> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leen.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Wiz CSPM Instructions

> Instructions on how to generate credentials for Wiz CSPM and the required permissions.

For Leen to authenticate with Wiz CSPM, we require the following:

1. **Base URL**: API endpoint URL of the format `https://api.<TENANT_DATA_CENTER>.<ENVIRONMENT>`. For example, `https://api.us44.app.wiz.io/graphql`.
   * You can find this in your Wiz dashboard. At the top right of your Wiz portal, click the user icon > Tenant Info [(direct link)](https://app.wiz.io/tenant-info/general).
   * Copy your API Endpoint URL.
2. **Client ID**: OAuth2 based Client ID.
3. **Client Secret**: OAuth2 based Client Secret.

### Steps to obtain Wiz Base URL

1. Navigate to your user profile and copy the API Endpoint URL.

### Steps to obtain Client ID and Client Secret:

1. In the Wiz dashboard Navigate to Settings > Service Accounts.

2. Click Add Service Account.

3. Name the new service account, for example: Leen CSPM Integration.

4. If you desire, narrow the scope of this service account to specific projects.

5. Select the below permissions and click Add Service Account.
   * `read:issues`
   * `read:controls`
   * `read:security_frameworks`

6. Copy the Client ID and Client Secret.
   <Warning>Record your client secret somewhere safe. After the credential window is closed, the secret is no longer visible.</Warning>
   <img src="https://mintcdn.com/leen/v5iddL0dhlngJwjt/images/wiz/wiz-service-account.png?fit=max&auto=format&n=v5iddL0dhlngJwjt&q=85&s=b648593ea57a612697c58eb19d8a4507" alt="" width="2764" height="798" data-path="images/wiz/wiz-service-account.png" />