Cayosoft Guardian integration

Content: 

Overview

With Cayosoft Guardian Integration, administrators can quickly see, understand, and roll back mistakes or malicious  changes across the hybrid Active Directory environment within their scope of delegation. Cayosoft Guardian Integration extension provides Recycle Bin web queries and Undelete web action to undelete Active Directory objects and Office 365 users and groups. 

Configuring Cayosoft Guardian

For details please see these articles from Guardian Quick Start Guide: 

1. Check required ports:
   1. Run this script: test-netconnection {sever DNS name where Cayosoft Guardian is installed} -port 443
   2. Check that Guardian Web UI can be opened from the host where Cayosoft Administrator is installed.
2. Installation
3. Add a Tenant
4. Add a Domain
5. Activate Trial

Enabling Guardian Integration extension in Cayosoft Administrator

In order for you can see Recycle Bin queries in Web Portal and be able to undelete objects, you should enable the Guardian Integration extension and configure its' settings. 

1. In Admin Console navigate to Home > Configuration > Connected Systems Extensions > Cayosoft Guardian Integration
2. Check Extension is enabled
3. Specify extension settings. For details please see Cayosoft Guardian Integration extension settings article. 

Recycle Bin web queries

When the Guardian Integration extension is enabled, you will see Recycle bin queries in the Web Portal.  

Recycle bin web query in Active Directory Admin Unit that displays deleted Active Directory objects by delegated scope.

Recycle bin (Users) and Recycle Bin (Groups) in Microsoft Office 365 container that displays deleted Office 365 users and groups. Thу scope can be limited by the Azure AD Administrative Unit.

Performing objects undelete  

In order for the delegated administrators can use Recycle Bin queries in Web Portal, you should add a delegation rule with these queries in the delegation rule scope.

Each Recycle bin web query has Undelete web action to undelete the object that is in the scope of the corresponding query.