- Configure and Authenticate Cloud Apps
- Add Open API Authentication and Roles
- Accounts API v1
- Authentication
- Objects used with these APIs
- Get all accounts
- Get single account
- Create an account
- Modify an account
- Delete an account
- Reset an account’s history
- Get all accounts’ health statuses
- Get an account’s health status
- Activate an account
- Deactivate an account
- (Deprecated) Activate an account’s endpoint
- (Deprecated) Deactivate an account’s endpoint
- Activate an account’s endpoint
- Deactivate an account’s endpoint
- Test Account Connection
- Get Account Users
- Get Exposed Resources
- Export Account
- Import Account
- Get ConnectorsSyncSettings
- Set ConnectorsSyncSettings
- Accounts API v2
- Monitoring API
- Remediation API
- Settings and Reports API
- SIEM API
- Tenancy API
- Version API
Tenancy API
An Exabeam Cloud Connectors tenant represents a business entity with its own accounts and configuration (i.e. a SIEM to which you send events). For example a tenant could be a business unit that manages its own SalesForce and ServiceNow accounts.
To manage your tenant, you can use the tenancy API
Prefix all API URLs with:
https://<your-server-ip>:8443/openapi/api/rest/v1/tenancy
Authentication
Objects used with these APIs
TenancyMode
{ "mode": enum string, single|multitenant }
Tenant
{ "id": string, optional, if absent the id would be auto generated, "name": string, "siem": { "id": string, "name": string } }
Get all tenants
GET /tenants
Response:
200,
List<Tenant>
Get a tenant
GET /tenants/{tenant-id}
Response:
200,
Tenant
Create a tenant
POST /tenants
Body:
Tenant
where the id is optional (if id is given it would be used as the new Tenant id. Its max size is 64 characters and must be unique)
Response:
204
Update a tenant
PUT /tenants/{tenant-id}
Body:
Tenant
Response:
200
Delete a tenant
DELETE /tenants/{tenant-id}
Query Parameters:
force - an optional boolean param with "false" as a default value. Tenant is deleted if no accounts found in tenant OR force="true"
Response:
200
Resync events to SIEM
POST /tenants/{tenant-id}/siem/resync
Query Parameters:
resyncFrom - an optional date time to re sync events from (ISO-8601 extended offset date-time format such as '2011-12-03T10:15:30+01:00')
Response:
204