Add new functions for managing PTA security configuration properties …

psPAS/Functions/Authentication/Remove-PASFIDO2Device.ps1

@@ -19,7 +19,8 @@ Function Remove-PASFIDO2Device {
 	)
 
 	BEGIN {
-
+
+		Assert-VersionRequirement -SelfHosted
 		Assert-VersionRequirement -RequiredVersion 14.6
 
 	}#begin

psPAS/Functions/EventSecurity/Remove-PASPTASecurityConfigurationProperty.ps1

@@ -0,0 +1,47 @@
+# .ExternalHelp psPAS-help.xml
+Function Remove-PASPTASecurityConfigurationProperty {
+    [CmdletBinding(SupportsShouldProcess = $true)]
+    param(
+        [parameter(
+            Mandatory = $true,
+            ValueFromPipelinebyPropertyName = $true
+        )]
+        [ValidateSet('PrivilegedUsersList', 'PrivilegedDomainGroupsList', 'ActiveDormantUserAlgorithmEnabled',
+            'ActiveDormantUserEventScore', 'ActiveDormantUserDays', 'ExcessiveAccessUserAlgorithmEnabled', 'ExcessiveAccessUserScoreRange',
+            'FailedVaultLogonAttemptsAlgorithmEnabled', 'FailedVaultLogonAttemptsScoreOptions', 'FailedVaultLogonAttemptsThreshold',
+            'FailedVaultLogonAttemptsTimeframe', 'IrregularDaysUserAlgorithmEnabled', 'IrregularDaysUserScoreRange', 'IrregularHoursUserAlgorithmEnabled',
+            'IrregularHoursUserExcludedUsernames', 'IrregularHoursUserScoreRange', 'IrregularIpUserAlgorithmEnabled', 'IrregularIpUserExcludedSourceIpsList', 
+            'IrregularIpUserScoreRange', 'SCTAlgorithmEnabled', 'SCTEventScore', 'SCTExcludedAccountsList', 'SCTPasswordRetrievalTimeWindow',
+            'InteractiveLogonWithServiceAccountAlgorithmEnabled', 'InteractiveLogonWithServiceAccountEventScore', 'ServiceAccountIncludeList',
+            'SPCAlgorithmEnabled', 'SPCEventScore', 'SPCPassChangeByCPMTimeWindow', 'UPAAlgorithmEnabled', 'UPAEventScore', 'UPAExcludedAccountsList' ) ]
+
+        [string]$propertyKey,
+        [parameter(
+            Mandatory = $true,
+            ValueFromPipelinebyPropertyName = $true
+        )]
+        [string]$id
+    )
+
+    BEGIN {
+        Assert-VersionRequirement -SelfHosted
+        Assert-VersionRequirement -RequiredVersion 14.2
+    }#begin
+
+    PROCESS {
+
+        #Create request URL
+        $URI = "$($psPASSession.BaseURI)/API/pta/API/configuration/properties/$($propertyKey | Get-EscapedString)/$($id | Get-EscapedString)"
+
+        if ($PSCmdlet.ShouldProcess($id, 'Delete PTA Security Configuration Property')) {
+
+            #send request to web service
+            Invoke-PASRestMethod -Uri $URI -Method DELETE
+
+        }
+
+    }#process
+
+    END { }#end
+
+}

