> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/getting-started/workspaces/workspace-types/alternative-workspaces/cyberark.md).

# Cyberark

Connect Remote Desktop Manager to a CyberArk workspace to launch sessions directly from CyberArk accounts and hosts without an SQL Server workspace.

The CyberArk workspace makes it possible to connect directly to your CyberArk and launch your sessions with ease, without the added complexity of an SQL Server workspace.

### Prerequisites

* Remote Desktop Manager Team edition, v2024.1 or later (purchased singly or as part of the [Privileged access management package](https://docs.devolutions.net/resources/getting-started-with-devolutions-packages/privileged-access-management-package))
* CyberArk version 14 or later
* [A Remote Desktop Manager Privileged access management package](https://docs.devolutions.net/resources/getting-started-with-devolutions-packages/privileged-access-management-package)

### Adding a new CyberArk workspace

1. Navigate to ***File – Workspaces – Add new workspace***.
2. Select ***CyberArk*** and click ***Add***.
3. Enter your CyberArk connection details.

<table><thead><tr><th width="239">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Name</strong></td><td>A unique name for the workspace.</td></tr><tr><td><strong>Web services URL</strong></td><td>Your CyberArk PVWA host URL.</td></tr><tr><td><strong>Virtual directory</strong></td><td>Blank by default.</td></tr><tr><td><strong>Version</strong></td><td>Default (V12).</td></tr><tr><td><strong>Authentication mode</strong></td><td><p>Choose the method by which to authenticate between:</p><ul><li><strong>CyberArk</strong></li><li><strong>Windows</strong></li><li><strong>LDAP</strong></li><li><strong>SAML</strong></li><li><strong>Radius</strong></li><li><strong>PKI</strong></li><li><strong>PKIPN</strong></li></ul></td></tr><tr><td><strong>Authentication credentials</strong></td><td>This may be <strong>Custom</strong> (if you choose <strong>SAML</strong> as the authentication mode, credentials are not available) where you will enter a <strong>Username</strong> and <strong>Password</strong>, or <strong>My account settings PVWA</strong>.</td></tr></tbody></table>

4. Click on ***Add***. Once connected, click on a host or account to see all linked entries and connect as needed.

#### First connection

On the first connection to CyberArk, Remote Desktop Manager will:

* Import a Platform called ***Devolutions Remote Desktop Manager*** (PlatformID: ***DevolutionsRDM***)
* Create a Safe (***RDM\_Settings***)
* Create an account (***DataSourceSettings***)

{% hint style="info" %}
Note: This assumes you have the rights to perform the steps above.
{% endhint %}

You will then be prompted to enter a ***CyberArk Integration Module license***. If you do not have one yet, you can [request a trial license](mailto:sales@devolutions.net?subject=Remote%20Desktop%20Manager%20Module%20CyberArk%20-%20CyberArk%20-%20Trial).

#### User

In CyberArk, you must manually grant read access to ***RDM\_Settings*** safe to everyone in the organization that you want to allow using the Remote Desktop Manager CyberArk workspace.

#### Administrator

***Administrators*** are defined as users that have ***Add Safe*** privileges. Administrators in Remote Desktop Manager can, respecting CyberArk permissions:

* Edit the Remote Desktop Manager workspace system settings
* Launch CyberArk PVWA directly.

### Using the CyberArk workspace

Now that you have your CyberArk workspace configured and authenticated, you can connect to hosts quickly and easily. There are two ways to connect to a host: starting from an account and selecting the host, or starting from a host and selecting the account. With this flexibility, choose the most efficient starting point for you.

#### Starting from an account

In addition to the connecting actions, you may choose to edit the ***Properties*** (admin account required) which directly opens the ***Account properties page*** from the CyberArk PVWA. You may also choose to create a new entry (administrator account required) in the Remote Desktop Manager CyberArk workspace which directly opens the ***New account*** page from the CyberArk PVWA. Finally, basic account details are shown in the ***Overview*** pane.

There are three ways to connect to a host from an account view.

1. In the ***Overview – Machines view***, double-click on a ***Machine*** to connect to. This list is populated from the ***Suggested Remote Machines*** listed in the ***CyberArk PVWA Accounts – Accounts View – (account) – Details screen***.
2. Click the ***Connect*** button to display a list of machines to connect to. Depending on your CyberArk account settings you are shown either of the following windows. The first option displays if you do not have the ***Limit access to these machines only*** option enabled within the ***Account – Account Properties*** screen within the CyberArk PVWA. If you have this option enabled, then the second window displays as a drop-down with the list populated from the ***Suggested Remote Machines*** on the ***Account Properties*** page.

