Configuration
Proxy, domains, platforms, single sign-on and other server settings.
List Microsoft Entra ID domain configurations
Returns the configured Entra ID tenants, paged.
Add a Microsoft Entra ID domain
Creates an Entra ID tenant configuration.
Test Entra ID credentials without saving
Checks the supplied tenant and app credentials against Microsoft Entra ID.
Delete an Entra ID domain configuration
Deletes the configuration and returns it.
List Active Directory domain configurations
**Required role:** any authenticated user (`user`, `admin`, `superadmin`).
Add an Active Directory domain
Creates a domain configuration.
Discover domain controllers for a domain name
Looks up the DNS SRV records `_ldap._tcp.dc._msdcs.<domain>` and returns the domain controllers sorted by priority, then weight, then name.
Test a bind to a domain controller without saving
Tries to bind to the given server with the supplied credentials and search base.
Get one Active Directory domain configuration
Returns the domain configuration.
Update an Active Directory domain configuration
Deep-merges the body into the stored configuration (partial updates are fine).
Delete an Active Directory domain configuration
Deletes the domain configuration and its macOS domain service-account configuration.
List domain-assigned macOS configurations
Returns every macOS service-account configuration that is tied to a domain.
Create a domain-assigned macOS configuration
Creates the macOS service account used for a domain.
Get one domain-assigned macOS configuration
**Required role:** any authenticated user (`user`, `admin`, `superadmin`).
Delete a domain-assigned macOS configuration
Deletes the configuration and returns it.
Get the Local Account Password Management setting
Returns the global switch for the Local Account Password Management capability.
Enable or disable Local Account Password Management
Merges the request body into the stored setting and saves it.
Get the outbound proxy configuration
Returns the outbound proxy settings the server uses for internet access.
Create or update the outbound proxy configuration
Merges the supplied fields into the stored proxy configuration and saves it.
Test a proxy configuration without saving it
Merges the supplied fields over the stored configuration in memory, then sends an HTTP HEAD request through that proxy to a test URL and reports whether a 2xx response came back. Nothing is saved. The body has the same fields and rules as `PATCH /config/proxy`. A body that includes `protocol`, `host` or `port` but omits `auth` (or sends an empty `auth`) is tested without the stored credentials. A body containing only `verify_ssl` keeps them.
Get the RADIUS second-factor configuration
Returns the RADIUS server settings.
Get metadata of the server TLS certificate
WARNING: This endpoint manages the TLS certificate of the Netwrix Privilege Secure for Discovery server itself.
Get the SAML single sign-on configuration
Returns the SAML SSO settings.