[{"data":1,"prerenderedAt":406},["ShallowReactive",2],{"connector-en-netskope":3},{"id":4,"title":5,"body":6,"category":396,"description":397,"extension":398,"meta":399,"navigation":400,"path":401,"seo":402,"sidebar":403,"stem":404,"updatedAt":396,"__hash__":405},"connectorsEn\u002Fen\u002Fconnectors\u002Fnetskope.md","Netskope",{"type":7,"value":8,"toc":381},"minimark",[9,13,18,21,34,38,51,55,105,109,114,117,193,197,231,264,268,294,297,303,353,357],[10,11,12],"p",{},"The Netskope connector retrieves the devices enrolled with the Netskope Client and the users of your Netskope tenant into OverView, through the Netskope REST API v2.",[14,15,17],"h2",{"id":16},"objective","Objective",[10,19,20],{},"The Netskope connector retrieves the following information:",[22,23,24,28,31],"ul",{},[25,26,27],"li",{},"Devices enrolled with the Netskope Client (hostname, MAC addresses, operating system, manufacturer, model and serial number, client version and status, device classification)",[25,29,30],{},"Users associated with each device",[25,32,33],{},"Users provisioned in the tenant",[14,35,37],{"id":36},"prerequisites","Prerequisites",[22,39,40,48],{},[25,41,42,43,47],{},"A ",[44,45,46],"strong",{},"Tenant Admin"," account on the Netskope console: it is the only predefined role allowed to create roles and service accounts.",[25,49,50],{},"Where the tenant restricts API access with an IP allowlist, the OverView source addresses must be added to it. Contact OverSOC support to obtain them.",[14,52,54],{"id":53},"information-to-provide-in-overview","Information to provide in OverView",[56,57,58,71],"table",{},[59,60,61],"thead",{},[62,63,64,68],"tr",{},[65,66,67],"th",{},"Field",[65,69,70],{},"Description",[72,73,74,95],"tbody",{},[62,75,76,83],{},[77,78,79,82],"td",{},[44,80,81],{},"Tenant URL","*",[77,84,85,86,90,91,94],{},"The URL you use to open the Netskope console, without a trailing slash (e.g., ",[87,88,89],"code",{},"https:\u002F\u002Fexample.goskope.com"," or ",[87,92,93],{},"https:\u002F\u002Fexample.eu.goskope.com",")",[62,96,97,102],{},[77,98,99,82],{},[44,100,101],{},"API Token",[77,103,104],{},"REST API v2 token of the service account created below",[14,106,108],{"id":107},"procedure","Procedure",[110,111,113],"h3",{"id":112},"create-a-read-only-role","Create a read-only role",[10,115,116],{},"The role assigned to the service account defines which API endpoints its token can call.",[118,119,120,134,144,155,187],"ol",{},[25,121,122,123,126,127,126,130,133],{},"Sign in to the Netskope console and go to ",[44,124,125],{},"Settings"," > ",[44,128,129],{},"Administration",[44,131,132],{},"Administrators & Roles",".",[25,135,136,137,140,141,133],{},"On the ",[44,138,139],{},"Roles"," tab, click ",[44,142,143],{},"New",[25,145,146,147,150,151,154],{},"Enter a ",[44,148,149],{},"Role Name"," (e.g., ",[87,152,153],{},"OverView Connector",").",[25,156,157,158,161,162,165,166],{},"Set the permission of the two functional areas below to ",[44,159,160],{},"View",", and leave every other one at ",[44,163,164],{},"None",":\n",[22,167,168,179],{},[25,169,170,126,173,126,176],{},[44,171,172],{},"Access Control",[44,174,175],{},"NS Client",[44,177,178],{},"Devices",[25,180,181,126,184],{},[44,182,183],{},"End User Provisioning",[44,185,186],{},"Users & Groups",[25,188,189,190,133],{},"Click ",[44,191,192],{},"Save",[110,194,196],{"id":195},"create-a-service-account-and-its-token","Create a service account and its token",[118,198,199,207,216,223,228],{},[25,200,136,201,140,204,133],{},[44,202,203],{},"Administrators",[44,205,206],{},"Service