CyberArk
Manage users, groups, and access controls in CyberArk Privileged Access Management
Connect it
In Keystile Automations → Connections → New connection, choose CyberArk and sign in. Your AI tools and workflows then use it through Keystile; they never see the password or key.How connecting works.
Try it from your AI tool
Using Keystile, in CyberArk: delete user (Deletes a specific user in the Vault (requires Add/Update Users authorization)).What it can do (17 actions)
| Action | What it does | Changes data |
|---|---|---|
| Activate User | Activates an existing user who was suspended after entering incorrect credentials multiple times | Yes |
| Add Member to Group | Adds a user as a member to an existing Vault group (requires Add/Update users permissions) | Yes |
| Change Credentials Immediately in Bulk | Marks multiple accounts for an immediate credentials change by the CPM to a new random value | Yes |
| Change Credentials in the Vault | Sets account credentials and changes them in the Vault. This will not affect credentials on the target device. | Yes |
| Change Credentials in the Vault in Bulk | Sets credentials for multiple accounts and changes them in the Vault. This does not affect credentials on the target device. | Yes |
| Create User | Creates a new user in the CyberArk Vault | Yes |
| Delete User | Deletes a specific user in the Vault (requires Add/Update Users authorization) | |
| Disable User | Disables a specific user in the Vault | |
| Enable User | Enables a specific user in the Vault | Yes |
| Find User | Returns a list of existing users in the Vault based on filter criteria (requires Audit users permissions) | |
| Get Password Value | Retrieves the password or SSH key of an existing account identified by its Account ID | |
| Reconcile Credentials in Bulk | Marks multiple accounts for automatic reconciliation by the CPM | Yes |
| Remove Member from Group | Removes a specific user from a user group in the Vault | |
| Retrieve Private SSH Key | Retrieves a private SSH key file from an existing account identified by its Account ID | |
| Set Next Password in Bulk | Sets multiple accounts' credentials to use for the next CPM change | Yes |
| Update User | Updates an existing Vault user (except Master and Batch built-in users) | Yes |
| Verify Credentials in Bulk | Marks multiple accounts for verification by the CPM | Yes |
How Keystile protects it
Every CyberArk action is checked before it runs, whether it comes from an AI tool or a workflow. 11 of its actions change data; your rules, limits and budgets decide whether each is allowed, held for a person or stopped, and it all goes into the signed record.
Use CyberArk with your AI assistant — safelyClaude, Cursor or ChatGPT do the work; Keystile checks every action first.
Get early access