psPAS 7.0

CHANGELOG.md

@@ -3,7 +3,7 @@
 ## Planned Updates / Unreleased
 
 - Continued development to encompass any new documented features of the CyberArk API.
-- psPAS v7.0...
+- psPAS v8.0...
 
 ## [unreleased]
 
@@ -23,6 +23,154 @@
 ### Fixed
 - N/A
 
+## 7.0
+
+**Special shout out to [JP-Consulting](https://github.com/johannesconsulting) for the help on this release**
+
+_Update includes almost all updates for the 14.2, 14.4 & 14.6 CyberArk Self-Hosted Releases_
+
+### Added
+- `Enable-PASTheme`
+  - New 14.6 command to activate a custom UI theme
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Remove-PASTheme`
+  - New 14.6 command to delete a custom UI theme
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Import-PASThemeImage`
+  - New 14.6 command to import an image to use in a custom UI theme
+- `Export-PASThemeImage`
+  - New 14.6 command to export an image used in a custom UI theme
+- `Reset-PASTheme`
+  - New 14.6 command to reset the UI theme to default
+- `Publish-PASTheme`
+  - New 14.6 command to change the draft status of a custom UI theme
+- `Get-PASTheme`
+  - New 14.6 command to return details of custom UI themes
+- `New-PASTheme`
+  - New 14.6 command to create a new custom UI theme
+- `Set-PASTheme`
+  - New 14.6 command to update a custom UI theme
+- `Get-PASStoredPlatform`
+  - New 14.6 command to get details of platforms stored in memory for import
+- `Remove-PASStoredPlatform`
+  - New 14.6 command to delete a stored platform from memory
+- `Get-PASUserLicenseReport`
+  - Returns information about usage of Privilege Cloud user licenses
+- `Get-PASReport`
+  - New 14.6 command to list reports available to your user
+- `Get-PASReportSchedule`
+  - New 14.6 command to list report schedules
+- `New-PASReportSchedule`
+  - New 14.6 command to create a scheduled report
+- `Export-PASReport`
+  - New 14.6 command to export an available report
+- `Remove-PASUserAllowedAuthenticationMethod`
+  - New 14.4 command to remove allowed authentication methods from multiple users in a single request
+- `Add-PASUserAllowedAuthenticationMethod`
+  - New 14.4 command to add allowed authentication methods to multiple users in a single request
+- `Remove-PASFIDO2Device`
+  - New 14.6 command to remove a configured FIDO2 device from a user
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASMasterPolicy`
+  - New 14.6 command to list Master Policy settings
+- `Set-PASMasterPolicy`
+  - New 14.6 command to update Master Policy settings
+- `Remove-PASDependentAccount`
+  - New 14.6 command to delete dependent accounts
+- `Resume-PASDependentAccount`
+  - New 14.6 command to resume password management of dependent accounts
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASDependentAccount`
+  - New 14.6 command to list details of dependent accounts
+- `Sync-PASDependentAccount`
+  - New 14.6 command to synchronise the password of a dependent account with its master account
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Set-PASDependentAccount`
+  - New 14.6 command to update a dependent account
+- `Add-PASDependentAccount`
+  - New 14.6 command to add a new dependent account
+- `Remove-PASPTASecurityConfigurationProperty`
+  - New 14.6 command to delete PTA security configuration properties
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Reset-PASPTASecurityConfigurationProperty`
+  - New 14.6 command to reset PTA security configuration properties
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Reset-PASPTASecurityConfigurationCategory`
+  - New 14.6 command to reset PTA security configuration categories
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASPTASecurityConfigurationCategory`
+  - New 14.6 command to return PTA security configuration categories
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Add-PASPTASyslog`
+  - New 14.6 command to add a new syslog configuration to PTA
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Remove-PASPTASyslog`
+  - New 14.6 command to remove a syslog configuration from PTA
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Set-PASPTASMTP`
+  - New 14.4 command to add a new SMTP configuration to PTA
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASAccountSearchProperty`
+  - New 14.6 command to list configured search properties
+
+### Updated
+- `Add-PASSafeMember`
+  - Updated to include permission pre-sets to match functionality available via PVWA
+  - Thanks [Slasky86](https://github.com/Slasky86)!!
+- `Set-PASSafeMember`
+  - Updated to include permission pre-sets to match functionality available via PVWA
+  - Thanks [Slasky86](https://github.com/Slasky86)!!
+- `Get-PASAccount`
+  - Updated to handle new quoting model for filter operations in version 14.6
+  - Adds dynamic search properties to the filter parameters list
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Add-PASAccount`
+  - Added `AllowAccountDuplications` parameter, which works in conjunction with the 14.6 `AccountDuplicationEnforcementLevel` setting
+- `Import-PASPlatform`
+  - New parameter sets added to support updating existing platforms and side-by-side imports
+- `New-PASDirectoryMapping`, `Set-PASDirectoryMapping`
+  - Added the `allowedAuthenticationMethods` parameter
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `New-PASUser`, `Set-PASUser`
+  - Added the `allowedAuthenticationMethods` parameter
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Get-PASComponentSummary`
+  - Now includes vault replication data in command output
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+- `Approve-PASRequest`
+  - Adds support for bulk approvals using a single request
+- `Deny-PASRequest`
+  - Adds support for bulk rejections using a single request
+- `New-PASAccountPassword`
+  - Updated to include additional error checking
+- `New-PASAccountObject`
+  - Updated to create formatted objects for Dependent Account operations
+- `Get-PASSafe`
+  - Fixed issue with incorrectly defined `sort` parameter
+  - Adds sortDirection parameter to enable ascending or descending sort of safes by SafeName or Managing CPM
+- Script Methods
+  - `ToCredential()`
+    - Available on password objects
+    - Allows password values returned from the API to be converted to Credential objects
+  - `GetPermissions()`
+    - Available on Safe Member objects
+    - Enables conversion of safe ACL to hashtable which can be used to splat against Add-PASSafeMember & Set-PASSafeMember
+  - `ToHashtable()`
+    - Available on Account objects.
+    - Converts an Account object to a hashtable so that it can be splatted against Add-PASAccount
+- Various corrections to help file contents
+
+### Fixed
+- `Get-PASSAMLResponse`
+  - Fixes a responsibly disclosed security vulnerability where TLS 1.2 was not enforced when a value for the SAMLResponse parameter was not provided to the New-PASSession command when using the Gen2SAML ParameterSet.
+  - Much Respect to [Cristian Gaber](https://cgaber.com) for highlighting this to us.
+- `Get-PASAccountPassword`
+  - Fixes a parsing issue that could affect password values returned from the command.
+  - Thanks [ChristopherRanney](https://github.com/ChristopherRanney)!!
+- `Add-PASPublicSSHKey`, `Get-PASPublicSSHKey`, `Remove-PASPublicSSHKey`
+  - Corrects the URLs used by the commands
+  - Thanks [JP-Consulting](https://github.com/johannesconsulting)!!!
+
 ## [6.4.85]
 
