Skip to main content

NinjaOne

Visualize NinjaOne Users, Devices, Policies, Alerts, and monitor changes through queries and alerts.

Installation​

Requirements​

  • A NinjaOne Client ID and Client Secret generated from a client application in your NinjaOne account. Only a NinjaOne system administrator can configure OAuth tokens and create the client application.
  • The client application needs the Monitoring scope. This integration is read-only, and Monitoring grants read-only access to monitoring data and organization structure, which is sufficient for every endpoint it calls.
  • You must have permission in JupiterOne to install new integrations.

Configuration in NinjaOne​

Create a client application and generate a Client ID and Client Secret​

  1. In the NinjaOne portal, go to Administration > Apps > API.
  2. Select the Client app IDs tab.
  3. Click Add client app.
  4. Choose an Application Platform that offers the Client credentials grant type, such as API Services (machine-to-machine) or Web (PHP, Java, .NET Core, etc.).
  5. Provide a Name for the client application.
  6. Under Scopes, select Monitoring.
  7. Under Allowed Grant Types, select Client credentials and Refresh token. The integration's token request includes the offline_access scope along with monitoring.
  8. Click Save.
  9. Copy the Client Secret. It is shown only once and disappears when you close the window.
  10. Copy the Client ID. You will need both values when you configure the integration in JupiterOne.
note

Only system administrators may configure OAuth tokens for the NinjaOne Public API. See NinjaOne's OAuth token configuration guide for details.

Configuration in JupiterOne​

  1. From the top navigation of the J1 Search homepage, select Integrations.
  2. Search for NinjaOne and select it.
  3. Click Add Instance and configure the following settings:
  • Enter the Account Name by which you'd like to identify this NinjaOne instance in JupiterOne. Ingested entities will have this value stored in tag.AccountName when Tag with Account Name is checked.
  • Enter a Description that will further assist your team when identifying the integration instance.
  • Select a Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.
  • Select the NinjaOne Server URL for your region. This defaults to the US region (https://app.ninjarmm.com). The available regions are US, US2, EU, Oceania, and Canada.
  • Enter the NinjaOne Client ID generated in your NinjaOne client application.
  • Enter the NinjaOne Client Secret generated in your NinjaOne client application.
  • (Optional) Enter a Custom Fields Allow List: a comma-separated list of NinjaOne custom field names to ingest onto ninjaone_device entities as customField.<name> properties (for example, Browser Extensions,Asset Tag). Use each field's name as configured in NinjaOne. Leave this empty to skip custom field ingestion. Each field you list must have its API permission set to at least Read Only in its NinjaOne custom field permission settings, otherwise NinjaOne does not return its value over the API.
  1. Click Create Configuration once all values are provided.

Next steps​

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.