You are shown two panes, a ***Host field*** to pick or manually enter the host, or an Remote Desktop Manager vault view of all available hosts to choose from.

With the ***Limit access to these machines only*** option checked in CyberArk PVWA for an account, show only the allowed hosts to connect to.

3. Click the Connect to ***Host*** button to display a list of machines to connect to. This option bypasses PSM (not recommended), and is only shown if the ***System Settings – General – Allow to connect to host*** option is checked. The shown windows reflect the same as in the ***Connect action***, only bypassing PSM.

#### Starting from a machine

Like an account, you can connect to a host through the connect actions, but here you can only create a new entry (administrator account required) in the Remote Desktop Manager CyberArk workspace which directly opens the ***New account*** page from the CyberArk PVWA.

Similar to an account, there are three ways to connect to a host from the machine view.

1. In the ***Overview view***, double-click on an ***Account*** to connect to a host with. This list is populated by filtering all accounts shown in the Remote Desktop Manager CyberArk workspace by their ***Suggested Remote Machines*** to create the list of available accounts.
2. Click the ***Connect*** button to display a list of accounts to connect as. The ***Account*** drop-down reflects the same list as shown in the ***Overview***, while you may use the Remote Desktop Manager CyberArk workspace vault view to connect as a different account.
3. Click the ***Connect to Host*** button to display a list of accounts to connect as. This option bypasses PSM (not recommended), and is only shown if the ***System Settings – General – Allow to connect to host*** option is checked. The shown windows reflect the same as in the ***Connect*** action, only bypassing PSM.

### Workspace settings

If you have connected using an administrator account to your CyberArk workspace, on the Remote Desktop Manager ***Administration*** tab, you are shown three additional options: ***Licenses***, ***System settings***, and a direct ***CyberArk PVWA button***.

### Licenses

Here, you have the option to add, edit, or remove a PAM package which is required for a CyberArk workspace in Remote Desktop Manager free or team edition.

{% hint style="info" %}
This license is stored within the ***CyberArk safe (RDM\_Settings)*** created from the workspace initialization step.
{% endhint %}

### System settings

If you open the ***System settings***, you are shown three different sections: ***General***, ***PVWA***, and ***System message***. Since the CyberArk workspace is a specialized workspace, many traditional Remote Desktop Manager workspace options are not available.

#### General

<table><thead><tr><th width="223">Setting</th><th>Description</th></tr></thead><tbody><tr><td><strong>Auto refresh</strong></td><td>Periodically refresh the data in the display.</td></tr><tr><td><strong>Open sessions externally</strong></td><td>Launch an external window instead of the default embedded view.</td></tr><tr><td><strong>Allow connect to host</strong></td><td>Should the Connect to Host button be displayed, which is a direct connection to a host, bypassing CyberArk PSM (not recommended).</td></tr><tr><td><strong>Ask for reason</strong></td><td>Should a prompt be shown to ask for a reason on each connection.</td></tr><tr><td><strong>Ask for ticket number</strong></td><td>Should a prompt be shown to ask for a ticket number on each connection.</td></tr><tr><td><strong>Ticketing system</strong></td><td>The URL link to a ticketing system.</td></tr><tr><td><strong>Username format</strong></td><td>The username format used to authenticate to hosts.</td></tr><tr><td><strong>Domain search method</strong></td><td>Specify where to locate a user domain to authenticate to hosts.</td></tr><tr><td><strong>Domain field</strong></td><td>If field is chosen for the domain search method, what field to look for the users domain information.</td></tr></tbody></table>

#### PVWA

<table><thead><tr><th width="278">Setting</th><th>Description</th></tr></thead><tbody><tr><td><strong>Allow direct connection (PVWA)</strong></td><td>This option controls whether to show the Connect action.</td></tr><tr><td><strong>Override RDP Settings</strong></td><td>Force an override of specific RDP settings for hosts across the entire workspace.</td></tr></tbody></table>

#### System message

Here, set a message to be displayed on open of the Remote Desktop Manager CyberArk workspace or whenever the message is changed.

### Troubleshooting

For troubleshooting CyberArk workspace issues, refer to [CyberArk workspace issues](/rdm/knowledge-base/troubleshooting-articles/cyberark-workspace-issues.md) or contact our [customer support team](mailto:service@devolutions.net) for assistance.

#### See also

* [Devolutions Academy - Integrating CyberArk with Remote Desktop Manager](https://academy.devolutions.net/student/path/2134631/activity/3125180)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.devolutions.net/rdm/getting-started/workspaces/workspace-types/alternative-workspaces/cyberark.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.