Skip to content

Conversation

@pspete
Copy link
Owner

@pspete pspete commented Sep 9, 2025

Description

Update includes almost all updates for the 14.2, 14.4 & 14.6 CyberArk Self-Hosted Releases

Added

  • Enable-PASTheme
    • New 14.6 command to activate a custom UI theme
  • Remove-PASTheme
    • New 14.6 command to delete a custom UI theme
  • Import-PASThemeImage
    • New 14.6 command to import an image to use in a custom UI theme
  • Export-PASThemeImage
    • New 14.6 command to export an image used in a custom UI theme
  • Reset-PASTheme
    • New 14.6 command to reset the UI theme to default
  • Publish-PASTheme
    • New 14.6 command to change the draft status of a custom UI theme
  • Get-PASTheme
    • New 14.6 command to return details of custom UI themes
  • New-PASTheme
    • New 14.6 command to create a new custom UI theme
  • Set-PASTheme
    • New 14.6 command to update a custom UI theme
  • Get-PASStoredPlatform
    • New 14.6 command to get details of platforms stored in memory for import
  • Remove-PASStoredPlatform
    • New 14.6 command to delete a stored platform from memory
  • Get-PASUserLicenseReport
    • Returns information about usage of Privilege Cloud user licenses
  • Get-PASReport
    • New 14.6 command to list reports available to your user
  • Get-PASReportSchedule
    • New 14.6 command to list report schedules
  • New-PASReportSchedule
    • New 14.6 command to create a scheduled report
  • Export-PASReport
    • New 14.6 command to export an available report
  • Remove-PASUserAllowedAuthenticationMethod
    • New 14.4 command to remove allowed authentication methods from multiple users in a single request
  • Add-PASUserAllowedAuthenticationMethod
    • New 14.4 command to add allowed authentication methods to multiple users in a single request
  • Remove-PASFIDO2Device
    • New 14.6 command to remove a configured FIDO2 device from a user
  • Get-PASMasterPolicy
    • New 14.6 command to list Master Policy settings
  • Set-PASMasterPolicy
    • New 14.6 command to update Master Policy settings
  • Remove-PASDependentAccount
    • New 14.6 command to delete dependent accounts
  • Resume-PASDependentAccount
    • New 14.6 command to resume password management of dependent accounts
  • Get-PASDependentAccount
    • New 14.6 command to list details of dependent accounts
  • Sync-PASDependentAccount
    • New 14.6 command to synchronise the password of a dependent account with its master account
  • Set-PASDependentAccount
    • New 14.6 command to update a dependent account
  • Add-PASDependentAccount
    • New 14.6 command to add a new dependent account
  • Remove-PASPTASecurityConfigurationProperty
    • New 14.6 command to delete PTA security configuration properties
  • Reset-PASPTASecurityConfigurationProperty
    • New 14.6 command to reset PTA security configuration properties
  • Reset-PASPTASecurityConfigurationCategory
    • New 14.6 command to reset PTA security configuration categories
  • Get-PASPTASecurityConfigurationCategory
    • New 14.6 command to return PTA security configuration categories
  • Add-PASPTASyslog
    • New 14.6 command to add a new syslog configuration to PTA
  • Remove-PASPTASyslog
    • New 14.6 command to remove a syslog configuration from PTA
  • Set-PASPTASMTP
    • New 14.4 command to add a new SMTP configuration to PTA
  • Get-PASAccountSearchProperty
    • New 14.6 command to list configured search properties

Updated

  • Add-PASSafeMember
    • Updated to include permission pre-sets to match functionality available via PVWA
  • Set-PASSafeMember
    • Updated to include permission pre-sets to match functionality available via PVWA
  • Get-PASAccount
    • Updated to handle new quoting model for filter operations in version 14.6
    • Adds dynamic search properties to the filter parameters list
  • Add-PASAccount
    • Added AllowAccountDuplications parameter, which works in conjunction with the 14.6 AccountDuplicationEnforcementLevel setting
  • Import-PASPlatform
    • New parameter sets added to support updating existing platforms and side-by-side imports
  • New-PASDirectoryMapping, Set-PASDirectoryMapping
    • Added the allowedAuthenticationMethods parameter
  • New-PASUser, Set-PASUser
    • Added the allowedAuthenticationMethods parameter
  • Get-PASComponentSummary
    • Now includes vault replication data in command output
  • Approve-PASRequest
    • Adds support for bulk approvals using a single request
  • Deny-PASRequest
    • Adds support for bulk rejections using a single request
  • New-PASAccountPassword
    • Updated to include additional error checking
  • New-PASAccountObject
    • Updated to create formatted objects for Dependent Account operations
  • Get-PASSafe
    • Fixed issue with incorrectly defined sort parameter
    • Adds sortDirection parameter to enable ascending or descending sort of safes by SafeName or Managing CPM
  • Script Methods
    • ToCredential()
      • Available on password objects
      • Allows password values returned from the API to be converted to Credential objects
    • GetPermissions()
      • Available on Safe Member objects
      • Enables conversion of safe ACL to hashtable which can be used to splat against Add-PASSafeMember & Set-PASSafeMember
    • ToHashtable()
      • Available on Account objects.
      • Converts an Account object to a hashtable so that it can be splatted against Add-PASAccount
  • Various corrections to help file contents

Fixed

  • Get-PASSAMLResponse
    • Fixes a responsibly disclosed security vulnerability where TLS 1.2 was not enforced when a value for the SAMLResponse parameter was not provided to the New-PASSession command when using the Gen2SAML ParameterSet.
  • Get-PASAccountPassword
    • Fixes a parsing issue that could affect password values returned from the command.
  • Add-PASPublicSSHKey, Get-PASPublicSSHKey, Remove-PASPublicSSHKey
    • Corrects the URLs used by the commands

Fixes #

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that makes existing functionality work differently)
  • Documentation update (psPAS website or command help content)
  • Other (see description)

How Has This Been Tested?

