: Get Started with Enterprise DLP API for TSG-Supported Tenants
Focus
Focus

Get Started with Enterprise DLP API for TSG-Supported Tenants

Table of Contents

Get Started with Enterprise DLP API for TSG-Supported Tenants

Get started with Enterprise data loss prevention (DLP) API for tenants that are TSG-aware.
You can access Enterprise data loss prevention (DLP) data for Tenant Service Group (TSG)-supported tenants using the Enterprise DLP APIs. To get started, you must create a Common Services Service Account and generate an access token.
  1. In the bottom-left corner, expand the tenant menu and select
    Identity & Access
    .
  2. Add a service account for the tenant.
    1. Add
      Access Management for the tenant.
    2. Add the
      Identity Information
      .
      • Identity Type
        —Select
        Service Account
      • Service Account Name
        —Enter the name for the service account.
      • Modify the remaining
        Optional
        fields as needed. Click
        Next
        to continue.
    3. The Client Credentials is now displayed with the
      Client ID
      and
      Client Secret
      .
      You can manually copy the Client Credentials or
      Download CSV File
      to download the Client Credentials in plaintext locally to your device.
      Click
      Next
      to continue.
    4. (
      Optional
      ) Assign Roles to create role-based access for the service account.
      Review the roles and permissions through Common Services across all tenants and services, or review those specific to Enterprise DLP.
    5. Submit
      .
  3. Create an access token to authenticate the service account.
    You can also use the provided
    curl/cURL
    command to send an API request from your device command prompt. Client ID and Secret are not required when using the
    curl/cURL
    command.
    1. For the Username, add the Client ID for the service account.
    2. For the Password, add the Client Secret for the service account.
    3. In the Body, enter the following
      grant_type=client_credentials
    4. Send API Request
      .
    5. Review the Response to confirm the API request was successfully sent.
      The access token expires 15 minutes after the API request is successfully sent. You must generate a new access token for the service account if the access token expires before you can use it to send API requests.
      The below is an example of a Response for a successfully API request.
  4. Using the generated access token, you can send requests to the API to Retrieve Reports.

Recommended For You