Skip to content

Decommission S1 Agent

Go to Automation

View in GitLab

Description

This Ansible playbook automates the decommissioning of SentinelOne agents. It retrieves the agent ID for the target host by querying the SentinelOne API using the computer name. If the agent ID is found, the playbook sends a decommission request to the SentinelOne API to remove the agent.

Credentials

  • SentinelOne API Token (s1_api)

Input

Variable Description
s1_api SentinelOne API token for requests.
baseurl Base URL of the SentinelOne API.

Output

None

Dependencies