JIT Configuration - Powershell Module

Hello Nicolas,

Thank you for your request. A ticket will be opened to implement it.

Regards,

Maxime Bernier

Hello,

The version 2023.3.0 of the Devolutions.PowerShell module allows you to edit the JIT settings of PAM providers.

To do so, Update-DSPamProvider has a new parameter: InputObject. It accepts PAM provider object, such as those obtained from Get-DSPamProvider. So you can modify the object directly (property JitElevationSettings) before updating it.

Two others cmdlets have been implemented:

• Get-DSADGroup: For domain providers, it returns the groups present in an OU. The ProviderID parameter is required, and the DN parameter indicate the distinguished name of the OU containing the groups.
• Get-AzureADGroup: For Azure providers, it returns all groups.

In both cases, a AsJITSettings switch can be used to wrap the groups in the corresponding JIT settings object. It is useful if the JITElevationSettings is not defined.

Let us know if you need anything else,

Best regards,

Maxime