 ### Added

README.md

@@ -6,9 +6,7 @@
 
 # **psPAS: PowerShell Module for the CyberArk API**
 
-Through the PVWA REST API, administer CyberArk PAS with PowerShell.
-
-Contains all of the documented API capabilities up to CyberArk v14.0.
+Administer CyberArk PAS with PowerShell!
 
 Docs: [https://pspas.pspete.dev](https://pspas.pspete.dev)
 
@@ -995,7 +993,77 @@ Click the below dropdown to view the current list of psPAS functions and their m
 [`Get-PASDiscoveredLocalAccount`][Get-PASDiscoveredLocalAccount]                         |**P Cloud Only**    |Get  P Cloud Discovered Local Account
 [`Clear-PASDiscoveredLocalAccount`][Clear-PASDiscoveredLocalAccount]                     |**P Cloud Only**    |Clear all  P Cloud Discovered Local Accounts
 [`Add-PASDiscoveredLocalAccount`][Add-PASDiscoveredLocalAccount]                         |**P Cloud Only**    |Add  P Cloud Discovered Local Account
-
+[`Enable-PASTheme`][Enable-PASTheme]                                                     |**14.6**            |Activate a custom UI theme
+[`Remove-PASTheme`][Remove-PASTheme]                                                     |**14.6**            |Delete a custom UI theme
+[`Import-PASThemeImage`][Import-PASThemeImage]                                           |**14.6**            |Import image for use in a custom UI theme
+[`Export-PASThemeImage`][Export-PASThemeImage]                                           |**14.6**            |Export image used in a custom UI theme
+[`Reset-PASTheme`][Reset-PASTheme]                                                       |**14.6**            |Reset the UI theme to default
+[`Publish-PASTheme`][Publish-PASTheme]                                                   |**14.6**            |Change draft status of a custom UI theme
+[`Get-PASTheme`][Get-PASTheme]                                                           |**14.6**            |Return details of custom UI themes
+[`New-PASTheme`][New-PASTheme]                                                           |**14.6**            |Create a new custom UI theme
+[`Set-PASTheme`][Set-PASTheme]                                                           |**14.6**            |Update a custom UI theme
+[`Get-PASStoredPlatform`][Get-PASStoredPlatform]                                         |**14.6**            |Get details of platforms stored in memory
+[`Remove-PASStoredPlatform`][Remove-PASStoredPlatform]                                   |**14.6**            |Delete stored platform from memory
+[`Get-PASUserLicenseReport`][Get-PASUserLicenseReport]                                   |**14.6**            |Return Privilege Cloud user license usage
+[`Get-PASReport`][Get-PASReport]                                                         |**14.6**            |List reports available to your user
+[`Get-PASReportSchedule`][Get-PASReportSchedule]                                         |**14.6**            |List report schedules
+[`New-PASReportSchedule`][New-PASReportSchedule]                                         |**14.6**            |Create a scheduled report
+[`Export-PASReport`][Export-PASReport]                                                   |**14.6**            |Export an available report
+[`Add-PASUserAllowedAuthenticationMethod`][Add-PASUserAllowedAuthenticationMethod]       |**14.4**            |Add allowed authentication methods to users
+[`Remove-PASUserAllowedAuthenticationMethod`][Remove-PASUserAllowedAuthenticationMethod] |**14.4**            |Remove allowed authentication methods from users
+[`Remove-PASFIDO2Device`][Remove-PASFIDO2Device]                                         |**14.6**            |Remove configured FIDO2 device from a user
+[`Get-PASMasterPolicy`][Get-PASMasterPolicy]                                             |**14.6**            |List Master Policy settings
+[`Set-PASMasterPolicy`][Set-PASMasterPolicy]                                             |**14.6**            |Update Master Policy settings
+[`Add-PASDependentAccount`][Add-PASDependentAccount]                                     |**14.6**            |Add a new dependent account
+[`Remove-PASDependentAccount`][Remove-PASDependentAccount]                               |**14.6**            |Delete dependent account
+[`Resume-PASDependentAccount`][Resume-PASDependentAccount]                               |**14.6**            |Resume password management of dependent account
+[`Get-PASDependentAccount`][Get-PASDependentAccount]                                     |**14.6**            |List details of dependent accounts
