psPAS 7.0 (#588)

* UPDATE Set-PASSafe.md

Corrects example

* UPDATE New-PASAccountPassword

Adds try catch logic

* Update psPAS.CyberArk.Vault.Credential.Type.ps1xml

Adds `ToCredential()` method for consistency with rest of module

* updated the result variable to properly parse json output

* Fixed URL issue for Public SSH keys

URL for Public Keys ended with "/". This is not the correct URL

* Updated test URL

* Added Customization APIs

Adds Activate and Delete theme functions

* Added theme documentation

Adds psPAS documentation for new functions related to the theme APIs

* Adds Self-Hosted check for Theme API

Adds the version req that cloud is not supported

* Updated Theme documentation

Ran platyPS with Powershell 5 and corrected the file name for Remove-PASTheme

* Added Pester tests for new functions releated to Themes

* Added support for new paramter releated to Directory Mappings released with 14.4

* Add support for platform update and side-by-side import

Enhanced Import-PASPlatform to support new parameter sets for updating existing platforms and side-by-side imports. Added parameter validation, version checks, and dynamic request construction to handle different import scenarios supported by version 14.2 & 14.6.

* Add TLS 1.2 support to SAML response retrieval

Ensures TLS 1.2 is used when available for Invoke-WebRequest calls in Get-PASSAMLResponse.ps1. This improves security and compatibility, especially on systems where older protocols are disabled. Also refactors web request parameter handling for better clarity and CoreCLR compatibility.

* Add Get-PASStoredPlatform function

Introduced the Get-PASStoredPlatform cmdlet to retrieve stored platform information via the CyberArk REST API. Updated the module manifest to export the new function and extended the copyright year.

* Add Remove-PASStoredPlatform function

Introduced the Remove-PASStoredPlatform cmdlet to allow deletion of stored platforms via the API. Updated the module manifest to export the new function.

* Add Get-PASUserLicenseReport function

Introduced the Get-PASUserLicenseReport cmdlet to retrieve user license information from Privilege Cloud. Updated the module manifest to export the new function.

* Add Get-PASAccountSearchProperties function

Introduced the Get-PASAccountSearchProperties cmdlet to retrieve advanced account search properties via the API. Updated the module manifest to export the new function.

* Rename Get-PASAccountSearchProperties to Get-PASAccountSearchProperty

Renamed the function and its file from Get-PASAccountSearchProperties to Get-PASAccountSearchProperty for consistency. Updated the module manifest to reflect the new function name.

* Add Get-PASReport function to retrieve reports

Introduced the Get-PASReport cmdlet to fetch reports via the API. Updated the module manifest to export the new function.

* Add Get-PASReportSchedule function

Introduced the Get-PASReportSchedule function to retrieve report schedules via the API. Updated the module manifest to export the new function.

* Add report schedule creation and subscriber classes

Introduces New-PASReportSchedule function to create report schedules, including support for scheduling parameters and report subscribers. Adds subscriberClasses.ps1 with LdapInfo and Subscriber class definitions, and updates psPAS.psd1 to load these classes and export the new cmdlet.

* Add Export-PASReport function for report export

Introduced the Export-PASReport function to enable exporting reports in XLSX, XLS, or CSV formats. Updated the module manifest to include the new function in the exported commands.

* Add cmdlets to manage user authentication methods

Introduced Add-PASUserAllowedAuthenticationMethod and Remove-PASUserAllowedAuthenticationMethod functions to allow bulk addition and removal of allowed authentication methods for users. Updated the module manifest to export these new cmdlets.

* Fix parameter and bulk item handling in user auth methods

Corrects parameter list syntax by replacing a period with a comma in both Add-PASUserAllowedAuthenticationMethod and Remove-PASUserAllowedAuthenticationMethod. Also updates the way bulk items are added to use '+=' instead of '.Add', ensuring proper array handling.

* Fix syntax for ValidateSet attribute in Export-PASReport

Corrected the syntax for the ValidateSet attribute in the Export-PASReport function to ensure proper parameter validation.

* Add Get-PASMasterPolicy function

Introduces the Get-PASMasterPolicy cmdlet to retrieve the master policy via the API. Updates the module manifest to export the new function.

* Add allowedAuthenticationMethods parameter to New-PASUser and Set-PASUser functions; enhance Get-PASComponentSummary output for vaults to include new replication data

* Add new cmdlets for managing dependent accounts and FIDO2 devices;

* Add Set-PASMasterPolicy function

Introduced the Set-PASMasterPolicy function to allow updating master policy settings via the API. Updated the module manifest to export the new function.

* Consolidate Remove-PASFIDO2Device and Remove-PASFIDO2OwnDevice into a single cmdlet and updated documentation and tests

* Add Sync-PASDependentAccount function and corresponding tests and documentation

* Add Get-PASDependentAccount function

Introduced the Get-PASDependentAccount cmdlet to retrieve dependent account information via the API. Updated the module manifest to export the new function.

* Add parameter sets to Get-PASDependentAccount

Refactored Get-PASDependentAccount to support multiple parameter sets for retrieving all dependent accounts, specific accounts, and specific dependent accounts. Updated parameter definitions and logic to construct appropriate API URLs and handle results based on the selected parameter set.

