Documentation
Shipped with this build. The API explorer lives at /swagger.
Platform reference
- Identity and access
- Beyondtrust
- Cloud Services
- Clouds
- Editions
- Getting Started
- Hypervisors
- Operations
- Platform
- Preview
Getting started · per-cloud setup
Hypervisors
Clouds
Clouds · VMs
Clouds · Cloud Sandbox
Cloud services
Cloud services · Databases
Cloud services · Cloud Functions
- Authentication
- Azure Role Grant
- Db Grant
- Entitle Rest
- Pairing
- Portainer Access
- Troubleshooting
- Writing Your Own
Cloud services · Kubernetes
Cloud services · Portainer
Cloud services · Rancher
Preview
Preview · Directories
Preview · Workload Lab
- The Certificate Lab
- Certificates
- Short-lived cloud credentials
- What consumes these credentials
- Dynamic AWS and Azure credentials
- Workload access to Kubernetes
- SPIFFE and SPIRE
- Onboarding a subordinate CA
Preview · Workload Lab · SPIFFE
Preview · Workload Lab · certificates
Preview · Workload Lab · certificate lab
Operations
- Auto-delete Timer
- Config Management
- Cloud Costs
- Image Management
- Inventory
- Job Worker
- Scheduling
- Storage Management
Operations · Config Management
Operations · Image Management
Operations · Storage Management
Operations · Job Worker
Operations · scheduling
Admin
Admin · Secrets Management
Admin · Permissions
BeyondTrust
- Entitle
- EPM for Linux
- Gateway hosts
- Password Safe
- Platform Identity
- Privileged Remote Access
- BeyondTrust Workload Credentials
BeyondTrust · Gateway hosts
BeyondTrust · Password Safe
- Databases: the shared model
- Kubernetes Tokens
- Public Api
- Troubleshooting
- Vm Onboarding
- What It Enables
- Workstream Attributes
BeyondTrust · Password Safe · databases
BeyondTrust · Entitle
Platform
- Cloud Hosting
- Config Migration
- Container User
- Mcp Server
- OIDC and single sign-on
- Remote Worker
- SPIFFE and SPIRE
- Where work runs: remote workers and remote agents
- Workload Identity
Platform · OIDC and single sign-on
Platform · OIDC · Kubernetes federation
- Kubernetes federation: Entra ID
- Kubernetes federation: other OIDC
- Kubernetes federation: Okta
- Kubernetes federation: PingOne
Platform · OIDC · Kubernetes federation · Entra
Platform · SPIFFE and SPIRE
Platform · SPIFFE · remote agents
- Running the agent on your host
- Agent-executed Config Management
- Credentials an agent uses
- Deploying
- Enrolling an agent
- Agent-brokered file shares
- Hypervisor connections
- Lifecycle
- Spire Attestation
Platform · SPIFFE · remote agents · hypervisors
Platform · cloud hosting
Platform · cloud hosting · Azure Container Apps
Platform · Remote Worker
- The Ansible runner
- Config field reference
- The Kubernetes runner
- Playbook structure
- Secrets in a run
- Shared cloud infrastructure
Editions
Demo and POV profiles
Demo profile
Demo profile · personas
- AI / agent platform
- Cloud Ops engineer
- DBA / data platform
- DevOps engineer
- FinOps / cloud governance
- Hypervisor admin
- IAM engineer
- Identity architect
- IT engineer
- Network / firewall admin
- OT / ICS engineer
- Security analyst
- Platform / SRE
OT Demo Cell
Agent Demo Cell
POV profile
- What the customer sees
- Demo cells in a POV
- The Gateway and the Resource Broker
- Keeping a POV true, and reaping it
- Password Safe POC runbook
- Running POVs on a public cloud
- Skytap
- Standing up a POV instance
- Wiring VMs into PRA, Password Safe and Entitle