Version 2026.2.0 (June 2, 2026)

Breaking Changes

• Raised minimal powershell version to 7.6 to use the module

New Features

• Added a new Update-RDMOption cmdlet to reload module options when a concurrent RDM instance has modified them

Improvements

• Added -DefaultElevationGroupID to New-DSPamAccount to save default JIT elevation group identifiers (AD SIDs or Entra ID object IDs) on a PAM account at creation time
• Added -DefaultElevationGroupID to Update-DSPamAccount to replace or clear the saved default
• Added -Detailed switch to Get-DSPamAccount to retrieve full account data for all accounts in a single bulk call, equivalent to fetching each account individually with -AccountID
• Added -ElevationGroupID to Invoke-DSPamCheckout: omit to auto-apply the account's saved default, supply identifiers to override, or pass @() to skip JIT elevation entirely even when a default is configured
• Added -PageSize parameter to Get-DSPamAccount to control how many accounts are fetched per request when retrieving bulk results (default: 500)
• Deprecated the -HubPersonal parameter in New-RDMDataSource
• Export-RDMEntry now accepts entries as pipeline input
• Improved Get-RDMWorkspaceCustomVariable and Set-RDMWorkspaceCustomVariable cmdlets to correctly enumerate and consume pipeline objects
• Invoke-DSPamCheckout now accepts a -MfaCode parameter (string or SecureString via PSPassword) to satisfy MFA-on-checkout policies; the cmdlet automatically resolves the user's configured TOTP authenticator, and the code can be retrieved from a stored OTP entry using Get-DSEntryOTP
• New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy now support a -CheckoutMFAMode parameter to configure MFA enforcement on PAM checkout (Default, None, Mandatory, or MandatoryOnElevationOnly)
• Removed version management configuration prompt when upgrading a data source
• Renamed "connection" and "session" to "entry" across cmdlets, parameters, and documentation
• Renamed "data source" to "workspace" across cmdlets, parameters, and documentation
• Renamed "password template" to "password policy" across cmdlets, parameters, and documentation
• Renamed "repository" to "vault" across cmdlets, parameters, and documentation
• Renamed "role" to "user group" across cmdlets, parameters, and documentation
• Renamed "virtual gateway" to "ruleset" across cmdlets, parameters, and documentation
• Renamed -HubBusiness to -Cloud on New-RDMDatasource and *-RDMHubVaultAccess cmdlets to *-RDMCloudVaultAccess (old names kept as aliases)
• Update-RDMEntries no longer reloads options

Fixes

• Fixed a null-reference exception in New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy when the server returned an error response
• Fixed Export-RDMActivityLogsReport - -After/-Before parameters now honor time-of-day instead of being truncated to whole-day boundaries
• Fixed recently created users not being fetched by Add-RDMRoleToUser for its -UserName parameter
• Fixed Set-RDMEntry failing with "The entry is checked out" when saving a new entry with manual checkout mode
• Fixed Update-DSPamCheckoutPolicy throwing an argument exception when -Name was omitted while supplying other parameters