* Fix indentation in Get-PASDependentAccount function

Corrected indentation and block structure in Get-PASDependentAccount.ps1 to improve code readability and maintainability. No functional changes were made.

* Add new functions for managing PTA security configuration properties and categories

* Add new cmdlets for managing PTA security configuration categories and properties. Resolved some typos and added documentation

* Return only advancedSearchProperties in account search

Updated Get-PASAccountSearchProperty to return only the advancedSearchProperties property from the result, instead of the entire result object.

* Update help docs for updated functions

Updated documentation for several commands to clarify parameter positions and requirements, especially for Remove-PASFIDO2Device, Remove-PASPTASecurityConfigurationProperty, Reset-PASPTASecurityConfigurationCategory, and Reset-PASPTASecurityConfigurationProperty. Expanded Import-PASPlatform documentation to include new parameter sets (SideBySide, Update), additional parameters, and usage examples. Minor formatting and link additions for clarity and consistency.

* Add documentation for new psPAS commands

Added markdown documentation files for several new psPAS PowerShell commands, including Add/Remove-PASUserAllowedAuthenticationMethod, Export/Get-PASReport, Get-PASAccountSearchProperty, Get-PASDependentAccount, Get/Set-PASMasterPolicy, Get-PASReportSchedule, Get-PASStoredPlatform, Get-PASUserLicenseReport, New-PASReportSchedule, and Remove-PASStoredPlatform. These docs provide usage details, parameters, examples, and related links for each command.

* Add help for new PAS cmdlets

Added documentation for the following new cmdlets: Add-PASUserAllowedAuthenticationMethod, Export-PASReport, Get-PASAccountSearchProperty, Get-PASDependentAccount, Get-PASMasterPolicy, Get-PASPTASecurityConfigurationCategories, Get-PASReport, Get-PASReportSchedule, and Get-PASStoredPlatform. These additions provide usage details, parameters, examples, and related links for each new cmdlet.

* Fix typos in parameter and comment text

Corrected several spelling errors in comments and parameter descriptions across multiple scripts, improving code readability and documentation accuracy.

* Update README introduction for clarity

Simplified the introductory text in the README to make it more concise and engaging.

* Rename Get-PASPTASecurityConfigurationCategories to singular

Renamed the function, documentation, and related references from Get-PASPTASecurityConfigurationCategories to Get-PASPTASecurityConfigurationCategory for consistency with naming conventions. Updated help files, module manifest, and added a placeholder test file for the renamed function.

Co-Authored-By: JP-Consulting <[email protected]>

* Add additional CyberArk documentation links

Appended two new relevant CyberArk documentation URLs to the Import-PASPlatform command reference for improved resource coverage.

* Make 'id' parameter mandatory in Remove-PASFIDO2Device

Updated Remove-PASFIDO2Device to explicitly require the 'id' parameter as mandatory in both parameter sets. Adjusted tests to verify 'id' is mandatory, improving parameter validation and test coverage.

* Fix whitespace in Remove-PASPTASecurityConfigurationProperty

Removed trailing whitespace in the parameter list of Remove-PASPTASecurityConfigurationProperty.ps1. Added a placeholder test file for future test definitions.

* Add test placeholder and minor formatting fix

Added a placeholder test file for Reset-PASPTASecurityConfigurationProperty with a TODO comment. Also fixed a minor whitespace issue in the function implementation.

* Add SupportsShouldProcess to Set-PASMasterPolicy

Updated the Set-PASMasterPolicy function to include SupportsShouldProcess in the CmdletBinding attribute, enabling WhatIf and Confirm support. Also added a placeholder test file for future test definitions.

* Add SupportsShouldProcess to New-PASReportSchedule

Enabled SupportsShouldProcess in the New-PASReportSchedule function to support -WhatIf and -Confirm parameters. Also added a placeholder test file for future test definitions.

* Suppress false positive PSReviewUnusedParameter warnings

Added SuppressMessage attributes to ignore false positive PSReviewUnusedParameter warnings for PlatformName, Description, and Force parameters in Import-PASPlatform function.

* Add placeholder test files for PAS cmdlets

Added initial test files with TODO comments for various PAS-related cmdlets. These files serve as placeholders for future test implementations.

* Filter imported module by name in tests

Updated the Import-Module command in the test script to filter the imported module by name using Where-Object. This ensures that only the intended module is selected for further testing.

* Enhance Get-PASAccount and ConvertTo-FilterString to support API versioning for filter operators

* Add type definition for Safe Member Gen2

Introduces the psPAS.CyberArk.Vault.Safe.Member.Gen2 type with several script methods for user and permission management, including methods to get permissions which outputs a hashtable which can be splatted against Add-PASSafeMember.

* Document -WhatIf and -Confirm for several cmdlets

Updated documentation for New-PASReportSchedule, Remove-PASFIDO2Device, and Set-PASMasterPolicy to include details for the -WhatIf and -Confirm parameters. Also clarified parameter sets and added minor formatting improvements.

