# CIPP: CyberDrain Improved Partner Portal integration

{% hint style="info" %}
If you’re new to integrations in Rewst, read through our introductory integration documentation [here](https://docs.rewst.help/documentation/integrations).
{% endhint %}

## **What does the** CIPP integration **do?**

Our CIPP (CyberDrain Improved Partner Portal) integration enables automation of Microsoft 365 multi-tenant management. Use the CIPP API within Rewst workflows to automate tasks such as add, edit, and delete users, offboard users, change calendar permissions, and manage shared mailboxes.

## Set up the CIPP integration

### Set up steps in CIPP

1. Log in to your CIPP Portal.
2. Navigate through the sidebar and click **CIPP**.
3. Click **Integrations** under CIPP.
4. You should be able to see the **API URL** and **Tenant ID**.
5. Click **Actions**, and then create a new client. Select the **Admin** Role.  Ensure that the new client is enabled.
6. After creating the client, the client secret will be generated. The **Client ID** should be visible next to the app name of the new API client you have just added.
7. Copy the following information and store it someplace secure.  You'll need it for further setup steps in Rewst.
   * **CIPP API URL** - The URL of your CIPP instance
   * **Client ID** - The Application ID -Client ID- from your Azure AD app registration
   * **Client Secret -** The Client Secret from your Azure AD app registration
   * **Tenant ID** - Your Azure AD Tenant ID

### Set up steps in Rewst

1. Navigate to **Marketplace > Integrations** in the left side menu of your Rewst platform.
2. Search for `CIPP` in the integrations page.\
   \
   ![](https://1835401289-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAQQ1EHVcEsGKBPVHmiav%2Fuploads%2FcltExQLmSvIckUTqZ6MV%2Fimage.png?alt=media\&token=372592dc-a197-448c-a5cd-cf22e9c32bf8)
3. Click on the integration tile to launch the configuration setup page.
4. Enter the following details under the **Parameters** section:
   * **CIPP API URL** - The URL of your CIPP instance
   * **Client ID** - The Application ID (Client ID) from your Azure AD app registration
   * **Client Secret -** The Client Secret from your Azure AD app registration
   * **Tenant ID** - Your Azure AD Tenant ID
5. Click **Save Configuration**.
6. Rewst will do a quick validation of your input. Once completed, you'll see a new section beneath the configuration form for [organization mapping](https://docs.rewst.help/documentation/integrations#what-is-organization-mapping). Complete your mapping as desired.

{% hint style="success" %}
Got an idea for a new Integration? Rewst is constantly adding new integrations to our integrations page. Submit your idea or upvote existing ideas here in our [Canny feedback collector](https://rewst.canny.io/integrations).
{% endhint %}

## Actions and endpoints

{% hint style="info" %}
For more on how actions work in Rewst, check out our [introductory actions documentation here](https://docs.rewst.help/documentation/workflows/actions-in-rewst).&#x20;
{% endhint %}

| Category        | Action                     | Description                                                                                                              |
| --------------- | -------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| Gdap            | List GDAP Roles            | Retrieves a list of existing GDAP roles                                                                                  |
| Gdap            | Create GDAP Invite         | Creates a new GDAP invite                                                                                                |
| Gdap            | List GDAP Role Templates   | Retrieves a list of existing GDAP role templates                                                                         |
| Generic Request | CIPP API Request           | Generic action for making authenticated requests against the CIPP API                                                    |
| Licenses        | List Licenses              | Retrieves a list of licenses                                                                                             |
| Security        | List Application Queue     | Retrieves a list of applications in the consent queue to keep tabs on application consent requests from users            |
| Security        | List MFA Users             | Retrieves a list of users with MFA information to generate compliance reports and flags who's enabled and who isn't      |
| Security        | Send MFA Push              | Sends an MFA push notification to a user                                                                                 |
| Sharepoint      | Set SharePoint Member      | Adds or removes a user as a member of a SharePoint site                                                                  |
| Sharepoint      | List Sites                 | Lists SharePoint sites                                                                                                   |
| Sharepoint      | Set SharePoint Permissions | Adds or removes a user as a site admin for SharePoint or adds and removes permissions for OneDrive                       |
| Standards       | List Standards             | Retrieves a list of standards                                                                                            |
| Standards       | List Standard Templates    | Retrieves a list of standard templates                                                                                   |
| Tenants         | List Graph Request         | Generic endpoint for making Graph API requests with different parameters                                                 |
| Tenants         | List Tenants               | Retrieves a list of tenants                                                                                              |
| Tools           | List Domain Health         | This action is used to check the health of a domain. This can check for the SPF, NS, DMARC, DKIM, and other DNS records. |
| Tools           | List Domain Analyser       | This action is used to check general health diagnostics and comprehensive domain security assessments.                   |
| Users           | List Users                 | Lists users for selection in forms                                                                                       |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.rewst.help/documentation/integrations/integration-guides/cipp-cyberdrain-improved-partner-portal-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
