SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Accounts → Get One Account

AI-generated

Overview

This node interacts with the SentinelOne API to retrieve detailed information about a specific account using its Account ID. It is useful for scenarios where you need to fetch the name, state (active or expired), and counts of endpoints and child nodes (such as Sites and Groups) associated with a particular account. For example, it can be used in security management workflows to monitor account status and asset distribution.

Use Case Examples

  1. Retrieve detailed information about an account by providing its Account ID to monitor its status and associated endpoints.
  2. Use in a workflow to fetch account details before performing further actions like policy updates or threat analysis.

Properties

Name Meaning
Scope Id The unique identifier of the account to retrieve information for. This is a required input.
Options Additional optional settings such as custom request body, headers, query filters, batching, debug mode, pagination, and timeout settings to customize the API request.

Output

JSON

  • name - Name of the account.
  • state - State of the account (e.g., active, expired).
  • endpointsCount - Count of endpoints associated with the account.
  • childNodesCount - Count of child nodes such as Sites and Groups under the account.

Dependencies

  • An API key credential for SentinelOne API authentication.

Troubleshooting

  • Ensure the provided Scope Id (Account ID) is valid and exists in the SentinelOne system.
  • Check API credentials and permissions to access account information.
  • Enable debug mode to see detailed request and response data for troubleshooting.
  • Handle API rate limits by configuring batching options if necessary.

Links

Discussion