# Integrating SailPoint with BeyondTrust Password Safe SaaS

> [!NOTE]
>
> **Integration**
>
> This is an integration and requires additional licensing or subscriptions to utilize it. For more information, contact your customer success manager.

The SailPoint and Privileged Account Management source for BeyondTrust Password Safe SaaS provides a standardized approach to managing accounts in SailPoint.

This document is designed to give specific information about the requirements and field definitions needed to get a working instance of a BeyondTrust Password Safe SaaS source.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

This page lists the features supported by the BeyondTrust Password Safe SaaS connector. It also lists supported use cases that the connector can assist with.

> [!NOTE]
>
> Before you can use any item marked with an asterisk (\*), SailPoint must activate the feature for your site. For more information on opening a support ticket, refer to [Working With Services](<https://community.sailpoint.com/knowledge/collection/working-with-services>).

### Account Management

- Aggregation (local and external users)

  > **Note**
  >
  > Local users are users which reside locally in the PAM system. External users are users synced from a managed system outside of the PAM system.
- Aggregate a single account
- Create account through provisioning (local users only)
- Enable and disable accounts through provisioning
- Add and remove entitlement(s)
- Delete accounts

### Entitlement Management (groups)

- Group aggregation
- Aggregate a single group
- Aggregate Container permissions as Direct permissions

## Supported Use Cases

The following use cases are facilitated by the BeyondTrust Password Safe SaaS connector.

### Read Operation

- Fetch local and external users from the PAM system.
- Fetch local groups from the PAM system.
- View Safes / Containers and view how their permissions are assigned to groups.

### Provisioning

- Create local users on the PAM system.
- Add or remove internal and external users from local groups. This indirectly assigns and revokes Safes and their associated permissions.
- Enable or disable internal and external users residing on the PAM system.

For more information on features, refer to [Source Features](<https://community.sailpoint.com/knowledge/Identity-Security-Cloud-Source-Features>).

## Prerequisites

- The BeyondTrust Password Safe (Cloud) application as set-up in your IT environment.

## Supported Managed Systems

The BeyondTrust Password Safe SaaS connector supports interactions with the managed systems listed on this page.

- BeyondInsight version 23.3.0.813 and later

## Required Permissions

For the permissions and access details, refer to [BeyondTrust BeyondInsight Guides](<https://www.beyondtrust.com/docs/beyondinsight-password-safe/bi/index.htm>).