Devolutions ForumDevolutions Forum

Version 2024.3.0 (September 23th, 2024)

Version 2024.3.0 (September 23th, 2024)

avatar
Maxime Bernier

Breaking Changes in PAM cmdlets:

PAM entries have been reworked to move from PAMCredential to Connection, leading to the following changes. PAM folders are now referred to as either "Vaults" or "Connection", and several cmdlets have been updated accordingly. Below is a summary of the key updates:

Summary of Changes:

Export-DSPamAccountAccessReport

  • The parameter FolderID has been renamed to VaultID, and it now accepts a single value instead of an array.
  • The report's column Role has been replaced by Right.
  • The report's column Source now has possible values: System Settings, Vault, and Entry.


Get-DSPamAccount

  • Now returns the same object as Get-DSEntry.


Get-DSPamAccountSecurity

  • Returns a ConnectionPermission[] instead of PamUserPermission[].


New-DSPamAccount

  • No longer returns the created connection.
  • New parameter CustomProperties has been added to fill all parameters when creating a custom entry.
  • New parameter Group specifies which group to include the newly created entry in.
  • The parameter FolderID has been renamed to VaultID and specifies the vault.
  • The parameter Security has been renamed to Permission and expects the ConnectionPermission type instead of PamUserPermission.


Update-DSPamAccount

  • The parameter Security has been renamed to Permission and expects the ConnectionPermission type instead of PamUserPermission.


Get-DSPamFolder

  • Now returns the same object as Get-DSEntry.
  • No longer returns PAM vaults; use Get-DSPamVault instead.
  • New parameter VaultID specifies the vault.
  • The parameter Root now returns the root connection of the vault.


Get-DSPamFolderSecurity

  • Now returns a ConnectionPermission[] instead of PamUserPermission[].


New-DSPamFolder

  • The parameter ParentFolderID has been renamed to VaultID to specify the vault.
  • The parameter Group accepts a string representing the group where the folder will be created.
  • The parameter AsNewVault has been deprecated.
  • The parameter Security is deprecated. Permissions must now be set on the root entry of the vault.


Update-DSPamFolder

  • New parameter Group has been added.
  • The parameters Group and Name can only be used on a folder.
  • Other parameters can only be used on the root of the vault.


New Cmdlets for PAM Vault Management:

  • Get-DSPamVault
  • New-DSPamVault
  • Remove-DSPamVault
  • Update-DSPamVault


New Cmdlet for Creating Permission Objects:

  • New-DSEntityPermission



Other changes:

  • Improve the cmdlet 'Copy-RDMSession' to support copying the document stored in the database for document entries
  • Add a login prompt when going offline on a DVLS data source

All Comments (0)