Skip to main content

Targeting the SharePoint server

For each Microsoft Office SharePoint Server domain, add a target system in Bravura Security Fabric (Manage the System > Resources > Target systems):

  • Type is SharePoint Server.

  • Address uses the following options

    URL The main URL of the site.

    The URL specified in the target address must only contain the root of the site. For example, the web browser might display http://sharepoint1/site1/Pages/site-home.aspx but the target address can only contain http://sharepoint1/site1/.

    Add the port number to the site URL if you are not using the default port. For example:

    http://sharepoint1:4589/site1/

    (key: url)

    Authentication type The authentication type being used for the site; claims-based or classic. The default is claims-based authentication.

    Ensure the authentication type matches the actual authentication type being used in the site to allow the agent to discover the actual accounts you wish to list.

    (key: auth)

    Server The SharePoint server name

    (key: svr)

    Server is required when targeting a SharePoint site without using proxy service and it should be the fully qualified domain name (FQDN) of the SharePoint server.

    Account type Select Regular users or Managed accounts.

    • Regular users The agent lists all users who have permissions to access a SharePoint site.

    • Managed accounts Lists SharePoint managed accounts.

      (key: accttype)

    Since Bravura Privilege only manages SharePoint managed accounts’ password but not regular users’ password, it is recommended to select Managed accounts to list managed accounts from SharePoint farms, and create another target system to list regular users from SharePoint sites.

    The address is entered in KVGroup syntax:

    {url=http://sharepoint1:2427/site1/site2/;auth=claim|classic;+[+svr=<server>;+]+accttype=managed|regular;}

  • Set Managed Group/Network resource target system type to SharePoint Resource if you want to use the nrshrpt plugin (recommended).

  • The Administrator ID is the domain name, followed by a backslash, then the Sharepoint administrator name, for example:

    domain-name\administrator

The full list of target system parameters is explained in Target System Options .

Users can be listed without Active Directory, but you cannot create SharePoint users with Bravura Security Fabric until Active Directory has been setup.

Ensure the target system administrator has sufficient permissions to access SharePoint farm when listing managed accounts, also enable PowerShell remote access for SharePoint management on the server if the connector needs remote access to SharePoint.

In this section: