-
New Functions
Get-PASGroup
- Enables querying of Vault Groups
Remove-PASGroupMember
- Enables removal of vault group members
Set-PASOnboardingRule
- Enables updates to existing Onboarding Rules
Add-PASDiscoveredAccount
- Enables addition of discovered accounts or SSH keys as a pending account in the accounts feed
Connect-PASPSMSession
- Retrieves parameters needed to monitor an in-progress PSM session
-
Updated Functions
Get-PASDirectory
- Now possible to query LDAP Directory by name
Get-PASAccountGroup
- Updated to use API endpoint in 10.5
Get-PASPSMConnectionParameter
- Updated to cater for Ad-Hoc Connections with unmanaged accounts
-
Bug Fixes
- Use of TLS 1.2 Protocol enforced when using PSCore
- Update
New-PASSession
- Option added to use Windows integrated authentication with default credentials
- Thanks steveredden!
- Option added to use Windows integrated authentication with default credentials
- Bug Fix
Get-PASAccountPassword
- Fix applied to allow accountID from version 10 to be accepted from pipeline object.
Get-PASAccount
- Validation added to
limit
parameter.
- Validation added to
- Bug Fix
Get-PASAccountPassword
- Backward compatibility for retrieving password values from CyberArk version 9 restored.
- Bug Fix
Export-PASPlatform
- Exported files were invalid, now fixed.
- Thanks jmk-foofus!
- New Functions
Get-PASPTAEvent
- function added, returns security events from PTA.Get-PASPTARule
- function added, returns rules from PTA.Get-PASPTARemediation
- function added, returns automatic remediation settings frm PTA.Add-PASPTARule
- function added, adds a new rule to PTA.Set-PASPTARule
- function added, updates a rule in PTA.Set-PASPTARemediation
- function added, updates automatic remediation.settings in PTA.
- Updated Function
Set-PASAccount
, updated to support new 10.4 API features.- Thanks Assaf!
The 1 year since first commit anniversary edition
-
Breaking Changes
New-PASSession
- Function now defaults to the v10 API Endpoints
- Users on CyberArk Version 9 need to specify the
-UseV9API
switch parameter
New-PASOnboardingRule
- Function now defaults to the ParameterSet relating to version 10.2 onwards
Add-PASPendingAccount
- Parameter
AccountDiscoveryDate
changed to type[datetime]
- Parameter
Add-PASApplication
- Parameter
ExpirationDate
changed to type[datetime]
- Parameter
Add-PASSafeMember
- Parameter
MembershipExpirationDate
changed to type[datetime]
- Parameter
Set-PASSafeMember
- Parameter
MembershipExpirationDate
changed to type[datetime]
- Parameter
New-PASUser
- Parameter
ExpiryDate
changed to type[datetime]
- Parameter
Set-PASUser
- Parameter
ExpiryDate
changed to type[datetime]
- Parameter
-
New Functions
Export-PASPlatform
function added, allows export of platform to a zip file.Get-PASUserLoginInfo
function added, retrieves logon information for the authenticated user.Add-PASDirectory
function added, adds a new LDAP directory for authentication.Get-PASDirectory
function added, lists LDAP directories.New-PASDirectoryMapping
function added, creates new LDAP Directory mappings.
-
Bug Fixes
New-PASSession
- Fixed issue where module was not returning authentication token when using LDAP credentials in version 10.3.
- To use LDAP authentication the
-type LDAP
must be specified as a parameter.
- To use LDAP authentication the
- Fixed issue where module was not returning authentication token when using LDAP credentials in version 10.3.
-
Other Updates
Remove-PASAccount
, updated to support new 10.4 API features.Get-PASAccount
, updated to support new 10.4 API features.- Version Check:
- All logon functions now attempt to query the version of CyberArk in use, and return the External Version number as an additional output property.
- The version check after logon can be skipped by specifying the
-SkipVersionCheck
parameter.
- The version check after logon can be skipped by specifying the
- Functions, or, functions with specific parameters, that have minimum version requirements will assert that the version being used can support the action being requested.
- If a minimum version requirement is not met, a descriptive error will be thrown.
- If the version of CyberArk is unknown, or the version check has been skipped, version assertion will not occur.
- All logon functions now attempt to query the version of CyberArk in use, and return the External Version number as an additional output property.
- Output:
- Any function that does return output, now includes the CyberArk ExternalVersion as a standard property.
- This enables functions along the pipeline to receive the information and assert and minimum version requirements.
- Any function that does return output, now includes the CyberArk ExternalVersion as a standard property.
- PSCore:
- All testing via Appveyor has now been transitioned to, and is performed in, PSCore.
-
New Function
Import-PASConnectionComponent
function added, allows import of connection component from zip file.
-
Bug Fixes
- Updates to some functions and test scripts to fix Pester & PSScriptAnalyzer failures/violations/errors
- Updates to some pester tests to allow them to run & pass in PowerShell Core
-
Other Updates
- Build, Test, Deploy process updated to run in PowerShell Core instead of Windows PowerShell 5
- Removed about_psPAS_Versions.help.txt - an unhelpful help file.
- Bug Fix:
- Fix added to specify
-SkipHeaderValidation
onInvoke-WebRequest
if using PowerShell Core.- Thanks Serge!
- Fix added to specify
- Bug Fixes:
New-PASSession
,New-PASSAMLSession
&New-PASSharedSession
prevented from providing output (except error message) in the event of a failure
-
New Functions
New-PASOnboardingRule
has added parameters available from 10.2 onwards. The 9.8 & 10.2 parameters are configured as separate parametersets.Get-PASOnboardingRule
has a new parameter added, allowing search of Onboarding rules by name in version 10.2Import-PASPlatform
function added, allowing import of CPM PlatformsGet-PASPSMConnectionParameters
updated to facilitate return of HTML5 connection data when PSMGW is configured.Suspend-PASPSMSession
&Resume-PASPSMSession
functions added, expanding on the automatic mitigation capability for PSM Sessions.
-
Attained 100% Code Coverage in the Tests for the module.
- Bug Fixes:
Add-PASAccountGroupMember
now sends AccountID with request.New-PASAccountGroup
fixed an incorrect parameter name (GroupPlatformID).New-PASSAMLSession
- basic authentication token now sent in request header.Get-PASOnboardingRule
,New-PASOnboardingRule
&Remove-PASOnboardingRule
, parameters updated to allow specification of alternate PVWA application name (in-line with the rest of the module's functions).
Published to PowerShell Gallery