Setup in ConnectWise Automate

Bypass Default MFA for Integrator Users

For integrations that make API calls to function properly with Automate, we recommend bypassing default MFA for the user account because the integration cannot receive and respond with an authentication token. Bypassing the default MFA does not affect integrations such as DUO or Google Authenticator. An audit action and entry in the User Settings table is recorded. At this time there is no global setting to bypass MFA. 

To bypass default MFA for an integrator user:

1. In the Control Center, navigate to System > Users and Contacts > Users and double-click on an integrator user
2. Select the Integrator checkbox
3. Click Save.
4. We recommend clicking on the Permissions tab to verify that the integrator user account is assigned limited permissions. 
5. Save any changes. 

Create a dedicated Automate user account with the following settings:

Create a new user: "MSPbots"

Create a new user class: "MSPbots"

Make sure the user class has all the read-only permission.
Image Added

General tab

Select the Integrator checkbox in the bottom-left corner of the window. This will bypass Multi-Factor Authentication (MFA) for accounts used for integrations. 
Image Added

Permissions tab

Allow read-only permissions to clients and select the Allow HTTP Tunnel checkbox. If you haven't modified the user class default settings, you can select Help Desk Users.

Our suggestion is to give READ-ONLY to all assets that you can select since we are developing more widgets and dashboards every week. This will save you the trouble of adding more permissions. However, if there is any data that you are not comfortable sharing, you can leave them unchecked for now.

Groups and Clients tab

Add All Agents and All Clients to Group Membership.Image Removed

Setup in MSPbots

1. Go to https://app.mspbots.ai/Integrations
2. Find ConnectWise Automate.
3. Input your Automate URL, Username, Password , and Password. 
4. Click Save and Sync.

Troubleshooting

1. Error message: 403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.
   1. Please check your firewall to see if the MSPbots server is allowed, What MSPbots server IP addresses can I allow through the firewall?