Get-DSPamAccount: Add parameter to retrieve detailed information for all PAM accounts in a single

Get-DSPamAccount: Add parameter to retrieve detailed information for all PAM accounts in a single

2 votes

avatar

Current Behavior:

  • Get-DSPamAccount (without parameters) returns only limited information for all PAM accounts
  • Get-DSPamAccount -AccountID [ID] returns detailed information for a specific account
    1. To get detailed information for all accounts, we must: Call Get-DSPamAccount to retrieve all account IDs
    2. Iterate through each ID and call Get-DSPamAccount -AccountID [ID] individually

Issue:
Our automation scripts run frequently (several times per hour) and need detailed information for all PAM accounts. The current workflow requires N+1 requests to DVLS (one initial request + one per account), which:

  • Creates unnecessary load on the DVLS server, sometimes even crashing it
  • Increases script execution time
  • Is inefficient for a common use case

Proposed Solution:
Add a parameter (e.g., -Detailed or -IncludeDetails) to Get-DSPamAccount that retrieves detailed information for all accounts in a single call.
Example Usage:

Get-DSPamAccount -Detailed


Benefits:

  • Reduces server load by consolidating multiple requests into one
  • Improves script performance
  • Provides a more efficient API for common automation scenarios

Alternative Considerations:
Batch parameter:

Get-DSPamAccount -AccountID @(id1, id2, id3)

to retrieve multiple accounts at once

All Comments (1)

avatar

Hello,

Thank you for the request. We'll evaluate whether this is something we can implement. I've opened an internal ticket, and we will provide updates as soon as we have more information.

Regards,
Maxime