All templates

Automated Delinea Session Reconciliation

Every Monday, WebRun opens Delinea, reconciles the past week's privileged sessions against your expected list of admins, schedules the next reconciliation review on Google Calendar, and messages your security lead on WhatsApp with anything that doesn't match.

Runs on WebRun · Strict Lockdown policy
Every Monday at 8:00 AM WebRunorchestrates each step
1 Delinea check privileged sessions
2 Google Calendar schedule the next review
3 WhatsApp message your security lead
In short

How do I reconcile Delinea privileged sessions against my expected admins every week?

WebRun reconciles your Delinea privileged sessions every Monday against your expected list of admins, schedules next week's review on Google Calendar, and messages your security lead with anything that doesn't match. It never revokes access or touches a vaulted secret itself, so every privileged access decision still goes through your team.

  • Privileged sessions get reconciled weekly instead of reviewed only during an audit
  • Unexpected sessions are named directly instead of buried in a log
  • The next review is always already on the calendar

Built for security teams · IT admins · compliance officers · enterprise IT

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens www.delinea.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    Delinea - check privileged sessions
    delinea.com
    WebRun in Delinea: check privileged sessions
    WebRun opens Delinea to check privileged sessions.
    • Open Delinea and list privileged sessions from the past week
    • Note the account used, the target system, and the session length
    • Compare each session against your expected list of admins

    Done when Every privileged session from the past week has been checked.

  3. 2
    Google Calendar - schedule the next review
    calendar.google.com
    WebRun in Google Calendar: schedule the next review
    WebRun opens Google Calendar to schedule the next review.
    • Open the security lead's Google Calendar
    • Schedule next Monday's reconciliation review
    • Attach a note of this week's session count for context

    Done when Next week's reconciliation review is on the calendar.

  4. 3
    WhatsApp - message your security lead
    whatsapp.com
    WebRun in WhatsApp: message your security lead
    WebRun opens WhatsApp to message your security lead.
    • Message your security lead this week's reconciliation result
    • Name any session that didn't match an expected admin
    • Stay brief when every session matches

    Done when Your security lead has been messaged this week's reconciliation summary.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
www.delinea.com
ScheduleRuns automatically on this cadence
Every Monday at 8:00 AM
DeliveryHow each run's result reaches you
Session reconciliation · WhatsApp
OutputWhat each run produces - A weekly reconciliation of Delinea privileged sessions against your expected admin list, with the next review scheduled.
Reconciliation
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Does WebRun revoke privileged access or change a vault entry?

No. WebRun only reports what it finds. Revoking access, rotating a secret, or changing a vault entry is left for your security lead to decide and do.

Does WebRun see the actual privileged credentials?

No. It reads only session metadata Delinea already logs, such as account, target, and duration. It never sees, types, or stores the secret itself.

What happens when a session doesn't match an expected admin?

It is named directly in the WhatsApp message so your security lead can look into it right away, rather than being buried in a report.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.