* Add Set-PASDependentAccount cmdlet and dependent account support

Introduced the Set-PASDependentAccount function to update dependent accounts, including documentation and help updates. Extended New-PASAccountObject to support a DependentAccountObject parameter set. Updated module manifest and documentation to reflect the new functionality.

* Make optional parameters non-mandatory in Set-PASDependentAccount

Updated the Set-PASDependentAccount function and its documentation to make the parameters 'name', 'platformAccountProperties', 'automaticManagementEnabled', and 'manualManagementReason' optional instead of mandatory. This change improves flexibility when updating dependent accounts by allowing these fields to be omitted.

* Add Add-PASDependentAccount cmdlet and documentation

Introduced the Add-PASDependentAccount function to add dependent accounts to existing accounts, including implementation, help documentation, and module manifest update. Updated New-PASAccountObject to support dependent account creation and improved related documentation and help files.

* Add bulk confirmation support to Approve-PASRequest

Approve-PASRequest now supports confirming multiple requests in a single call (bulk confirmation) for CyberArk version 14.6 and above. The RequestId parameter is now an array, and documentation, help, and tests have been updated to reflect this new functionality. Added Test-IsMultiValue helper function to detect multi-value input.

* Refactor Approve-PASRequest for bulk confirmation support

Refactored Approve-PASRequest to improve handling of bulk confirmations, including version checks and endpoint selection. Updated Test-IsMultiValue to simplify multi-value detection and adjusted tests to cover new logic for both single and bulk request confirmations.

* Disable pipeline input for Approve-PASRequest parameters

Set ValueFromPipelineByPropertyName to false for RequestId and Reason parameters in Approve-PASRequest.ps1. Updated documentation to reflect this change, ensuring parameters are not accepted from pipeline input.

* Add bulk sync support to Sync-PASDependentAccount

Sync-PASDependentAccount now supports synchronizing multiple dependent accounts in a single request (bulk sync) for PAS version 14.6 and above. The parameter 'dependentAccountId' is now an array, and pipeline input is disabled. Documentation, help, and tests have been updated to reflect the new functionality and usage.

* Add Add-PASThemeImage function and documentation

Introduced the Add-PASThemeImage function to allow adding images for themes, including parameter validation and REST API integration. Added corresponding documentation, help content, and updated the module manifest to export the new cmdlet. A placeholder test file for Add-PASThemeImage was also created.

* Rename Add-PASThemeImage to Import-PASThemeImage

Renamed the Add-PASThemeImage function, tests, documentation, and help content to Import-PASThemeImage for consistency with PowerShell naming conventions. Updated all references and module manifest accordingly.

* Fix and enable output tests for Approve-PASRequest

Corrected a test to directly call Approve-PASRequest instead of using an undefined variable. Enabled and updated the 'Output' context to properly test that the function provides no output, including necessary mocks and setup.

* Fix URI assignment in Import-PASThemeImage

Assigns the constructed URI directly to the request hashtable instead of a separate variable, ensuring the request object contains the correct endpoint for image import.

* Add Export-PASThemeImage function and documentation

Introduced the Export-PASThemeImage function to retrieve and export a specific theme image from the CyberArk Vault. Added corresponding documentation, help XML, and updated the module manifest to include the new cmdlet. A placeholder test file was also created.

* Add Reset-PASThemeImage function and documentation

Introduced the Reset-PASThemeImage function to revert the UI to the default theme. Added corresponding help documentation, updated the module manifest to export the new cmdlet, and included a placeholder for related Pester tests.

* Rename Reset-PASThemeImage to Reset-PASTheme

Renamed the Reset-PASThemeImage function, tests, documentation, and references to Reset-PASTheme for consistency and clarity. Updated help files and module manifest to reflect the new name.

* Remove unused variable in Reset-PASThemeImage

Eliminated the assignment of the result from Invoke-PASRestMethod to an unused variable in the Reset-PASThemeImage function for cleaner code.

* Add Set-PASThemeStatus cmdlet for theme draft state

Introduced the Set-PASThemeStatus function to update the draft state of a custom theme. Added corresponding documentation, help content, tests, and updated the module manifest to export the new cmdlet.

* Update URI in theme status test mock assertion

Changed the expected URI in the Assert-MockCalled parameter filter to match the new endpoint '/API/Themes/SomeTheme/draft/' instead of '/API/ActiveThemes/'. This aligns the test with recent API changes.

* Add Get-PASTheme function and documentation

Introduced the Get-PASTheme function to retrieve custom theme details, including all themes, a specific theme by name, or the active theme. Added corresponding documentation, help content, and updated the module manifest to export the new cmdlet. A placeholder test file for Get-PASTheme was also created.

* Suppress false positive for unused parameter warning

Added SuppressMessageAttribute to Get-PASTheme to suppress a false positive PSReviewUnusedParameter warning for the 'FindAll' parameter.

* Suppress PSReviewUnusedParameter warning for 'Active'

Added a SuppressMessageAttribute for the 'Active' parameter to address a false positive from PSReviewUnusedParameter. This aligns with the existing suppression for 'FindAll'.

