ISC : Enable AD Logs in VA

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hi,

I need to enable AD logs. For that I tried 2 approach.

Approach 1; Through beta API’s. I added required scopes, still I’m getting below errors while I’m trying to fetch managed-clusters.

image
image1253×726 65.6 KB

Approach 2: I tried to enable in /home/sailpoint/ccg/log4j.properties, but I need sudo access for that. I can not update using account ‘sailpoint’

Can anyone please suggest on these.

2

Hi @Arpitha1,

You will need to use ORG_ADMIN access token for this operation.

Can you try with admin token ?

Thanks,
Shailee

1 Like
3

I Tried to generate PAT, by going to Preferences as I’m admin. I could able to create it, but I don’t see client secret. I can just see client id.

4

Hi @Arpitha1 ,

Create a new PAT , you cannot see client secret of a PAT if you did not noted it down while creating .

Create a new PAT will scope:all , and user must be org_admin .
Note down the Client Id and Client Secret .

Thanks

2 Likes
5

I agree with @sidharth_tarlapally , you wont be able to see the secret value again. Please create a new PAT token with scope: ALL and ORG_ADMIN. Do not forget to note down the secret this time.

1 Like
6

Hey Arpitha,
when you create a new PAT enable the sp:scopes:all to get a all full scopes.

image
image592×828 18.5 KB

Next note those Client ID and Secret. so you can use it on postman

1 Like
7

Sure, let me try and update you all.