Action

We need the details for each platform so that we can create branching to provide the right details in the relevant API calls for each platform.

The intention is then to map each of the available fields in BeyondTrust to a field in another data source (in the ServiceNow form or CMDB) so that we can populate the API calls for onboarding.

I understand Smart Rules can’t be created via API, so we’d instead be looking to pre-create the required ‘Manage Assets Using Password Safe’ and ‘Managed Account Setting’ Smart Rules per Platform - and then assign Attributes to the newly onboarded Assets and Managed Accounts to ensure they were in scope of the right Smart Rule.

We’d then create Quick Rules to actually provide access to the accounts via automation.

Does anyone have any advice?

2 replies

Forum|alt.badge.img+4
  • Guru
  • January 29, 2026

This is for sure possible, but would requires a lot of work on the API side, I like the use of Attributes.

Yet, do you feel comfortable using SNOW’s CMDB as the only source of truth for what is existing within your environment? 

I would recommend discovery to be done, Scans to be performed just to manage services and scheduled tasks etc. allowing propagation, local account discoveries etc.

from experience relying on just CMDB is not a guarantee we capture all assets and or details for what exist, outliers will exist in both CMDB and PWS for sure.

Just something to think about.

KR
Jens

 

 


  • Author
  • Apprentice
  • January 30, 2026

Our CMDB is populated by discovery so the data should be reasonably good.

Instead of a fully automated process, we could instead do something ‘self-service’ via a SNOW form and then ‘play back’ the data in CMDB to the requestor so they can make any updates if necessary before proceeding with the onboarding.

Do you know how we could export all of the required fields for all of our existing Platforms so that we could do the mappings between required BT fields (as this differs by Platform) and data in CMDB (or other sources if needed).