* Refactor Get-PASAccount to remove external version as this is not acutally needed
Enhance Get-PASAccountSearchProperty to return structured results with valid values and operators

* Rename Reset-PASThemeImage to Reset-PASTheme

The function Reset-PASThemeImage was renamed to Reset-PASTheme for improved clarity and consistency with naming conventions.

* Rename Set-PASTheme to Enable-PASTheme and update parameters

Renamed the Set-PASTheme function, test, and documentation to Enable-PASTheme. Updated the parameter from 'ThemeName' (string) to 'ThemesNames' (string array) throughout the code, tests, and docs to reflect the new naming and ensure correctly formatted json requests.

* Add New-PASTheme function for custom UI themes

Introduces the New-PASTheme function to create custom UI themes in CyberArk via the REST API. Adds supporting Format-PASThemeObject helper, documentation, and updates help XML. Also includes a placeholder for related Pester tests.

* Fix incorrect URI for 'ByActive' theme option

Updated the 'ByActive' case in Get-PASTheme to use the correct URI segment '/ActiveThemes/' instead of '/Themes/ActiveThemes/'.

* Add Set-PASTheme function for custom theme updates

Introduces the Set-PASTheme function to update custom UI themes in CyberArk via the REST API. Adds supporting private function Flatten-CustomThemeObject, updates module manifest and help documentation, and provides a placeholder for related Pester tests.

* Added new functions for Syslog/SIEM administration. Moved functions to new PTA Administration map to make it easier to find PTA administation settings and even security functions

* Add AllowAccountDuplications to Add-PASAccount

Introduces the AllowAccountDuplications parameter to Add-PASAccount for Gen2, allowing control over duplicate account addition when supported by the backend (self-hosted, version 14.6+). Updates documentation and help files accordingly, and improves error handling in Invoke-PASRestMethod to provide detailed feedback when duplicate accounts are detected.

* Rename and refactor theme flattening function

Renamed Flatten-CustomThemeObject.ps1 to Format-FlattenedThemeObject.ps1 and updated all references accordingly. Refactored internal helper function from Add-Properties to Add-ThemeProperty for clarity and consistency.

* Add help and test stubs for PTA Syslog cmdlets

Added documentation and help entries for Add-PASPTASyslog and Remove-PASPTASyslog cmdlets, including new markdown help files and updates to psPAS-help.xml. Created placeholder test files for both cmdlets.

* Fix syntax error in module function list

Corrected a missing comma & duplicate entry in the FunctionsToExport array in psPAS.psd1 to ensure proper module loading.

* 🚑 FIX Get-PASSafe

Corrects definition of the sort parameter to allow sorting via SafeName or ManagingCPM.
Adds SortDirection paramter to enable ascending or descending sort of the results according to the specified property

Fixes #542

* Add dynamic parameters for Get-PASAccount function

* Add Add-PASPTASMTP function for SMTP connectivity configuration

* 🚀 ADD ToHashtable ScriptMethod

Enables an Account object returned from a Get-PASAccount operation to be converted into a hashtable, so it can be splatted against Add-PASAccount

* ADD Docs

Add documentation for new Add-PASPTASMTP command.
Add placeholder test file for Add-PASPTASMTP command.

* Update CHANGELOG.md

Add details of latest changes to be included in next release

* Changed name to Set-PASPTASMTP from Add-PASPTASMTP

* UPDATE Docs

Reflects Set-PASPTASMTP function with changed name

* UPDATE Set-PASPTASMTP

Adds `SupportsShouldProcess ` to resolve a PSScriptAnalyzer finding.
Assigns a paramter help message to the correct parameter.
Updates related documentation.

* Created permission preset options for Add and Set-PASSafeMembers

* Removed debugging help text in code

* RENAME Set-PASThemeStatus

Changes name of `Set-PASThemeStatus` to `Publish-PASTheme` in line with command capability

* Update Import-PASPlatform.ps1

Resolves issue where required body was not being generated for side-by-side import of conflicting platform.
Updates ShouldProcess message for new function mode contexts

* Combined Get-PASPTASecurityConfigurationCategory so it can also list specifc info about each catogery based on key

* Added support for LogicalOperator to Get-PASAccount

* Update psPAS.CyberArk.Vault.User.Formats.ps1xml

Adds `allowedAuthenticationMethods` & `FidoCredentialsIds` to list view of user details

* Improve Error & Debug Output

Adds URI & Method details into Debug Output.
Refactors code to include details of inner error arrays as lines of strings in error output

* Update request body when adding or removing  from AllowedAuthenticationMethod value(s)

Corrects format of body for bulk removal of AllowedAuthenticationMethod values from collections of accounts.

* Update Remove-PASUserAllowedAuthenticationMethod.md

minor update

* Update Get-PASReport.ps1

Updated to only return `reports` output property from returned data

* Update Get-PASReportSchedule.ps1

Updated to only return `tasks` output property from returned data

* UPDATE Export-PASReport

Builds correct URL string to download report.
Updates file output logic for improved error handling
Updates query string function with additional options for string creation
Updates related help files and documentation

* UPDATE Deny-PASRequest

Updated to handle bulk rejection of requests using a single request as supported from version 14.6

* Update CHANGELOG.md

* UPDATE SafeMember functions

Makes parameterset declarations more robust to include required and optional paramteres for each function operation, including new functionality to add predefined permission sets.
Updates related Help content.

