Skip to main content
Sign in

Creating workflows for Absolute assets

  • April 17, 2024 08:18
  • Updated

Let Oomnitza be your single source of truth!

You'll get visibility of your assets as data from Absolute is automatically transformed into consumable information and actionable insights.

Connect Oomnitza and Absolute in minutes

You'll get visibility of your Absolute assets by creating configurable workflows to automate tasks such as:

    • Creating and canceling Send Message requests
    • Creating Freeze requests, removing Freeze requests for devices that are frozen, and creating, updating and deleting freeze messages
    • Creating Wipe requests, and canceling Wipe actions
    • Creating Unenroll device requests
    •  Creating File Delete requests that remotely delete files and folders from Windows and Mac devices, and canceling file delete requests

Navigation

small_blue_link.svgBefore you start

small_blue_link.svgCreating workflows

Before you start

You should have followed the steps in creating an extended integration for Absolute assets and added your credentials to Oomnitza and run the extended asset integration. You can use the host information retrieved in this integration to trigger workflows.

Creating workflows

To create an asset workflow, you must complete these steps:  

  1. Click Configuration > Workflows 
  2. Click Add (+) and select Assets from the list.
  3. Edit the Begin Block and add rules to trigger the workflow. For example, if you set the  Actions to New, the workflow will run for every new asset record added to Oomnitza.
  4. Drag and drop the API block onto the Sandbox.
  5. Click Edit on the API block and enter Absolute Protect in the search field. 
  6. Select a preset from the list below. To choose a preset, click the forward arrow (>).
  7. Select the credentials that you created in Creating an extended integration for Absolute assets
  8. Enter any mandatory information when prompted. 
  9. Select Advanced Mode.
  10. Select the Information tab. Ensure that the property {{absolute_device_id}}, exists in Oomnitza and is populated with information before you run this workflow. You can create an asset integration to retrieve this information before you run this workflow.
  11. Select the Response tab. You can map the entire response by placing {{response}} in the Response field and mapping it to an Oomnitza field. See Mapping positive and negative responses.
  12. Connect the Blocks. 
  13. Save, validate, and activate your workflow.

Using the Absolute Send a Message to Device preset

The Absolute Send a Message to Device preset sends a message to the devices specified.

You will be prompted to supply the following information:

  • Message: The content of the message, in HTML format
  • Snooze Time: The number of times a device user can snooze the message
    • Default: 3
    • Minimum: 1
    • Maximum: 5
  • Display Mode: The display mode for the message
    • Dialog: displayed in a dialog in the bottom right of the screen
    • FullScreen: displayed as a full-screen message
  • Submit Button Caption: The label on the message response button. Defaults to Submit

The devices to be updated is required in the Advanced Mode > Body tab and is referenced in the property{{absolute_device_id}}.You can create an asset integration to retrieve this information before you run this workflow.

For further information, see Absolute Protect API Documentation: Send a message.

Using the Absolute Cancel Message Request preset

The Absolute Cancel Message Request preset cancels all Send Message actions with an actionsStatus of Pending, Ready, or Processing. 

You will be prompted to supply the following information:

  • Action UID: The system-defined unique identifiers of the actions included in the request. Use the GET /v3/actions/eum/get-actions endpoint to find the Action UID.
  • Cancel All Actions? Enable to cancel all actions in the request, regardless of any specified Action UID. Disable to cancel actions only for the specified Action UID

The Request UID or unique identifier associated with the request is required in the Advanced Mode > Information tab and is referenced in the property{{request_uid}}.

For further information, see Absolute Protect API Documentation: Cancel a Send Message request.

Using the Absolute Freeze Device preset

The Absolute Freeze Device preset freezes specific devices.

You will need to supply the following JSON data in the Advanced Mode > Body tab. Some values, such as "passcode", "length", "offlineTimeSeconds" and "deviceFreezeType" are only mandatory if certain criteria are selected and can be removed if not required. Refer to the detailed description below or consult Absolute Protect API Documentation: Freeze devices.

