Configuring Privilege Manager

To configure Privilege Manager with Torq integration, perform the following tasks:

Step 1: Set Up a User Credential

Create a user credential in Privilege Manager that will be used to authenticate webhook communications with Torq.

To create a user credential:

  1. In Privilege Manager, navigate to Admin > Configuration and then go to the Credentials tab.

  2. On the Credentials page, select Create.

  3. Provide a name and description for the credential.

  4. In the Type list, select User Credential Secret Resource (Resources).

  5. Provide the Account Name and Password of the Torq user.

    Make sure that the account name and password correspond to the Torq user account that has permissions to invoke workflows using the Torq API.

  6. Select Save Changes.

Step 2: Set Up a Webhook Event

Configure a webhook in Privilege Manager to send approval request events to Torq’s invoke URL.

To set up a webhook event:

  1. Navigate to Admin > Configuration and then go to the Messaging tab.

  2. On the Messaging page, select Create.

  3. Provide a name and verify that the desired credential is selected.

  4. In the Request URL field, enter the Torq invoke URL (the webhook trigger endpoint) that will receive messages from Privilege Manager.

  5. Select Create.

  6. On the New Webhook page, provide a description for the webhook.

  7. In the Webhook Event list, select Approval Request Event.

  8. Ensure that Enabled is set to Yes for the webhook.

Step 3: Create an Approval Process and an Application Policy

You must create the approval process, approval type, approval action, and associate them with an application policy. These components ensure that when an approval request is triggered by Privilege Manager, the appropriate workflows and actions are executed through Torq.

To create an approval process and an application policy:

  1. Create an approval process:

    1. Navigate to Admin > Tasks and go to the Automation tab.

    2. Navigate to Automation > Approvals > Approval Processes.

    3. Select Create.

    4. Select the Manual Approval Process template.

    5. Provide a Name and Description for the approval process.

    6. Select Create.

  2. Create an approval type that will be associated with the message action for your policy:

    1. Navigate to Admin > Tasks and then go to the Automation tab.

    2. Navigate to Automation > Approvals > Approval Types.

    3. Select Create.

    4. Provide a Name and Description for the approval type.

    5. Set File Specific to Yes.

    6. In the Process Handler list, select the approval process that you created in step 1.

    7. Select Save Changes.

  3. Create an approval action:

    1. Navigate to Admin > Actions.

    2. Locate and open the Application Approval Request Message Action (HTML).

    3. Select Duplicate and provide a new name for the action.

    4. Select Create.

    5. On the Settings section, set the Message Type to Approval Request Message.

    6. In the Approval Type field, select the approval type that you created in step 2.

    7. Select Save Changes.

  4. Configure the elevation policy:

    Associate the approval action with an existing or new elevation policy to trigger the Torq workflow when an application requires approval.

    1. Locate the existing elevation policy or create a new one under Windows Computers > Application Policies.

    2. In the Actions section, select Edit and add the approval action you created in step 3.

    3. Select Save.

    4. Set the policy Active toggle to enable the policy.