* Update Deny-PASRequest.md

* UPDATE Safe Member Tests

Updated test for mandatory parameters to cover multiple parametersets

* Update Deny-PASRequest.Tests.ps1

Update tests for latest function capabilities

* Update Deny-PASRequest.Tests.ps1

* Update Get-PASAccount.md

Adds description for new `LogicalOperator` parameter

* UPDATE Get-PASPTASecurityConfigurationCategory

Refactors code to enable removal of parameter to aide simple operations.
Updates to module help documentation

* Update Get-NextLink.ps1

typo

* FIX Get-PASDependentAccount

Updated to return query details when searching for all accounts

* Update Set-PASDependentAccount.ps1

Includes current object details in request if not specified when running the command

* UPDATE New-PASReportSchedule.md

Updates help text for New-PASReportSchedule, adds example for subscriber class.

* Update psPAS.CyberArk.Vault.Directory.Formats.ps1xml

Adds `AllowedAuthenticationMethods` to output for directory mapping details

* UPDATE Docs

Updates to cover latest module updates

* UPDATE Docs

Formatting corrections

* Update commands.md

* UPDATE Version

Version Bump

---------

Co-authored-by: Christopher Ranney <[email protected]>
Co-authored-by: johannesconsulting <[email protected]>
Co-authored-by: JP-Consulting <[email protected]>
Co-authored-by: Alexander Sageng <[email protected]>

Author: 4 people

CHANGELOG.md

@@ -3,7 +3,7 @@
 ## Planned Updates / Unreleased
 
 - Continued development to encompass any new documented features of the CyberArk API.
-- psPAS v7.0...
+- psPAS v8.0...
 
