# Privileged Remote Access

## Requirements

* BeyondInsight = 22.X or higher
* Linux Control Center = 2.10.X or higher
* **OAuth Client ID** and **OAuth Client Secret** from Privileged Remote Access

## Overview

The integration of Linux Control Center with BeyondTrust Privileged Remote Access allows you to transfer Hosts managed by LCC to a *JumpGroup* in PRA.

## Objective

The objective of this document is to demonstrate the step-by-step process for integrating LCC with Privileged Remote Access.

## API Configuration in PRA

1. Access the Privileged Remote Access **/login** screen.
2. Click on **Management** and click on **API Configuration**.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-395616557e435cc5917046ae76be76d6cbd937e1%2Fmanagement_pra.png?alt=media)

1. Click on **ADD** in API Accounts.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-6b698a4a62822d785ea9d25247315d77a2c4c8ca%2Fadd_api_pra.png?alt=media)

1. Enter the **Permissions** as shown in the image below.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-e2133a76038bd36728d618396e7b9f60e269130b%2Fpermissoes_pra.png?alt=media)

1. Create a *name* to identify the access and save the **OAuth Client ID** and **OAuth Client Secret** in a safe place and click **Save**

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-97abd98ade307246860c0b67ef04739b0c2833bc%2Fids_api.png?alt=media)

## Linux Control Center Integration

1. Access the Linux Control Center and click **Config**

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-8c0671f317ba546b625aa5609b7b961fc75f67cd%2Fconfig_dashboard_pra.png?alt=media)

1. Click **BeyondTrust**

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-7975c3cb0503cc3a5b10a85b673ad971103d8ea1%2Fbotao_beyondtrust.png?alt=media)

1. Click **Privileged Remote Access**

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-119ef9377771c669bf1c650972976e1a9b36cb5f%2Fbotao_pra.png?alt=media)

1. Click **Create**

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-0089ebd5f1f67ab834bae316472ca1453f8fcd3e%2Fbotao_create.png?alt=media)

1. Fill in the requested fields

* **Name:** Name to identify the integration
* **URL:** URL of the BeyondTrust PRA of your environment
* **Client ID:** PRA Client ID
* **Secret:** PRA Secret Key

1. Click **Save**

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-c5fbf346c4bccc9f64e015a8a7e74f5ce6cd435a%2Fbotao_save.png?alt=media)

1. Click on the created integration and click **Test Connection** to validate the connection of the LCC with the PRA.

* Wait for the **PRA Test Connection** *Action* to be completed in the *Queue*.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-c240d076e0d9815a7954cfaf39a3fa00575311df%2Ftest_connection.png?alt=media)

1. The **Status** field will have a green icon indicating that the authentication was successfully validated.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-c91cfb19b1e79f233bc3f7a8a655e061b841de4c%2Fpra_validado.png?alt=media)

1. Click on the **Jump Items** tab and click **Sync**.

* Wait for the **PRA Sync** *Action* to be completed in the *Queue*.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-d81794101058178e023d0a22cdb4a1cf5259d8d4%2Fsync_jump_item.png?alt=media)

1. The Hostname of the *Jumpitems* will be listed with their respective *Jump Group* and *Jumpoint*. 1. Click **Create**.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-8ec0792a8a2d2dff9fe128d6df67f1537174f0b5%2Fbotao_create_jumpoint.png?alt=media)

1. Choose which **Jumpoint** the Host will be imported to.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-74d17a53c7818bf4202dc856a93d5b0af78d7a74%2Fcampo_jumpoint.png?alt=media)

1. Click **Host** to select the desired Host. You can also select an LCC Host group in the **Groups** field.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-5ce59ba33ff089e7325bd1c8974d397b92d409f7%2Fcampo_host_jumpoint.png?alt=media)

1. Select the PRA **Jump Group** where the Hosts will be imported.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-def4ece6bdaa7097a35df944f220337ae7db344c%2Fcampo_jump_groups.png?alt=media)

1. Click **Save** to execute the *Action* that will import the selected Hosts to PRA.

![](https://1620115297-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtZm19HsLxuDm2GumYKEz%2Fuploads%2Fgit-blob-13008ca58d6eaed21b6e87d6213daaa9e9c6a1a8%2Fbotao_save_jumpoint.png?alt=media)