{
  "message": "string",
  "messageName": "string",
  "deviceUids": [
    "{{absolute_device_id}}"
  ],
  "passcodeDefinition": {
    "option": "UserDefined",
    "passcode": "string",
    "length": 0
  },
  "notificationEmails": [
    "string"
  ],
  "requestTitle": "string",
  "freezeDefinition": {
    "deviceFreezeType": "OnDemand",
    "offlineTimeSeconds": 0,
    "scheduledFreezeDateTimeUtc": "2019-08-24T14:15:22Z"
  }
}
  • "message": The HTML-coded Freeze message. Max 4,000 characters. Refer to the documentation for supported HTML tags.
  • "messageName": The name of the Freeze message shown on the device when the device is frozen.Max 255 characters
  • "option". Supply one of the following:
    • UserDefined: a user-defined unfreeze code is generated and is the same for all devices. Set the unfreeze code in the "passcode" value.
    • RandomForAll: an unfreeze code is randomly generated and is the same for all devices. Set the length of the unfreeze code in the "length" value.
    • RandomForEach: a unique unfreeze code is randomly generated for each device. Set the length of the unfreeze code in the "length" value.
  • "passcode": The user-defined 4 to 8-digit numeric unfreeze code that can be used to immediately unfreeze a frozen device. Mandatory when the "option" is set to UserDefined
  • "length": The length of the unfreeze code. Must be between 4 and 8. If the request includes Android devices, use 4. Mandatory when the "option" is set to RandomForEach or RandomForAll
  • "notificationEmails": An array of email addresses that receive an email notification when the status of the Freeze request changes
  • "requestTitle": The title of the request.
  • "deviceFreezeType": The type of freeze. Can be one of the following:
    • OnDemand: freezes the device on the next connection with the Absolute Monitoring Center, typically within 15 minutes. This applies to all operating systems
    • Scheduled: freezes a device on its next connection with the Absolute Monitoring Center on or after a specified date and time. This applies to Windows and Mac devices that are regularly contacting the Absolute Monitoring Center
    • Offline: freezes a device when it has been offline for a specified period of time. This applies to Windows and Mac devices. Set the length of the offline time in "offlineTimeSeconds".  Depending on your account, this type of Freeze request may not work. Refer to the documentation for more information.
  • "offlineTimeSeconds": The length of time (in seconds) that a device can be offline before it is frozen. Mandatory when the "deviceFreezeType" is set to Offline
  • "scheduledFreezeDateTimeUtc": The date and time (ISO 8601) the device should be frozen. Mandatory when the "deviceFreezeType" is set to Scheduled

The devices to be updated are required  and is referenced in the property{{absolute_device_id}}.You can create an asset integration to retrieve this information before you run this workflow.

Using the Absolute Absolute Remove Freeze Request preset

The Absolute Remove Freeze Request preset removes a freeze request for specific devices. You will be prompted to supply the following information:

  • Remove Scheduled? Enable to create a Remove Freeze request for devices with a status of Frozen on Scheduleand delete a Scheduled Freeze request for devices with a status of Freeze Requested and Freeze Scheduled. If disabled, a Remove Freeze request is created but the Scheduled Freeze request is not deleted.
  • Remove Offline? Enable to create a Remove Freeze request for devices with a status of Frozen by Condition: Offline, and remove Offline Freeze requests from devices with a status of Freeze Requested or Freeze Condition - Offline Set. If disabled, a Remove Freeze request is created for the devices but the Conditional - Offline Freeze request is not deleted

The devices to be updated are required in the Advanced Mode > Body tab and is referenced in the property{{absolute_device_id}}.You can create an asset integration to retrieve this information before you run this workflow.

For further information, see Absolute Protect API Documentation: Remove Freeze requests.

Using the Absolute Create Freeze Message preset

The Absolute Create Freeze Message preset creates a new Freeze message. A Freeze message is a full-screen message that displays on the device and informs the user that their device is frozen and can't be used.

You will be prompted to supply the following information:

  • Name: The name of the Freeze message shown on the device when the device is frozen.Max 255 characters
  • Content: The HTML-coded Freeze message. Max 4,000 characters. Refer to the documentation for supported HTML tags.

For further information, see Absolute Protect API Documentation: Create a Freeze message.

Using the Absolute Delete Freeze Message preset

The Absolute Delete Freeze Message preset deletes an existing Freeze message.

The Message UID or unique identifier associated with the request is required in the Advanced Mode > Information tab and is referenced in the property{{message_uid}}.You can use the GET /v3/actions/freeze/messages endpoint to find the  Message UID.  The Message UID is also returned in the Absolute Create Freeze Message preset response.

For further information, see Absolute Protect API Documentation: Delete a Freeze message.

Using the Absolute Update Freeze Message preset

The Absolute Update Freeze Message preset updates an existing Freeze message.

You will be prompted to supply the following information:

  • Name: The name of the Freeze message shown on the device when the device is frozen.Max 255 characters
  • Content: The HTML-coded Freeze message. Max 4,000 characters. Refer to the documentation for supported HTML tags.

The Message UID or unique identifier associated with the request is required in the Advanced Mode > Information tab and is referenced in the property{{message_uid}}.You can use the GET /v3/actions/freeze/messages endpoint to find the  Message UID.  The Message UID is also returned in the Absolute Create Freeze Message preset response.

For further information, see Absolute Protect API Documentation: Update a Freeze message.