 ## [unreleased]
 
@@ -23,6 +23,154 @@
 ### Fixed
 - N/A
 
+## 7.0
+
+**Special shout out to [JP-Consulting](https://github.com/johannesconsulting) for the help on this release**
+
+_Update includes almost all updates for the 14.2, 14.4 & 14.6 CyberArk Self-Hosted Releases_
+
+### Added
+- `Enable-PASTheme`
+  - New 14.6 command to activate a custom UI theme
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Remove-PASTheme`
+  - New 14.6 command to delete a custom UI theme
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Import-PASThemeImage`
+  - New 14.6 command to import an image to use in a custom UI theme
+- `Export-PASThemeImage`
+  - New 14.6 command to export an image used in a custom UI theme
+- `Reset-PASTheme`
+  - New 14.6 command to reset the UI theme to default
+- `Publish-PASTheme`
+  - New 14.6 command to change the draft status of a custom UI theme
+- `Get-PASTheme`
+  - New 14.6 command to return details of custom UI themes
+- `New-PASTheme`
+  - New 14.6 command to create a new custom UI theme
+- `Set-PASTheme`
+  - New 14.6 command to update a custom UI theme
+- `Get-PASStoredPlatform`
+  - New 14.6 command to get details of platforms stored in memory for import
+- `Remove-PASStoredPlatform`
+  - New 14.6 command to delete a stored platform from memory
+- `Get-PASUserLicenseReport`
+  - Returns information about usage of Privilege Cloud user licenses
+- `Get-PASReport`
+  - New 14.6 command to list reports available to your user
+- `Get-PASReportSchedule`
+  - New 14.6 command to list report schedules
+- `New-PASReportSchedule`
+  - New 14.6 command to create a scheduled report
+- `Export-PASReport`
+  - New 14.6 command to export an available report
+- `Remove-PASUserAllowedAuthenticationMethod`
+  - New 14.4 command to remove allowed authentication methods from multiple users in a single request
+- `Add-PASUserAllowedAuthenticationMethod`
+  - New 14.4 command to add allowed authentication methods to multiple users in a single request
+- `Remove-PASFIDO2Device`
+  - New 14.6 command to remove a configured FIDO2 device from a user
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASMasterPolicy`
+  - New 14.6 command to list Master Policy settings
+- `Set-PASMasterPolicy`
+  - New 14.6 command to update Master Policy settings
+- `Remove-PASDependentAccount`
+  - New 14.6 command to delete dependent accounts
+- `Resume-PASDependentAccount`
+  - New 14.6 command to resume password management of dependent accounts
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASDependentAccount`
+  - New 14.6 command to list details of dependent accounts
+- `Sync-PASDependentAccount`
+  - New 14.6 command to synchronise the password of a dependent account with its master account
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Set-PASDependentAccount`
+  - New 14.6 command to update a dependent account
+- `Add-PASDependentAccount`
+  - New 14.6 command to add a new dependent account
+- `Remove-PASPTASecurityConfigurationProperty`
+  - New 14.6 command to delete PTA security configuration properties
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Reset-PASPTASecurityConfigurationProperty`
+  - New 14.6 command to reset PTA security configuration properties
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Reset-PASPTASecurityConfigurationCategory`
+  - New 14.6 command to reset PTA security configuration categories
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASPTASecurityConfigurationCategory`
+  - New 14.6 command to return PTA security configuration categories
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Add-PASPTASyslog`
+  - New 14.6 command to add a new syslog configuration to PTA
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Remove-PASPTASyslog`
+  - New 14.6 command to remove a syslog configuration from PTA
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Set-PASPTASMTP`
+  - New 14.4 command to add a new SMTP configuration to PTA
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASAccountSearchProperty`
+  - New 14.6 command to list configured search properties
+
+### Updated
+- `Add-PASSafeMember`
+  - Updated to include permission pre-sets to match functionality available via PVWA
+  - Thanks [Slasky86](https://github.com/Slasky86)!!
+- `Set-PASSafeMember`
+  - Updated to include permission pre-sets to match functionality available via PVWA
+  - Thanks [Slasky86](https://github.com/Slasky86)!!
+- `Get-PASAccount`
+  - Updated to handle new quoting model for filter operations in version 14.6
+  - Adds dynamic search properties to the filter parameters list
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Add-PASAccount`
+  - Added `AllowAccountDuplications` parameter, which works in conjunction with the 14.6 `AccountDuplicationEnforcementLevel` setting
+- `Import-PASPlatform`
+  - New parameter sets added to support updating existing platforms and side-by-side imports
+- `New-PASDirectoryMapping`, `Set-PASDirectoryMapping`
+  - Added the `allowedAuthenticationMethods` parameter
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `New-PASUser`, `Set-PASUser`
+  - Added the `allowedAuthenticationMethods` parameter
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASComponentSummary`
+  - Now includes vault replication data in command output
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Approve-PASRequest`
+  - Adds support for bulk approvals using a single request
+- `Deny-PASRequest`
+  - Adds support for bulk rejections using a single request
+- `New-PASAccountPassword`
+  - Updated to include additional error checking
+- `New-PASAccountObject`
+  - Updated to create formatted objects for Dependent Account operations
+- `Get-PASSafe`
+  - Fixed issue with incorrectly defined `sort` parameter
+  - Adds sortDirection parameter to enable ascending or descending sort of safes by SafeName or Managing CPM
+- Script Methods
+  - `ToCredential()`
+    - Available on password objects
+    - Allows password values returned from the API to be converted to Credential objects
+  - `GetPermissions()`
+    - Available on Safe Member objects
+    - Enables conversion of safe ACL to hashtable which can be used to splat against Add-PASSafeMember & Set-PASSafeMember
+  - `ToHashtable()`
+    - Available on Account objects.
+    - Converts an Account object to a hashtable so that it can be splatted against Add-PASAccount
+- Various corrections to help file contents
+
+### Fixed
+- `Get-PASSAMLResponse`
+  - Fixes a responsibly disclosed security vulnerability where TLS 1.2 was not enforced when a value for the SAMLResponse parameter was not provided to the New-PASSession command when using the Gen2SAML ParameterSet.
+  - Much Respect to [Cristian Gaber](https://cgaber.com) for highlighting this to us.
+- `Get-PASAccountPassword`
+  - Fixes a parsing issue that could affect password values returned from the command.
+  - Thanks [ChristopherRanney](https://github.com/ChristopherRanney)!!
+- `Add-PASPublicSSHKey`, `Get-PASPublicSSHKey`, `Remove-PASPublicSSHKey`
+  - Corrects the URLs used by the commands
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+
 ## [6.4.85]
 
 ### Added

README.md

@@ -6,9 +6,7 @@
 
 # **psPAS: PowerShell Module for the CyberArk API**
 
-Through the PVWA REST API, administer CyberArk PAS with PowerShell.
-
-Contains all of the documented API capabilities up to CyberArk v14.0.
+Administer CyberArk PAS with PowerShell!
 
 Docs: [https://pspas.pspete.dev](https://pspas.pspete.dev)
 
