ConnectWise Automate integration

If you’re new to integrations in Rewst, read through our introductory integration documentation here.

Why use the ConnectWise Automate integration?

Our ConnectWise Automate integration enables the automation of remote monitoring and management. Use the ConnectWise Automate API within Rewst workflows to perform actions such as endpoint management, remote monitoring, and IT automations.

Set up the ConnectWise Automate integration

Set up steps in ConnectWise Automate

To create a new ConnectWise Automate integration, you'll need to create a system integrator account.

Create a user class in ConnectWise Automate for our Rewst User:
1. Log in to ConnectWise Automate Control Center using your administrator credentials.
  1. Navigate to Users and Contacts > User Class Manager in the System menu.
  2. Click + at the bottom left corner of the User Class Manager window.
  3. Enter Rewst Automationas the name for the new user class. Click OK.
  4. Set permissions:
    Core Tab: Select the new user class and configure the necessary permissions on the "Core" tab.
    Plugin Tab: If applicable, configure permissions for specific plugins on the "Plugin" tab.
  5. Click Save.
Click Settings in the bottom left corner.
Navigate to User Management.
Click Add in the top left.
Set the First Name, Last Name, Email, User Name, and Password.
Our recommended setup information for the user
Click the User Classes tab.
Click Edit User Classes.
Select the Rewst Automation user class you configured earlier.

Check the Integrator box at the bottom.
Click Save.

If you have completed these steps and customers are not showing up when refreshing options, this is a permission issue. validate that you performed the steps above, and check to ensure the user class has access to customers.

Set up steps in Rewst

Navigate to Configuration > Integrations in the left side menu of your Rewst platform.
Search for ConnectWise Automate in the integrations page.
Click on the integration tile to launch the configuration setup page.
Under Parameters, enter the following information from ConnectWise Automate into the relevant fields:
1. Hostname
2. Password - what is used to log in to ConnectWise Automate
3. Username
4. Client ID - optional, with Rewst's client ID set as the default if this is not updated
5. TOTP Secret - optional, for generating 6-digit MFA codes
Click Save Configuration.
Rewst will do a quick validation of your input. Once completed, you'll see a new section beneath the configuration form for organization mapping. Complete your mapping as desired.

Note that if you have IP address restrictions in place, you'll need to add the Rewst IP to your allowed list. The IP for Rewst is 3.139.170.31.

Least privilege access guide for ConnectWise Automate integration

It is assumed that you do not have conflicting permissions on the script level or group level. Additional work may be required if this is the case and Automate documentation should be referenced.

You must be careful when assigning permissions to your clients. If you copy the permissions wrong there is a chance you could overwrite existing permissions, please be sure to follow ConnectWise Documentation for best practices for assigning the client permissions.

For more information on how to set up user classes and client permissions please visit Connectwise Automate documentation.

Configure user class permissions

To be able to utilize Rewst with least privilege you will need to configure a new user class named Rewst Automation. The class should then be configured with the following permissions.

User class permission

Actions

Permission

Agent Templates

Read

Alerts

Update

Clients

Read, Update, Delete

Clients → Show/Hide Passwords

Access

Clients → Show All

Access

Computers → Force Update

Access

Computers → Retired Assets

Delete

Computers → Show All

Access

Contacts

Read, Update, Delete

Groups

Create, Update, Delete

Groups → Scheduled Scripts

Update

Locations → Show All

Access

Patch Manager

Read, Update

Scripts

Read, Update, Delete

Scripts → Schedule Scripts

Update

Searches → Send Commands

Access

Tickets

Create, Read, Update, Delete

Tickets → Ticket Requests

Access

Configure client level permissions

Client level permissions

Actions

Permission

Locations

Read, Edit, Delete

Projects

Read

Product Keys

Read

Documents

Read

Passwords

Read

Default computer permissions: Enabled if listed

Actions

Permission

Command Prompt

Access

Software and Tools

Install

History

Access

Commands

View, Send

Scripts

Schedule

Information

Edit

Alerts

Clear

Scheduled Scripts

Delete

Actions and endpoints

For more on how actions work in Rewst, check out our introductory actions documentation here.