+[`Sync-PASDependentAccount`][Sync-PASDependentAccount]                                   |**14.6**            |Synchronize dependent account password
+[`Set-PASDependentAccount`][Set-PASDependentAccount]                                     |**14.6**            |Update a dependent account
+[`Remove-PASPTASecurityConfigurationProperty`][Remove-PASPTASecurityConfigurationProperty]|**14.6**            |Delete PTA security configuration property
+[`Reset-PASPTASecurityConfigurationProperty`][Reset-PASPTASecurityConfigurationProperty] |**14.6**            |Reset PTA security configuration property
+[`Reset-PASPTASecurityConfigurationCategory`][Reset-PASPTASecurityConfigurationCategory] |**14.6**            |Reset PTA security configuration category
+[`Get-PASPTASecurityConfigurationCategory`][Get-PASPTASecurityConfigurationCategory]     |**14.6**            |Return PTA security configuration categories
+[`Add-PASPTASyslog`][Add-PASPTASyslog]                                                   |**14.6**            |Add syslog configuration to PTA
+[`Remove-PASPTASyslog`][Remove-PASPTASyslog]                                             |**14.6**            |Remove syslog configuration from PTA
+[`Set-PASPTASMTP`][Set-PASPTASMTP]                                                       |**14.4**            |Add SMTP configuration to PTA
+[`Get-PASAccountSearchProperty`][Get-PASAccountSearchProperty]                           |**14.6**            |List configured account search properties
+
+[Enable-PASTheme]:/psPAS/Functions/Theme/Enable-PASTheme
+[Remove-PASTheme]:/psPAS/Functions/Theme/Remove-PASTheme
+[Import-PASThemeImage]:/psPAS/Functions/Theme/Import-PASThemeImage
+[Export-PASThemeImage]:/psPAS/Functions/Theme/Export-PASThemeImage
+[Reset-PASTheme]:/psPAS/Functions/Theme/Reset-PASTheme
+[Publish-PASTheme]:/psPAS/Functions/Theme/Publish-PASTheme
+[Get-PASTheme]:/psPAS/Functions/Theme/Get-PASTheme
+[New-PASTheme]:/psPAS/Functions/Theme/New-PASTheme
+[Set-PASTheme]:/psPAS/Functions/Theme/Set-PASTheme
+[Get-PASStoredPlatform]:/psPAS/Functions/Platforms/Get-PASStoredPlatform
+[Remove-PASStoredPlatform]:/psPAS/Functions/Platforms/Remove-PASStoredPlatform
+[Get-PASUserLicenseReport]:/psPAS/Functions/Reports/Get-PASUserLicenseReport
+[Get-PASReport]:/psPAS/Functions/Reports/Get-PASReport
+[Get-PASReportSchedule]:/psPAS/Functions/Reports/Get-PASReportSchedule
+[New-PASReportSchedule]:/psPAS/Functions/Reports/New-PASReportSchedule
+[Export-PASReport]:/psPAS/Functions/Reports/Export-PASReport
+[Add-PASUserAllowedAuthenticationMethod]:/psPAS/Functions/Users/Add-PASUserAllowedAuthenticationMethod
+[Remove-PASUserAllowedAuthenticationMethod]:/psPAS/Functions/Users/Remove-PASUserAllowedAuthenticationMethod
+[Remove-PASFIDO2Device]:/psPAS/Functions/Users/Remove-PASFIDO2Device
+[Get-PASMasterPolicy]:/psPAS/Functions/Policy/Get-PASMasterPolicy
+[Set-PASMasterPolicy]:/psPAS/Functions/Policy/Set-PASMasterPolicy
+[Add-PASDependentAccount]:/psPAS/Functions/Accounts/Add-PASDependentAccount
+[Remove-PASDependentAccount]:/psPAS/Functions/Accounts/Remove-PASDependentAccount
+[Resume-PASDependentAccount]:/psPAS/Functions/Accounts/Resume-PASDependentAccount
+[Get-PASDependentAccount]:/psPAS/Functions/Accounts/Get-PASDependentAccount
+[Sync-PASDependentAccount]:/psPAS/Functions/Accounts/Sync-PASDependentAccount
+[Set-PASDependentAccount]:/psPAS/Functions/Accounts/Set-PASDependentAccount
+[Remove-PASPTASecurityConfigurationProperty]:/psPAS/Functions/PTA/Remove-PASPTASecurityConfigurationProperty
+[Reset-PASPTASecurityConfigurationProperty]:/psPAS/Functions/PTA/Reset-PASPTASecurityConfigurationProperty
+[Reset-PASPTASecurityConfigurationCategory]:/psPAS/Functions/PTA/Reset-PASPTASecurityConfigurationCategory
+[Get-PASPTASecurityConfigurationCategory]:/psPAS/Functions/PTA/Get-PASPTASecurityConfigurationCategory
+[Add-PASPTASyslog]:/psPAS/Functions/PTA/Add-PASPTASyslog
+[Remove-PASPTASyslog]:/psPAS/Functions/PTA/Remove-PASPTASyslog
+[Set-PASPTASMTP]:/psPAS/Functions/PTA/Set-PASPTASMTP
+[Get-PASAccountSearchProperty]:/psPAS/Functions/Accounts/Get-PASAccountSearchProperty
 [Get-PASIPAllowList]:/psPAS/Functions/IPALlowList/Get-PASIPAllowList
 [Set-PASIPAllowList]:/psPAS/Functions/IPALlowList/Set-PASIPAllowList
 [Get-PASBYOKConfig]:/psPAS/Functions/BYOK/Get-PASBYOKConfig
@@ -1313,6 +1381,9 @@ Priority support could be considered for <a href="https://github.com/sponsors/ps
 