@@ -995,7 +993,77 @@ Click the below dropdown to view the current list of psPAS functions and their m
 [`Get-PASDiscoveredLocalAccount`][Get-PASDiscoveredLocalAccount]                         |**P Cloud Only**    |Get  P Cloud Discovered Local Account
 [`Clear-PASDiscoveredLocalAccount`][Clear-PASDiscoveredLocalAccount]                     |**P Cloud Only**    |Clear all  P Cloud Discovered Local Accounts
 [`Add-PASDiscoveredLocalAccount`][Add-PASDiscoveredLocalAccount]                         |**P Cloud Only**    |Add  P Cloud Discovered Local Account
-
+[`Enable-PASTheme`][Enable-PASTheme]                                                     |**14.6**            |Activate a custom UI theme
+[`Remove-PASTheme`][Remove-PASTheme]                                                     |**14.6**            |Delete a custom UI theme
+[`Import-PASThemeImage`][Import-PASThemeImage]                                           |**14.6**            |Import image for use in a custom UI theme
+[`Export-PASThemeImage`][Export-PASThemeImage]                                           |**14.6**            |Export image used in a custom UI theme
+[`Reset-PASTheme`][Reset-PASTheme]                                                       |**14.6**            |Reset the UI theme to default
+[`Publish-PASTheme`][Publish-PASTheme]                                                   |**14.6**            |Change draft status of a custom UI theme
+[`Get-PASTheme`][Get-PASTheme]                                                           |**14.6**            |Return details of custom UI themes
+[`New-PASTheme`][New-PASTheme]                                                           |**14.6**            |Create a new custom UI theme
+[`Set-PASTheme`][Set-PASTheme]                                                           |**14.6**            |Update a custom UI theme
+[`Get-PASStoredPlatform`][Get-PASStoredPlatform]                                         |**14.6**            |Get details of platforms stored in memory
+[`Remove-PASStoredPlatform`][Remove-PASStoredPlatform]                                   |**14.6**            |Delete stored platform from memory
+[`Get-PASUserLicenseReport`][Get-PASUserLicenseReport]                                   |**14.6**            |Return Privilege Cloud user license usage
+[`Get-PASReport`][Get-PASReport]                                                         |**14.6**            |List reports available to your user
+[`Get-PASReportSchedule`][Get-PASReportSchedule]                                         |**14.6**            |List report schedules
+[`New-PASReportSchedule`][New-PASReportSchedule]                                         |**14.6**            |Create a scheduled report
+[`Export-PASReport`][Export-PASReport]                                                   |**14.6**            |Export an available report
+[`Add-PASUserAllowedAuthenticationMethod`][Add-PASUserAllowedAuthenticationMethod]       |**14.4**            |Add allowed authentication methods to users
+[`Remove-PASUserAllowedAuthenticationMethod`][Remove-PASUserAllowedAuthenticationMethod] |**14.4**            |Remove allowed authentication methods from users
+[`Remove-PASFIDO2Device`][Remove-PASFIDO2Device]                                         |**14.6**            |Remove configured FIDO2 device from a user
+[`Get-PASMasterPolicy`][Get-PASMasterPolicy]                                             |**14.6**            |List Master Policy settings
+[`Set-PASMasterPolicy`][Set-PASMasterPolicy]                                             |**14.6**            |Update Master Policy settings
+[`Add-PASDependentAccount`][Add-PASDependentAccount]                                     |**14.6**            |Add a new dependent account
+[`Remove-PASDependentAccount`][Remove-PASDependentAccount]                               |**14.6**            |Delete dependent account
+[`Resume-PASDependentAccount`][Resume-PASDependentAccount]                               |**14.6**            |Resume password management of dependent account
+[`Get-PASDependentAccount`][Get-PASDependentAccount]                                     |**14.6**            |List details of dependent accounts
+[`Sync-PASDependentAccount`][Sync-PASDependentAccount]                                   |**14.6**            |Synchronize dependent account password
+[`Set-PASDependentAccount`][Set-PASDependentAccount]                                     |**14.6**            |Update a dependent account
+[`Remove-PASPTASecurityConfigurationProperty`][Remove-PASPTASecurityConfigurationProperty]|**14.6**            |Delete PTA security configuration property
+[`Reset-PASPTASecurityConfigurationProperty`][Reset-PASPTASecurityConfigurationProperty] |**14.6**            |Reset PTA security configuration property
+[`Reset-PASPTASecurityConfigurationCategory`][Reset-PASPTASecurityConfigurationCategory] |**14.6**            |Reset PTA security configuration category
+[`Get-PASPTASecurityConfigurationCategory`][Get-PASPTASecurityConfigurationCategory]     |**14.6**            |Return PTA security configuration categories
+[`Add-PASPTASyslog`][Add-PASPTASyslog]                                                   |**14.6**            |Add syslog configuration to PTA
+[`Remove-PASPTASyslog`][Remove-PASPTASyslog]                                             |**14.6**            |Remove syslog configuration from PTA
+[`Set-PASPTASMTP`][Set-PASPTASMTP]                                                       |**14.4**            |Add SMTP configuration to PTA
+[`Get-PASAccountSearchProperty`][Get-PASAccountSearchProperty]                           |**14.6**            |List configured account search properties
+
+[Enable-PASTheme]:/psPAS/Functions/Theme/Enable-PASTheme
+[Remove-PASTheme]:/psPAS/Functions/Theme/Remove-PASTheme
+[Import-PASThemeImage]:/psPAS/Functions/Theme/Import-PASThemeImage
+[Export-PASThemeImage]:/psPAS/Functions/Theme/Export-PASThemeImage
+[Reset-PASTheme]:/psPAS/Functions/Theme/Reset-PASTheme
+[Publish-PASTheme]:/psPAS/Functions/Theme/Publish-PASTheme
+[Get-PASTheme]:/psPAS/Functions/Theme/Get-PASTheme
+[New-PASTheme]:/psPAS/Functions/Theme/New-PASTheme
+[Set-PASTheme]:/psPAS/Functions/Theme/Set-PASTheme
+[Get-PASStoredPlatform]:/psPAS/Functions/Platforms/Get-PASStoredPlatform
+[Remove-PASStoredPlatform]:/psPAS/Functions/Platforms/Remove-PASStoredPlatform
+[Get-PASUserLicenseReport]:/psPAS/Functions/Reports/Get-PASUserLicenseReport
+[Get-PASReport]:/psPAS/Functions/Reports/Get-PASReport
+[Get-PASReportSchedule]:/psPAS/Functions/Reports/Get-PASReportSchedule
+[New-PASReportSchedule]:/psPAS/Functions/Reports/New-PASReportSchedule
+[Export-PASReport]:/psPAS/Functions/Reports/Export-PASReport
+[Add-PASUserAllowedAuthenticationMethod]:/psPAS/Functions/Users/Add-PASUserAllowedAuthenticationMethod
+[Remove-PASUserAllowedAuthenticationMethod]:/psPAS/Functions/Users/Remove-PASUserAllowedAuthenticationMethod
+[Remove-PASFIDO2Device]:/psPAS/Functions/Users/Remove-PASFIDO2Device
+[Get-PASMasterPolicy]:/psPAS/Functions/Policy/Get-PASMasterPolicy
+[Set-PASMasterPolicy]:/psPAS/Functions/Policy/Set-PASMasterPolicy
+[Add-PASDependentAccount]:/psPAS/Functions/Accounts/Add-PASDependentAccount
+[Remove-PASDependentAccount]:/psPAS/Functions/Accounts/Remove-PASDependentAccount
+[Resume-PASDependentAccount]:/psPAS/Functions/Accounts/Resume-PASDependentAccount
+[Get-PASDependentAccount]:/psPAS/Functions/Accounts/Get-PASDependentAccount
+[Sync-PASDependentAccount]:/psPAS/Functions/Accounts/Sync-PASDependentAccount
+[Set-PASDependentAccount]:/psPAS/Functions/Accounts/Set-PASDependentAccount
+[Remove-PASPTASecurityConfigurationProperty]:/psPAS/Functions/PTA/Remove-PASPTASecurityConfigurationProperty
+[Reset-PASPTASecurityConfigurationProperty]:/psPAS/Functions/PTA/Reset-PASPTASecurityConfigurationProperty
+[Reset-PASPTASecurityConfigurationCategory]:/psPAS/Functions/PTA/Reset-PASPTASecurityConfigurationCategory
+[Get-PASPTASecurityConfigurationCategory]:/psPAS/Functions/PTA/Get-PASPTASecurityConfigurationCategory
+[Add-PASPTASyslog]:/psPAS/Functions/PTA/Add-PASPTASyslog
+[Remove-PASPTASyslog]:/psPAS/Functions/PTA/Remove-PASPTASyslog
+[Set-PASPTASMTP]:/psPAS/Functions/PTA/Set-PASPTASMTP
+[Get-PASAccountSearchProperty]:/psPAS/Functions/Accounts/Get-PASAccountSearchProperty
 [Get-PASIPAllowList]:/psPAS/Functions/IPALlowList/Get-PASIPAllowList
 [Set-PASIPAllowList]:/psPAS/Functions/IPALlowList/Set-PASIPAllowList
 [Get-PASBYOKConfig]:/psPAS/Functions/BYOK/Get-PASBYOKConfig
@@ -1313,6 +1381,9 @@ Priority support could be considered for <a href="https://github.com/sponsors/ps
 