psPAS/Functions/EventSecurity/Reset-PASPTASecurityConfigurationCategory.ps1

@@ -0,0 +1,35 @@
+# .ExternalHelp psPAS-help.xml
+Function Reset-PASPTASecurityConfigurationCategory {
+    [CmdletBinding(SupportsShouldProcess = $true)]
+    param(
+        [parameter(
+            Mandatory = $true,
+            ValueFromPipelinebyPropertyName = $true
+        )]
+        [ValidateSet('ActiveDormantUser', 'PrivilegedUsersAndGroups', 'IrregularIpUser', 'SuspectedCredentialsTheft', 'InteractiveLogonWithServiceAccount',
+            'IrregularHoursUser', 'UnmanagedPrivilegedAccess', 'SuspiciousActivityInPSMSession', 'IrregularDaysUser', 'FailedVaultLogonAttempts', 'ExcessiveAccessUser')]
+        [string]$categoryKey
+    )
+
+    BEGIN {
+        Assert-VersionRequirement -SelfHosted
+        Assert-VersionRequirement -RequiredVersion 14.2
+    }#begin
+
+    PROCESS {
+
+        #Create request URL
+        $URI = "$($psPASSession.BaseURI)/API/pta/API/configuration/properties/$($categoryKey | Get-EscapedString)/default"
+
+        if ($PSCmdlet.ShouldProcess($categoryKey, 'Reset PTA Security Configuration Category')) {
+
+            #send request to web service
+            Invoke-PASRestMethod -Uri $URI -Method PUT
+
+        }
+
+    }#process
+
+    END { }#end
+
+}

psPAS/Functions/EventSecurity/Reset-PASPTASecurityConfigurationProperty.ps1

@@ -0,0 +1,42 @@
+# .ExternalHelp psPAS-help.xml
+Function Remove-PASPTASecurityConfigurationProperty {
+    [CmdletBinding(SupportsShouldProcess = $true)]
+    param(
+        [parameter(
+            Mandatory = $true,
+            ValueFromPipelinebyPropertyName = $true
+        )]
+        [ValidateSet('PrivilegedUsersList', 'PrivilegedDomainGroupsList', 'ActiveDormantUserAlgorithmEnabled',
+            'ActiveDormantUserEventScore', 'ActiveDormantUserDays', 'ExcessiveAccessUserAlgorithmEnabled', 'ExcessiveAccessUserScoreRange',
+            'FailedVaultLogonAttemptsAlgorithmEnabled', 'FailedVaultLogonAttemptsScoreOptions', 'FailedVaultLogonAttemptsThreshold',
+            'FailedVaultLogonAttemptsTimeframe', 'IrregularDaysUserAlgorithmEnabled', 'IrregularDaysUserScoreRange', 'IrregularHoursUserAlgorithmEnabled',
+            'IrregularHoursUserExcludedUsernames', 'IrregularHoursUserScoreRange', 'IrregularIpUserAlgorithmEnabled', 'IrregularIpUserExcludedSourceIpsList', 
+            'IrregularIpUserScoreRange', 'SCTAlgorithmEnabled', 'SCTEventScore', 'SCTExcludedAccountsList', 'SCTPasswordRetrievalTimeWindow',
+            'InteractiveLogonWithServiceAccountAlgorithmEnabled', 'InteractiveLogonWithServiceAccountEventScore', 'ServiceAccountIncludeList',
+            'SPCAlgorithmEnabled', 'SPCEventScore', 'SPCPassChangeByCPMTimeWindow', 'UPAAlgorithmEnabled', 'UPAEventScore', 'UPAExcludedAccountsList' ) ]
+
+        [string]$propertyKey
+    )
+
+    BEGIN {
+        Assert-VersionRequirement -SelfHosted
+        Assert-VersionRequirement -RequiredVersion 14.2
+    }#begin
+
+    PROCESS {
+
+        #Create request URL
+        $URI = "$($psPASSession.BaseURI)/API/pta/API/configuration/properties/$($propertyKey | Get-EscapedString)/default"
+
+        if ($PSCmdlet.ShouldProcess($categoryKey, 'Reset PTA Security Configuration Category')) {
+
+            #send request to web service
+            Invoke-PASRestMethod -Uri $URI -Method PUT
+
+        }
+
+    }#process
+
+    END { }#end
+
+}

psPAS/psPAS.psd1

@@ -274,7 +274,11 @@
 		'Remove-PASFIDO2Device',
 		'Get-PASMasterPolicy',
 		'Set-PASMasterPolicy',
-		'Get-PASDependentAccount'
+		'Get-PASDependentAccount',
+		'Sync-PASDependentAccount',
+		'Remove-PASPTASecurityConfigurationProperty',
+		'Reset-PASPTASecurityConfigurationProperty',
+		'Reset-PASPTASecurityConfigurationCategory'
 
 	)