Version 2026.2.0 (June 2, 2026)

Version 2026.2.0 (June 2, 2026)

avatar
Maxime Bernier

Breaking Changes

  • Raised minimal powershell version to 7.6 to use the module

New Features

  • Added a new Update-RDMOption cmdlet to reload module options when a concurrent RDM instance has modified them

Improvements

  • Added -DefaultElevationGroupID to New-DSPamAccount to save default JIT elevation group identifiers (AD SIDs or Entra ID object IDs) on a PAM account at creation time

  • Added -DefaultElevationGroupID to Update-DSPamAccount to replace or clear the saved default

  • Added -Detailed switch to Get-DSPamAccount to retrieve full account data for all accounts in a single bulk call, equivalent to fetching each account individually with -AccountID

  • Added -ElevationGroupID to Invoke-DSPamCheckout: omit to auto-apply the account's saved default, supply identifiers to override, or pass @() to skip JIT elevation entirely even when a default is configured

  • Added -PageSize parameter to Get-DSPamAccount to control how many accounts are fetched per request when retrieving bulk results (default: 500)

  • Deprecated the -HubPersonal parameter in New-RDMDataSource

  • Export-RDMEntry now accepts entries as pipeline input

  • Improved Get-RDMWorkspaceCustomVariable and Set-RDMWorkspaceCustomVariable cmdlets to correctly enumerate and consume pipeline objects

  • Invoke-DSPamCheckout now accepts a -MfaCode parameter (string or SecureString via PSPassword) to satisfy MFA-on-checkout policies; the cmdlet automatically resolves the user's configured TOTP authenticator, and the code can be retrieved from a stored OTP entry using Get-DSEntryOTP

  • New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy now support a -CheckoutMFAMode parameter to configure MFA enforcement on PAM checkout (Default, None, Mandatory, or MandatoryOnElevationOnly)

  • Removed version management configuration prompt when upgrading a data source

  • Renamed "connection" and "session" to "entry" across cmdlets, parameters, and documentation

  • Renamed "data source" to "workspace" across cmdlets, parameters, and documentation

  • Renamed "password template" to "password policy" across cmdlets, parameters, and documentation

  • Renamed "repository" to "vault" across cmdlets, parameters, and documentation

  • Renamed "role" to "user group" across cmdlets, parameters, and documentation

  • Renamed "virtual gateway" to "ruleset" across cmdlets, parameters, and documentation

  • Renamed -HubBusiness to -Cloud on New-RDMDatasource and *-RDMHubVaultAccess cmdlets to *-RDMCloudVaultAccess (old names kept as aliases)

  • Update-RDMEntries no longer reloads options

Fixes

  • Fixed a null-reference exception in New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy when the server returned an error response

  • Fixed Export-RDMActivityLogsReport - -After/-Before parameters now honor time-of-day instead of being truncated to whole-day boundaries

  • Fixed recently created users not being fetched by Add-RDMRoleToUser for its -UserName parameter

  • Fixed Set-RDMEntry failing with "The entry is checked out" when saving a new entry with manual checkout mode

  • Fixed Update-DSPamCheckoutPolicy throwing an argument exception when -Name was omitted while supplying other parameters

All Comments (0)