API requirements for Tenable.sc

The server requires a user account. A user leveraged to adapter needs compatible machines within the environment.

The account utilized for should be assigned the default full access group, and auditor role permissions. This provides the account access needed to complete the dataflow. Additionally, the user can be defined using custom access permissions to limit the scope of assets retrieved by . A group within can be limited by both the viewable hosts and the repositories. In general, the role of auditor should be leveraged as well, to follow the principle of least privileged. The dataflow retrieves information only when the account has granted visibility to receive.

Here is how the “Create User” page, Membership section should look like the new user is created:

impact statement

uses the pytenable library (developed by ). leverages a default batch size of 1000, which is conservative and is prescribed by . With the default settings, the server should not see a noticeable impact when the adapter is running.