Rubrik

Purpose

The Rubrik integration enables TrustCloud to securely connect with your Rubrik Security Cloud (RSC) environment for automated evidence collection, compliance monitoring, and security posture validation.
To establish this connection, TrustCloud requires limited API access through a dedicated Rubrik service account. This access is used exclusively to retrieve authorized metadata and compliance-related information from your RSC environment.

TrustCloud follows the principle of least privilege and recommends assigning only the minimum permissions required for the integration.

Instructions to Grant TrustCloud Limited Access to Rubrik

Step 1: Log in to Rubrik Security Cloud

1. Sign in to your Rubrik Security Cloud (RSC) account.
   
2. Navigate to Settings.

Step 2: Create a Dedicated Service Account

1. Go to Users and Access → Service Accounts.
   
2. Click Add Service Account.In the Service Account Details wizard:
   

   Field	Description
   Name	Enter a descriptive name for the TrustCloud integration
   Description (Optional)	Add integration-specific notes or usage details

3. Click Next.

Step 3: Assign Appropriate Roles

1. Select the roles required for TrustCloud to access the necessary Rubrik APIs.
2. Assign only the minimum permissions needed for compliance and evidence collection activities.
   
3. Click Add.

Recommendation: Use a dedicated service account with least-privilege access to improve security and auditability.

Step 4: Generate and Copy Credentials

1. After the service account is created, Rubrik generates the following credentials:
   1. Client ID
   2. Client Secret
   3. Access Token URI
   4. Copy and securely store these values.
      Important: The Client Secret is displayed only once and cannot be retrieved again after creation.
      Optional:
      Click Download as JSON to export the credentials in JSON format.
2. Click Done to complete the service account setup.

You can

Step 5: Provide Credentials to TrustCloud

Use the generated credentials to configure the Rubrik integration within TrustCloud.

Once configured, TrustCloud securely authenticates with Rubrik using OAuth 2.0 client credentials flow.