Agentic AI and privileged credentials governance: UiPath and Password Safe example | Community

Context

UiPath, a leader in Robotic Process Automation (RPA) and Orchestration, has introduced Agentic AI support in their platform. UiPath natively supports BeyondTrust Password Safe as a Credential Provider. This article provides an introduction for creating UiPath Agents that leverage Password Safe.

Example UiPath Agent

Step 1: Create credential store for Password Safe

UiPath Orchestrator supports multiple credential stores.

Create a new credential store for Password Safe.

In Password Safe, create a group for UiPath service accounts, and assign an API Registration. Also, create a Password Safe User and add to the group.

Note: You will need to include the IP address or range for UiPath Orchestration in API Registration.

https://docs.uipath.com/orchestrator/automation-cloud/latest/user-guide/orchestrator-outbound-ip-addresses

You can also check User Audits for rejected IP addresses and add them to the API Registration.

User Audits shows rejected IP address for UiPath account.

The Group must have the permission to check-out Managed Account passwords.

Step 2: Create the ServiceNow service account and add to Password Safe.

Create a service account in ServiceNow and add the ITIL role.

Add the ServiceNow service account under the default Managed System in UiPath credential provider configuration.

Note: Optionally, you can use the Password Safe Custom Plugin for ServiceNow to manage the service account. This post requires authentication to BeeKeepers:

Step 3: Create new Asset for credentials in Orchestrator

Navigate to Workspace, then click Add asset button.

Create a Password Safe credential to match the ServiceNow Managed Account.

Step 4: Create UiPath Agent

In UiPath Studio, select Create New Agent.

Provide System and User prompts and add RPA Workflow.

For Manual Trigger, add the following arguments: CredentialUsername, CredentialPassword, myPwd and Incidents.

Add a Get Credential activity, and configure for the Asset.

Assign the value of myPwd (string) from CredentialPassword (secureString) using the Expression editor.

new System.Net.NetworkCredential(string.Empty, CredentialPassword).Password

Add HTTP Request activity and configure for ServiceNow GET Incidents.

Note: The URL is https://myInstance.service-now.com/api/now/table/incident?sysparm_limit=1&state=2

Add Assign Variable activity and set Incidents (Output) to Response content for HTTP Request.

We should be able to successfully test our RPA Workflow, or troubleshoot it.

We can also test/Debug our Agent via Definition. Here my test UiPath instance does not have sufficient funds to access LLM.

At this point, we have a working RPA Workflow for Password Safe.

Reply