 Hat Tips:
 
+**JP-Consulting** ([JP-Consulting](https://github.com/johannesconsulting))
+for the high effort contributions to the project
+
 **Joe Garcia** ([infamousjoeg](https://github.com/infamousjoeg))
 for the unofficial API documentation, general API wizardry & knowledge sharing.
 

Tests/Add-PASDependentAccount.Tests.ps1

@@ -0,0 +1 @@
+#TODO - Add Tests for Add-PASDependentAccount

Tests/Add-PASPTASyslog.Tests.ps1

@@ -0,0 +1 @@
+#TODO: Implement tests for Add-PASPTASyslog

Tests/Add-PASPublicSSHKey.Tests.ps1

@@ -90,7 +90,7 @@ Describe $($PSCommandPath -Replace '.Tests.ps1') {
 
 				Assert-MockCalled Invoke-PASRestMethod -ParameterFilter {
 
-					$URI -eq "$($Script:psPASSession.BaseURI)/WebServices/PIMServices.svc/Users/SomeUser%40domain.com/AuthenticationMethods/SSHKeyAuthentication/AuthorizedKeys/"
+					$URI -eq "$($Script:psPASSession.BaseURI)/WebServices/PIMServices.svc/Users/SomeUser%40domain.com/AuthenticationMethods/SSHKeyAuthentication/AuthorizedKeys"
 
 				} -Times 1 -Exactly -Scope It
 

Tests/Add-PASSafeMember.Tests.ps1

@@ -54,7 +54,7 @@ Describe $($PSCommandPath -Replace '.Tests.ps1') {
 
 				param($Parameter)
 
-				(Get-Command Add-PASSafeMember).Parameters["$Parameter"].Attributes.Mandatory | Should -Be $true
+				(Get-Command Add-PASSafeMember).Parameters["$Parameter"].Attributes.Mandatory | Select-Object -Unique | Should -Be $true
 
 			}
 

Tests/Add-PASUserAllowedAuthenticationMethod.Tests.ps1

@@ -0,0 +1 @@
+#TODO - Define Tests!