Using the Absolute Wipe Device preset

The Absolute Wipe Device preset wipes specified devices. You can wipe the following devices:

  • Windows devices encrypted by BitLocker Drive Encryption
  • Mac devices encrypted by FileVault

You will be prompted to supply the following information:

  • Unenroll Device and Free License: Applies to Windows devices. Enable to unenroll the device after the Wipe is complete. Disable to not unenroll the device. Mac devices are always unenrolled.

For Mac users, you will need to add the username and password of a user with administrative rights to the Advanced Mode > Body tab.

{
  "deviceUids": [
    "{{absolute_device_id}}"
  ],
  "macUsername": "string",
  "macPwd": "string",
  "unenrollDevicesAndFreeLicenses": true
}

The devices to be updated are required in the Advanced Mode > Body tab and is referenced in the property{{absolute_device_id}}.You can create an asset integration to retrieve this information before you run this workflow.

For further information, see Absolute Protect API Documentation: Wipe devices.

Using the Absolute Cancel Wipe Request preset

The Absolute Cancel Wipe Request preset cancels all wipe device actions with an actionStatus of Pending. 

You will be prompted to supply the following information:

  • Action UID: The system-defined unique identifiers of the actions included in the request. Use the GET /v3/actions/eum/get-actions endpoint to find the Action UID.
  • Cancel All Actions? Enable to cancel all actions in the request, regardless of any specified Action UID. Disable to cancel actions only for the specified Action UID

The Request UID or unique identifier associated with the request is required in the Advanced Mode > Information tab and is referenced in the property{{request_uid}}.

You can use theGET /v3/actions/requests/wipeendpoint to find the  Request UID.  The Request UID is also returned in the Wipe Devices preset response.

For further information, see Absolute Protect API Documentation: Cancel a Wipe request.

Using the Absolute Unenroll Device preset

The Absolute Unenroll Device preset creates an Unenroll Device request for the specified devices. Unenroll Device requests are not supported on disabled or inactive devices and can overwrite outstanding security actions on a device, such as a Freeze or Wipe request. Refer to the documentation for more information. Enable the Exclude Missing Devices checkbox to exclude stolen devices from the request. For further information, see Absolute Protect API Documentation: Unenroll devices.

Using the Absolute Cancel File Delete Request preset

The Absolute Cancel File Delete Request preset cancels all File Delete actions with an actionStatus of Pending.

You will be prompted to supply the following information:

  • Action UID: The system-defined unique identifiers of the actions included in the request. Use the GET /v3/actions/eum/get-actions endpoint to find the Action UID.
  • Cancel All Actions? Enable to cancel all actions in the request, regardless of any specified Action UID. Disable to cancel actions only for the specified Action UID

The Request UID or unique identifier associated with the request is required in the Advanced Mode > Information tab and is referenced in the property{{request_uid}}.

You can use theGET /v3/actions/requests/wipeendpoint to find the  Request UID.  The Request UID is also returned in the Wipe Devices preset response.

For further information, see Absolute Protect API Documentation: Cancel a File Delete request.

Using the Absolute Delete Specific User File preset

The Absolute Delete Specific User File preset deletes specified files. You will be prompted to supply the following information:

  • Secure Erase Count: The number of times the file content is overwritten with non-sensitive data (series of zeros and ones) Options are1,3, or7.
  • Include File Data In Log: Enable to include the file's creation date and time, and the date and time it was last modified or accessed in the log file.
  • Platform: The device platform that the file applies to.
  • File Pattern: Specifies the files, folders, or file types to delete. The following patterns are supported:
    • filename.extension: Delete a file in any location
    • folder name/filename: Delete a file in a location
    • folder name/: Delete a folder

The devices to be updated are required in the Advanced Mode > Body tab and is referenced in the property{{absolute_device_id}}.You can create an asset integration to retrieve this information before you run this workflow.

For further information, see Absolute Protect API Documentation: Delete files.

Using the Absolute Wipe All User Files preset

The Absolute Wipe All User Files preset deletes all user files (limited to 100 devices per request).

You will be prompted to supply the following information:

  • Secure Erase Count: The number of times the file content is overwritten with non-sensitive data (series of zeros and ones) Options are1,3, or7.
  • Unenroll Device and Free License: This applies to Windows devices only. Enable to unenroll the device after the Wipe is complete. Disable to not unenroll the device. Mac devices are always unenrolled.

The devices to be updated are required in the Advanced Mode > Body tab and is referenced in the property{{absolute_device_id}}.You can create an asset integration to retrieve this information before you run this workflow.

For further information, see Absolute Protect API Documentation: Delete files.

Using the Absolute Wipe All User Files and OS preset

The Absolute Wipe All User Files and OS preset deletes all files including the operating system (limited to 100 Windows devices per request). Requires the same information as the Absolute Wipe All User Files preset.

articles_icon.svg Reference articles for workflows

Related articles

Comments

0 comments

Please sign in to leave a comment.