Configure Remote Support for Integration with Password Safe

Minimal configuration is necessary on the BeyondTrust Secure Remote Access Appliance, as follows:

Create an API Service Account - BeyondTrust 16.1 and Earlier

User Account Settings section under API Management

The API user account is used from within the integration to make BeyondTrust Command API calls to BeyondTrust.

  1. Go to /login > Users & Security > Users.
  2. Click Create New User and name it Integration or something similar.
  3. Leave Must Reset Password at Next Login unchecked.
  4. Set Password Expires On to Never Expires.
  5. Set Allowed to View Support Session Reports to View All Sessions.
  6. Check Allowed to view support session recordings.
  7. Set Allowed to View Presentation Session Reports to View All Sessions.
  8. Check Allowed to Use Reporting API and Allowed to Use Command API.
  9. Scroll to the bottom and save the account.

Create an API Service Account - BeyondTrust 16.2 and Later

Screenshot of the Add API Account page highlighting the Permissions and OAuth sections.


  1. Go to Management > API Configuration and click Add to create a new API account.
  2. Provide a name for the API account.
  3. Under Permissions, check Full Access to the Command API.
  4. For the Reporting API, check Allow Access to Support Session Reports and Recordings and Allow Access to Presentation Session Reports and Recordings.
  5. Be sure to copy the values for both the OAuth Client ID and OAuth Client Secret for use in a later step.
  6. Click Save to create the account.