PAM vault management - powershell module

PAM vault management - powershell module

0 vote

avatar

Hello,

We want to create one PAM vault per user. There is no powershell module to manage PAM vaults.

Will a powershell module be added to manage PAM vaults?

Thank you,

Nicolas Pascuas

All Comments (4)

avatar

Hello,

The module Devolutions.PowerShell should allow you to manage PAM Vaults. The cmdlets Get-DSPamFolder, New-DSPamFolder, Remove-DSPamFolder, and Update-DSPamFolder manipulate PAM Folders, including PAM vaults.

To create a PAM Vault, use New-DSPamFolder -Name 'MyVaultName' -AsNewVault.

If you encounter any problems, let us know

avatar

Hi Maxime,

Thank you for the infomation regarding the PAM vault creation.

I didn't find how to set the security options o the new created vault. I checked the modules you mentioned.



Thank you,

Nicolas Pascuas

1445f526-e1cc-4721-95b2-78606ccceb38.png

avatar

It is not currently possible to edit the security options. I will investigate how we could do it.

avatar

Hello,

Version 2023.2.0.6 of the module allows to edit the security options of PAM entries. You must create the permissions object with New-DSPamSecurity cmdlet, and pass it the new parameter Security in the following cmdlets: New-DSPamAccount, Update-DSPamAccount, New-DSPamFolder, and Update-DSPamFolder. It is also possible to fetch the current security of a PAM account or folder with Get-DSPamAccountSecurity and Get-DSPamFolderSecurity.

Closed