 Hat Tips:
 
+**JP-Consulting** ([JP-Consulting](https://github.com/johannesconsulting))
+for the high effort contributions to the project
+
 **Joe Garcia** ([infamousjoeg](https://github.com/infamousjoeg))
 for the unofficial API documentation, general API wizardry & knowledge sharing.
 

Tests/Add-PASDependentAccount.Tests.ps1

@@ -0,0 +1 @@
+#TODO - Add Tests for Add-PASDependentAccount

Tests/Add-PASPTASyslog.Tests.ps1

@@ -0,0 +1 @@
+#TODO: Implement tests for Add-PASPTASyslog

Tests/Add-PASPublicSSHKey.Tests.ps1

@@ -90,7 +90,7 @@ Describe $($PSCommandPath -Replace '.Tests.ps1') {
 
 				Assert-MockCalled Invoke-PASRestMethod -ParameterFilter {
 
-					$URI -eq "$($Script:psPASSession.BaseURI)/WebServices/PIMServices.svc/Users/SomeUser%40domain.com/AuthenticationMethods/SSHKeyAuthentication/AuthorizedKeys/"
+					$URI -eq "$($Script:psPASSession.BaseURI)/WebServices/PIMServices.svc/Users/SomeUser%40domain.com/AuthenticationMethods/SSHKeyAuthentication/AuthorizedKeys"
 
 				} -Times 1 -Exactly -Scope It
 

Tests/Add-PASSafeMember.Tests.ps1

@@ -54,7 +54,7 @@ Describe $($PSCommandPath -Replace '.Tests.ps1') {
 
 				param($Parameter)
 
-				(Get-Command Add-PASSafeMember).Parameters["$Parameter"].Attributes.Mandatory | Should -Be $true
+				(Get-Command Add-PASSafeMember).Parameters["$Parameter"].Attributes.Mandatory | Select-Object -Unique | Should -Be $true
 
 			}
 

Tests/Add-PASUserAllowedAuthenticationMethod.Tests.ps1

@@ -0,0 +1 @@
+#TODO - Define Tests!