Account",[25,208,146,209,150,212,215],{},[44,210,211],{},"Service Account Name",[87,213,214],{},"overview-connector",") and select the role created above.",[25,217,218,219,222],{},"In the ",[44,220,221],{},"REST API Token"," section, set the expiration of the token. The connector stops working when it expires, so renew it before that date.",[25,224,189,225,133],{},[44,226,227],{},"Create",[25,229,230],{},"Copy the token immediately: it is displayed only once.",[232,233,234],"note",{},[10,235,236,237,126,239,126,242,245,246,249,250,253,254,259,260,263],{},"On a tenant not yet migrated to RBAC V3, the ",[44,238,125],{},[44,240,241],{},"Tools",[44,243,244],{},"REST API v2"," page still offers ",[44,247,248],{},"New Token",". Enter a name and an expiration, then click ",[44,251,252],{},"Add Endpoint"," and add the endpoints listed in ",[255,256,258],"a",{"href":257},"#required-permissions","Required Permissions"," with the ",[44,261,262],{},"Read"," privilege.",[110,265,267],{"id":266},"configure-the-connector-in-overview","Configure the Connector in OverView",[118,269,270,279,288],{},[25,271,272,273,126,276,133],{},"In OverView, go to ",[44,274,275],{},"Data Sources Settings",[44,277,278],{},"Sources",[25,280,281,282,284,285,133],{},"Select ",[44,283,5],{}," and click ",[44,286,287],{},"Configure",[25,289,290,291,133],{},"Fill in the Tenant URL and API Token, then click ",[44,292,293],{},"Save Configuration",[14,295,258],{"id":296},"required-permissions",[10,298,299,300,302],{},"The ",[44,301,160],{}," level grants the read operations of the endpoints below, which is all the connector uses: it never creates, modifies or deletes anything in Netskope. The information icon next to each permission in the role editor lists the endpoints it covers.",[56,304,305,318],{},[59,306,307],{},[62,308,309,312,315],{},[65,310,311],{},"Data retrieved",[65,313,314],{},"Endpoint",[65,316,317],{},"Permission",[72,319,320,337],{},[62,321,322,324,329],{},[77,323,178],{},[77,325,326],{},[87,327,328],{},"GET \u002Fapi\u002Fv2\u002Fevents\u002Fdatasearch\u002Fclientstatus",[77,330,331,126,333,126,335],{},[44,332,172],{},[44,334,175],{},[44,336,178],{},[62,338,339,342,347],{},[77,340,341],{},"Users",[77,343,344],{},[87,345,346],{},"GET \u002Fapi\u002Fv2\u002Fscim\u002FUsers",[77,348,349,126,351],{},[44,350,183],{},[44,352,186],{},[14,354,356],{"id":355},"official-documentation","Official Documentation",[22,358,359,367,374],{},[25,360,361],{},[255,362,366],{"href":363,"rel":364},"https:\u002F\u002Fdocs.netskope.com\u002Fen\u002Frest-api-v2-overview-312207",[365],"nofollow","REST API v2 Overview",[25,368,369],{},[255,370,373],{"href":371,"rel":372},"https:\u002F\u002Fdocs.netskope.com\u002Fen\u002Froles-rbac-v3",[365],"Roles (RBAC V3)",[25,375,376],{},[255,377,380],{"href":378,"rel":379},"https:\u002F\u002Fdocs.netskope.com\u002Fen\u002Fadministrators-rbac-v3\u002F",[365],"Administrators (RBAC V3)",{"title":382,"searchDepth":383,"depth":383,"links":384},"",2,[385,386,387,388,394,395],{"id":16,"depth":383,"text":17},{"id":36,"depth":383,"text":37},{"id":53,"depth":383,"text":54},{"id":107,"depth":383,"text":108,"children":389},[390,392,393],{"id":112,"depth":391,"text":113},3,{"id":195,"depth":391,"text":196},{"id":266,"depth":391,"text":267},{"id":296,"depth":383,"text":258},{"id":355,"depth":383,"text":356},null,"Integrate Netskope to retrieve the devices enrolled with the Netskope Client and the users of your tenant","md",{},true,"\u002Fen\u002Fconnectors\u002Fnetskope",{"title":5,"description":397},{"label":5},"en\u002Fconnectors\u002Fnetskope","o6mqHK1uev6iDw_qhrD6XhOdi_6u8NKyJLMkCYgDGv8",1791561314185]