v5.2.52
psPAS v5.2.52
Module update to cover all CyberArk 12.2 API features
- Breaking Changes
Request-PASJustInTimeAccess- Command renamed from
Request-PASAdHocAccessin line with CyberArk feature nomenclature.
- Command renamed from
Get-PASSafeMember- Adds capability to get permissions for individual safe member using the Gen2 API from 12.2 onward.
- Addition of
UseGen1APIparameter allows operation against Gen1 API if required.
Set-PASSafeMember- Adds Gen2 API capability introduced in 12.2.
- Default operation is now via Gen2 API.
- Addition of
UseGen1APIparameter allows operation against Gen1 API if required.
Remove-PASSafeMember- Adds support for operation against Gen2 API introduced in PAS 12.2
- Default operation now requires 12.2
UseGen1APIparameter added to force operation against Gen1 API for earlier PAS versions.
Set-PASSafe- Adds Gen2 API capability introduced in 12.2.
- Default operation is now via Gen2 API.
- Addition of
UseGen1APIparameter allows operation against Gen1 API if required.
- New Commands
Get-PASAccountDetail- New experimental function developed using unofficial documentation
Revoke-PASJustInTimeAccess- New API function supported from 12.0 (previously missed)
- Revokes requested JIT access.
Clear-PASLinkedAccount- Unlinks associated Logon/Reconcile/ExtraPass accounts
Get-PASPlatformSummary- Returns basic platform system type information
- Other Updates
Get-PASSafe- Implements Get Individual Safe details using Gen2 API feature of PAS 12.2.
- Adds
UseGen1APIparameter to allow backward compatibility when using theSafeNameparameter. - Changes depreciation of Gen1 API operations from 12.2 to 12.3.
Get-PASUser- New
sortparameter added, supported from 12.2. - Added ability to filter by UserName using Gen2 API.
- Gen1 search by UserName now accessible by also specifying the introduced
UseGen1APIparameter.
- New
Get-PASGroup- New
sortparameter added, supported from 12.2.
- New
Add-PASGroupMember- Added version check to prevent use of Gen1 API starting from 12.3 in line with documented plan for API depreciation
New-PASUser- Added version check to prevent use of Gen1 API starting from 12.3 in line with documented plan for API depreciation
Remove-PASUser- Added version check to prevent use of Gen1 API starting from 12.3 in line with documented plan for API depreciation
Set-PASUser- Added version check to prevent use of Gen1 API starting from 12.3 in line with documented plan for API depreciation
Unblock-PASUser- Added version check to prevent use of Gen1 API starting from 12.3 in line with documented plan for API depreciation
- Account Methods updated to apply to account details obtained via Gen2 API calls
VerifyPassword()- Updated method to use
Invoke-PASCPMOperation
- Updated method to use
ChangePassword()- Updated method to use
Invoke-PASCPMOperation
- Updated method to use
ReconcilePassword()- New method using
Invoke-PASCPMOperation
- New method using
GetDetails()- New method using
Get-PASAccountDetail
- New method using
- Alias Removal
- Removed alias values for previously depreciated command names