  • Pester test(s) update required
  • Pester test(s) updated
  • Pester test(s) passing

Test Configuration:

  • PowerShell version: 7
  • CyberArk PAS version: 14.6
  • OS Version: Windows 11

Checklist:

  • My code follows the style guidelines of this project
  • I have followed the contributing guidelines.
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new test failures or errors
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • I have opened & linked a related issue
  • I have linked a related issue

pspete and others added 30 commits October 5, 2024 21:54
Corrects example
Adds try catch logic
Adds `ToCredential()` method for consistency with rest of module
URL for Public Keys ended with "/". This is not the correct URL
Fixed URL issue for Public SSH keys #562
Adds Activate and Delete theme functions
Adds psPAS documentation for new functions related to the theme APIs
Adds the version req that cloud is not supported
Ran platyPS with Powershell 5 and corrected the file name for Remove-PASTheme
Adds support for new parameter related to Directory Mappings
Enhanced Import-PASPlatform to support new parameter sets for updating existing platforms and side-by-side imports. Added parameter validation, version checks, and dynamic request construction to handle different import scenarios supported by version 14.2 & 14.6.
Ensures TLS 1.2 is used when available for Invoke-WebRequest calls in Get-PASSAMLResponse.ps1. This improves security and compatibility, especially on systems where older protocols are disabled. Also refactors web request parameter handling for better clarity and CoreCLR compatibility.
Introduced the Get-PASStoredPlatform cmdlet to retrieve stored platform information via the CyberArk REST API. Updated the module manifest to export the new function and extended the copyright year.
Introduced the Remove-PASStoredPlatform cmdlet to allow deletion of stored platforms via the API. Updated the module manifest to export the new function.
Introduced the Get-PASUserLicenseReport cmdlet to retrieve user license information from Privilege Cloud. Updated the module manifest to export the new function.
Introduced the Get-PASAccountSearchProperties cmdlet to retrieve advanced account search properties via the API. Updated the module manifest to export the new function.
Renamed the function and its file from Get-PASAccountSearchProperties to Get-PASAccountSearchProperty for consistency. Updated the module manifest to reflect the new function name.
Introduced the Get-PASReport cmdlet to fetch reports via the API. Updated the module manifest to export the new function.
Introduced the Get-PASReportSchedule function to retrieve report schedules via the API. Updated the module manifest to export the new function.
Introduces New-PASReportSchedule function to create report schedules, including support for scheduling parameters and report subscribers. Adds subscriberClasses.ps1 with LdapInfo and Subscriber class definitions, and updates psPAS.psd1 to load these classes and export the new cmdlet.
Introduced the Export-PASReport function to enable exporting reports in XLSX, XLS, or CSV formats. Updated the module manifest to include the new function in the exported commands.
Introduced Add-PASUserAllowedAuthenticationMethod and Remove-PASUserAllowedAuthenticationMethod functions to allow bulk addition and removal of allowed authentication methods for users. Updated the module manifest to export these new cmdlets.
Corrects parameter list syntax by replacing a period with a comma in both Add-PASUserAllowedAuthenticationMethod and Remove-PASUserAllowedAuthenticationMethod. Also updates the way bulk items are added to use '+=' instead of '.Add', ensuring proper array handling.
Corrected the syntax for the ValidateSet attribute in the Export-PASReport function to ensure proper parameter validation.
johannesconsulting and others added 28 commits September 6, 2025 18:44
Adds `allowedAuthenticationMethods` & `FidoCredentialsIds` to list view of user details
Adds URI & Method details into Debug Output.
Refactors code to include details of inner error arrays as lines of strings in error output
…nMethod value(s)

Corrects format of body for bulk removal of AllowedAuthenticationMethod values from collections of accounts.
Updated to only return `reports` output property from returned data
Updated to only return `tasks` output property from returned data
Builds correct URL string to download report.
Updates file output logic for improved error handling
Updates query string function with additional options for string creation
Updates related help files and documentation
Updated to handle bulk rejection of requests using a single request as supported from version 14.6
Makes parameterset declarations more robust to include required and optional paramteres for each function operation, including new functionality to add predefined permission sets.
Updates related Help content.
Updated test for mandatory parameters to cover multiple parametersets
Update tests for latest function capabilities
…ounts-fido2

Added support for Logical Operator to Get-PASAccount and combined PTA APIs to one function
Adds description for new `LogicalOperator` parameter
Refactors code to enable removal of parameter to aide simple operations.
Updates to module help documentation
Updated to return query details when searching for all accounts
Includes current object details in request if not specified when running the command
Updates help text for New-PASReportSchedule, adds example for subscriber class.
Adds `AllowedAuthenticationMethods` to output for directory mapping details
Working Next Version for release
Updates to cover latest module updates
Formatting corrections
Version Bump
@pspete pspete merged commit 2a8b1b4 into master Sep 9, 2025
1 check passed
@pspete pspete deleted the dev branch September 9, 2025 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants