Executing VSA automation in IT Glue

Introduction

Kaseya VSA is an RMM solution that provides you information about your CPU, memory, disk usage, last reboot, and more. The Agent Procedures module in Kaseya VSA allows you to automate tasks performed on managed machines. Agent Procedures can be run immediately, by schedule, or in response to a VSA system event or API request.

You can execute VSA Agent Procedures directly within IT Glue to further streamline your support process. By eliminating the time needed to switch between IT Glue and Kaseya VSA, you can focus on solving tickets more efficiently. Follow the steps in this article to set up the capability allowing you to run VSA Agent Procedures from IT Glue.

Prerequisites

  • You will need Administrator or Manager-level access to enable this integration, however a user with a Creator-level role or above in IT Glue and sufficient permissions in VSA can execute Agent Procedures after enablement. Refer to the “Understanding Permissions” section of this KB article for more details.
  • You must have an active integration setup with Kaseya VSA. For details, refer to our Integrating with Kaseya VSA KB article.
  • Note that Agent Procedures must first be defined in VSA before they will appear in the IT Glue Configuration show page after enabling the integration.

Instructions

Setting up the Agent Procedures integration

If you do not have the Kaseya VSA integration setup in IT Glue yet, please refer to our Integrating with Kaseya VSA KB article. Once you have successfully set up the integration, an Admin or Manager-level user will continue with the below steps:

  1. In IT Glue, navigate to Account > Integrations > Kaseya VSA. Click the Actions dropdown menu and select Sync Settings.
  2. In the Set up OAuth section, click the “Set up OAuth to run VSA agent procedures from IT Glue” checkbox.
    Screen_Shot_2021-06-16_at_12.10.48_PM.png
  3. Once you click the checkbox, three new fields will appear:
    1. Redirect URI - Click the Copy to Clipboard icon to copy the Redirect URI. You will require this URI in Step 5 below.
    2. VSA Client ID - Once you have successfully setup OAuth in Step 5 below, you will receive an email from VSA containing this information.
    3. VSA Client Secret - Once you have successfully setup OAuth in Step 5 below, you will receive an email from VSA containing this information.
      Screen_Shot_2021-06-16_at_12.01.19_PM.png
  4. Log into Kaseya VSA and navigate to the OAuth Clients page.
    VSA_Register_Client.png
  5. Click Register Client and create a new OAuth setup and name it something like “IT Glue Integration”. Copy and paste in the pre-populated Redirect URI as shown in Step 3 above.
    A pop up appears on screen once the client is created. This pop contains the secret key, but the key extends beyond the pop up window, and needs to be highlighted using the keyboard (SHIFT + Right Arrow), before pasting it into IT Glue.
    OAuth_Clients.png
    Once the OAuth is successfully created and saved, you will receive an email from VSA that contains the VSA Client ID and VSA Client Secret.

  6. NOTE  These are vital elements of the integration and specific to your IT Glue account; not your user account.

  7. Return to the IT Glue Sync Settings page and paste in the VSA Client ID and VSA Client Secret as shown in Step 3 above.
  8. Click Save. The Client ID and Client Secret fields will then be validated on the Edit Credentials page.

Providing VSA login credentials

  1. In IT Glue, navigate to the Configurations show page. You will see three new tabs named Overview, Agent Procedures, and Procedure Status.
  2. Click on the Agent Procedures tab.
    1. If you do not have an existing VSA session, you will be prompted to log into VSA and enter your credentials. Once you successfully authenticate, you will be redirected to IT Glue and be able to access the Agent Procedures tab.
      Sketch_Cloud_-_Page_5.png
    2. If you have not entered the VSA Client ID and VSA Client Secret by this point or they are incorrect, you will be prompted to perform the steps described in the previous section of this KB article called “Setting up the Agent Procedures integration”.
      Sketch_Cloud_-_Page_7.png

      NOTE  You can now login to LiveConnect automatically by clicking the Live Connect link on a configuration which is syncing with VSA. This is a deep link which allows users to seamlessly login through their OAuth session. The VSA OAuth login lasts one month after which users need to re-authenticate.

      NOTE   If a user has been disabled in VSA, that user can still login to Live Connect  from IT Glue for another 30 minutes from the time of being disabled.

Running the Agent Procedures

  1. After authenticating in the VSA, navigate to the Configuration show page.
  2. Click the Agent Procedures tab to view all currently available Agent Procedures from VSA. Procedures are sorted alphabetically.
    Executing_VSA_automation_in_IT_Glue_-_DRAFT_-_Google_Docs.png
  3. Next to the title of the Agent Procedure, click the Run procedure (play) icon.
  4. The icon will grey out for three minutes and then return to its original state. A green banner will appear at the top of the page confirming the action.
    Sketch_Cloud_-_Page_2-2.png

Agent procedures requiring procedure variables cannot be run from IT Glue. If you try to execute such a procedure in IT Glue, a red banner will appear stating: “This procedure requires admin input and cannot be run from IT Glue.”

Viewing the procedure status

In the Configuration show page, click on the Procedure Status tab to view your VSA procedure logs sorted chronologically. The table displays the name, last run date, status, and name of the user who last ran the procedure. Use the search bar at the top to filter for specific procedures.

Executing_VSA_automation_in_IT_Glue_-_DRAFT_-_Google_Docs-2.png

Understanding permissions

Both a Creator-level user role or above in IT Glue and sufficient permissions in VSA are needed to run Agent Procedures. IT Glue permissions always take precedence over VSA permissions. If the user has a Read-only role in IT Glue but has Admin status in VSA, they will only be able to view Agent Procedures in accordance with their Read-only role.

Other permission cases:

  • If the user has a Creator-level and above role in IT Glue but lacks sufficient permission to run a specific Agent Procedure in VSA, they can see the Procedures but not action them.
  • GlueConnect users can run Agent Procedures if they have both a Creator-level role or above in IT Glue and sufficient permissions in VSA.
  • If the user has a Lite and Read-only role in IT Glue, they can see the Procedures but not action them.
  • MyGlue users will not see the Agent Procedures tab.
  • Accounts without a VSA integration will not see the Agent Procedures tab.