Kaseya VSA integration instructions

This article provides instructions on how to integrate Kaseya VSA to Lifecycle Manager.

Administrator user credentials for Kaseya VSA and Lifecycle Manager or member permissions of Manage Sync Settings selected are required to add an integration to Lifecycle Manager.

Additional Prerequisites

All communications must run over HTTPS / port 443
A valid hostname and certificate is needed on the server

Software version reporting

Note that when using Kaseya VSA with SAM enabled, Kaseya VSA doesn't report on all software build versions. It only reports software versions for Operating Systems and Security products.

We're looking at enhancing our integration to be able to remove this limitation.

Integration steps in Kaseya VSA

Sign in to Kaseya VSA
Create a new Kaseya VSA user, preferably named lifecyclemanager.
Create a new custom Kaseya role and apply it to the newly-created integrator user
We recommend using the System/ Master scope, along with the minimum role permissions to ensure all your organization's sync to Lifecycle Manager.

Kaseya VSA Master vs System role/scope
The varieties of Kaseya VSA have different fixed role/scope names:

Hosted VSA - The all-access role/scope that we recommend for our Kaseya integration is called System.
On-Prem VSA - The all-access role/scope that we recommend for our Kaseya integration is called Master.

Minimum permissions to custom Kaseya role

The minimum permissions you can apply to the custom Kaseya role is as follows:

Audit
- Asset
  - View Assets
    - View
- Collect Data
  - Run Audit
    - Machine status
- View Individual data
  - Machine summary
    - Software
      - System Information
      - Software Licences
      - Installed Applications
      - Add/Remove
      - Startup Apps
      - Security Products
    - Hardware
      - Disk Volumes
  - System Information
    - Machine Status
System
- User Settings
  - Preferences
- Orgs/Groups/Depts/Staff
  - Manage
    - Machine Groups

Integration steps in Lifecycle Manager

Enter your credentials on the add integration page
Enter your Kaseya Server Hostname
Select your Company Name Mapping option from the drop-down menu
Click Save Kaseya VSA Setup.

IP whitelisting in AuthAnvil settings
When Kaseya's native 2FA feature is used, it is supported for API integrations by default. However, if you are using AuthAnvil for your Kaseya VSA 2FA, you may receive an error message indicating "Kaseya is asking for a 2FA code which we cannot support for API calls. Please disable 2FA for this user."

To solve this issue, you can configure the IP whitelisting for Lifecycle Manager sync servers in your AuthAnvil settings within the VSA admin panel: AuthAnvil > Two Factor Auth > Configure Kaseya Logon. You can request Lifecycle Manager's IP Whitelist by email: success@scalepad.com.

As soon as you have whitelisted Lifecycle Manager's sync servers, you will be all set up for a successful Kaseya VSA integration. Additional information on Requesting Lifecycle Manager's IP Whitelist can be found here.

When you click Save Kaseya VSA Setup, Lifecycle Manager performs a full sync. When finished, you should be able to view your hardware assets in your account.

What's next

How to adjust your Kaseya VSA sync settings