Learning Lab: MCP Workshop in Access Analyzer & Privilege Secure

brettbodenburg · June 5, 2025, 7:34pm

About the webinar

Netwrix is rolling out Model Context Protocol (MCP) support across our products, including Access Analyzer and Privilege Secure. In this Learning Lab, we’ll show you how to leverage AI to get the most out of your existing Netwrix products while unlocking exciting new possibilities.

The recording from this event can be found in Access Analyzer and Privilege Secure

During the session, you will learn how to:

Set up a Netwrix MCP server from GitHub
Connect AI tools to interact with your products conversationally using various MCP clients (Claude Desktop and a local LLM)
Create AI-powered use cases for Access Analyzer and Privilege Secure
Build AI workflows that span both products

Resources

system · July 16, 2025, 8:53pm

Originally sent in Learning Lab: MCP Workshop in Access Analyzer & Privilege Secure

Kalyan

Hello everyone!

5

SaraHallCSM

Hi! Super excited to learn today.

brettbodenburg

Hey everyone! Today's session will focus on Claude Desktop, but I'm interested in what AI tools/chat you use day-to-day. Give the one you use a like below!

Claude (Anthropic)

ChatGPT (OpenAI)

Gemini (Google)

Microsoft Copilot

Others I'm missing?

4

7

2

luke.hunter

Grok

I use Grok for personal use on my devices as it is more up-to-date than ChatGPT generally. But, it has had ahem problems recently!

2

1

dpiazza

@brettbodenburg Can users create any scheduled reports using the MCP server?

Thanks!

1

derek.putnam

If you have any questions, drop them in the chat!

dpiazza

This will save so much time trying to find correlations in all the session data

danybouchard

is it smart enough for something like who has the Active Directory users and computers console currently open

DevonAnderson

Any way to restrict access to MCP server? So essentially RBAC to ensure only the folks you want to be able to audit using the tool are the ones that can and others are prevented?

It is showing no releases for me on github.com/netwrix/mcp-server-naa-sql/releases.

danybouchard

in a NPS session

dpiazza

We do allow keystroke recording in Privilege Secure. Could that metadata help the MCP server locate who has opened certain programs but not closed them?

In reference to Dany's question

DevonAnderson

Is the release for the .dxt file download not open for everyone to see?

Does this grab just a sample from the database or scan everything to ensure we are properly calculating and reporting on the full scope?

sean.bergman

It's just relying on whatever is currently in the database. It's performing no new scans or assessments, but has access to the full scope of the currently collected data

frederick.frank

Can the results you receive back be downloaded into a csv?

DevonAnderson

Sorry but just want to make sure I fully understand this, so it sounds like the initial tools (like show me AD assessment) are showing full scope of currently collected data, but when you ask a follow-up question (like show me marketing users), is that where we perhaps only start grabbing samples from various tables to provide that extra context? Just want to make sure this wont start providing incomplete data at times or when to expect that exactly.

jhilsher

Can you ask it for remediation advice?

sean.bergman

as claude is thinking you can see the filters it is applying. In the case of "show me marketing users" it will filter groups to nt_account like '%marketing%'

DevonAnderson

Roger that. Thanks

So I saw ODBC driver was a requirement for this. Has there been any testing to ensure this doesn't cause issues with SQL communication with NAA and the SQL server? I've seen weird things when SQL server requires tls 1.2 and we have certain drivers installed on the NAA app server. Or would we just recommend customers install this on its own separate server from our other products to ensure there is no conflictions ever?

sean.bergman

This should not cause any issues with existing NAA communications

DevonAnderson

Awesome thanks.

jhilsher

Excellent!

DevonAnderson

I am curious to know if the .dxt files are available for download for NAA. I cannot see any releases

brettbodenburg

david.rose.2

Thanks for the great lab!

1

DevonAnderson

Amazing work y'all!

dpiazza

Awesome stuff, @brettbodenburg!

SaraHallCSM

thanks for this session!

allytween

thank you!

DevonAnderson

Thank you!

derek.putnam

Leave your feedback here!

allytween

are you creating .dxt files for the netwrix auditor mcp server?

brettbodenburg

Maybe! (hopefully in the future) :) Right now DXT only supports MCP servers written in Python, Node, or an EXE - which the Auditor MCP server is not written in. We do have an MSI installer available for that one though to help with easy install!

allytween

gotcha. thank you!

1