← Back to dashboard

Documentation

Shipped with this build. The API explorer lives at /swagger.

Platform reference

• Onboarding
• Identity and access
• Cloud
• Databases
• Directories
• Editions
• Inventory
• Kubernetes
• OIDC and single sign-on
• Operations
• Remote Agents
• SPIFFE and SPIRE
• Workload Lab

Identity and access

• Audit Log
• Permissions
• Secrets Management
• Service Accounts

Cloud

• Cloud Containers
• Cloud Costs
• Image Management
• Infrastructure as Code
• Cloud Sandbox
• Virtual Desktops
• Cloud VMs
• Windows Servers

Directories

• Active Directory
• Health
• Identity Providers
• On Premises

Editions

• Community vs. hosted
• SaaS Roadmap

Integrations

• Ansible
• Beyondtrust
• Cloud Functions
• Hyperv
• Mcp Server
• Nutanix
• Portainer
• Proxmox
• Rancher
• Vmware
• Vsphere
• Xcpng

Remote Worker runners

• The Ansible runner
• Config field reference
• The Kubernetes runner
• Playbook structure
• Secrets in a run
• Shared cloud infrastructure

BeyondTrust products

• Entitle dashboard permissions
• Entitle Persona Bundles
• Entitle Virtual Apps
• Entitle
• EPM for Linux
• Gateway hosts
• Password Safe
• Platform Identity
• Privileged Remote Access

BeyondTrust · Password Safe

• Databases on AWS (dbssm)
• Databases on Azure (dbazure)
• Databases on GCP Cloud SQL (dbgcp)
• Databases: the shared model
• Kubernetes Tokens
• Vm Onboarding

Portainer

• Entitle
• Import
• Managed Server

Rancher

• Entitle
• Network And Tls

Kubernetes

• k3s
• Managed Kubernetes (k8s)
• KubeSolo

OIDC and single sign-on

• The dashboard's own identity
• Dex
• Sign in with Microsoft (Entra)
• Kubernetes federation

OIDC · Kubernetes federation

• Kubernetes federation: Entra ID
• Kubernetes federation: other OIDC
• Kubernetes federation: Okta
• Kubernetes federation: PingOne

Onboarding · per-cloud setup

• After the first run
• AWS setup
• Azure setup
• Feature-test checklist
• GCP setup
• Onboarding troubleshooting

Operations

• Auto-delete Timer
• Cloud Hosting
• Config Management
• Config Migration
• Container User
• Health
• Job Worker
• Notifications
• Scheduling
• Storage Management

Operations · cloud hosting

• AWS ECS Fargate
• Azure Container Apps
• GCP Cloud Run

Operations · scheduling

• Change Windows
• Action Guardrails

Demo and POV profiles

Demo profile

• Agent Demo Cell
• Network Demo Cell
• OT Demo Cell

OT Demo Cell

• Deploying a cell
• Who brokers identity
• OT protocol clients on Windows
• End-to-end verification

Demo profile · personas

• AI / agent platform
• Cloud Ops engineer
• DBA / data platform
• DevOps engineer
• FinOps / cloud governance
• Hypervisor admin
• IAM engineer
• Identity architect
• IT engineer
• Network / firewall admin
• OT / ICS engineer
• Security analyst
• Platform / SRE

POV profile

• What the customer sees
• Demo cells in a POV
• The Gateway and the Resource Broker
• Keeping a POV true, and reaping it
• Password Safe POC runbook
• Running POVs on a public cloud
• Skytap
• Standing up a POV instance
• Wiring VMs into PRA, Password Safe and Entitle

Remote agents

• Running the agent on your host
• Agent-executed Config Management
• Credentials an agent uses
• Enrolling an agent
• Agent-brokered file shares
• Hypervisor connections
• Spire Attestation

Workload Lab

• The Certificate Lab
• Certificates
• Short-lived cloud credentials
• What consumes these credentials
• Dynamic AWS and Azure credentials
• Workload access to Kubernetes
• SPIFFE and SPIRE
• Onboarding a subordinate CA
• BeyondTrust Workload Credentials