Maxime Bernier

Hi,

Glad to hear it works.

Unfortunately, there is currently no way to refresh the My Account settings in an RDM instance that is already open. RDM loads them when it connects to the workspace and keeps them in memory afterwards. Update-RDMUI only refreshes the vaults and entries, not the user’s account settings.

I’ve noted your request to have this refresh possible from PowerShell, like Update-RDMUI does for sessions. It needs a change on the RDM side first, so I can’t give you a timeline yet.

Regards,

Maxime

Hello,

Version 2026.3.3 of the Devolutions.PowerShell module adds two cmdlets for “My account settings”, including Delinea Secret Server:

• Get-RDMMyAccountSetting -Type <type> reads the settings of that type.

• Set-RDMMyAccountSetting saves the changed object you pipe to it.

Here is an example:

$secretServer = Get-RDMMyAccountSetting -Type DelineaSecretServer
$secretServer.Username = 'jdoe'
$secretServer.Domain = 'CONTOSO'
$secretServer.Password = Read-Host -AsSecureString
$secretServer | Set-RDMMyAccountSetting

Each type returns an object with its own properties. Passwords are SecureString values. They come back as $null unless you use -IncludeSecret. If you leave Password as $null, the stored password stays the same.

If you need anything else, let us know.

Best regards,

Maxime

Hi John,

Yes, all of these can be set. Here is an example:

$name         = 'My IP list'
$entryFolder  = 'Test'          # folder where the entry is created
$filterFolder = 'Test\Test1'   # folder the dynamic list scans
$keywordNames = '"Tag with space" SpacelessTag'

$entry = New-RDMEntry -Name $name -Type DataEntry -Group $entryFolder

$entry.DataEntry.ConnectionTypeInfos   = @(@{ DataEntryConnectionType = 'IPList' })
$entry.DataEntry.IPListEntryMode       = 'Dynamic'
$entry.DataEntry.IPListDynamicSettings = @{
    Folder           = $filterFolder
    FilterByFolder   = $true
    Keywords         = $keywordNames
    FilterByKeywords = $true
    TagOperator      = 'Exclude'
}

Set-RDMEntry -InputObject $entry

If you need anything else, let us know.

Best regards,

Maxime

Hi John,

Thank you for raising this. In the module, an IP List isn’t its own entry type. It’s a Data Entry whose subtype is IPList, which is why New-RDMEntry -Type doesn’t offer it. We will add cmdlets to make it easier to create IP List entries and manage their items from PowerShell.

Until then, you can create and populate an IP List by setting the entry’s properties directly. To see which fields are relevant for a given entry type, check this page: https://docs.devolutions.net/powershell/remote-desktop-manager-powershell/powershell-scripting/list-of-property-names-for-powershell-script

Here is an example that creates an IP List with two items and saves it in the current vault:

$entry = New-RDMEntry -Name 'Office network' -Type DataEntry

# Make the data entry an IP List
$entry.DataEntry.ConnectionTypeInfos = @(@{ DataEntryConnectionType = 'IPList' })
$entry.DataEntry.IPListDisplayMode = 'Simple'   # or 'Advanced'

# Add the IP items
$entry.DataEntry.IPList = @(
    @{ Name = 'DC01'; Host = 'dc01.contoso.local'; IP = '10.0.0.10'; Description = 'Domain controller' }
    @{ Name = 'FS01'; Host = 'fs01.contoso.local'; IP = '10.0.0.20'; Description = 'File server' }
)

Set-RDMEntry -InputObject $entry

Each item may also have IPRange, Subnet, VlanID, Gateway, FirewallZone, DHCPServer, and DHCPRange.

To add items to an existing IP List, get the entry, append to the list, and save it:

$entry = Get-RDMEntry -Name 'Office network'
$entry.DataEntry.IPList += @{ Name = 'PRN01'; Host = 'prn01.contoso.local'; IP = '10.0.0.30' }
Set-RDMEntry -InputObject $entry

Best regards,

Maxime

Hello,

In version 2026.3.2 of the Devolutions.PowerShell module, the functionality has been added. Two new cmdlets (Get-RDMSshAlgorithmSupport and Set-RDMSshAlgorithmSupport) let you read and set the SSH Algorithm Support settings (cipher, host key, key exchange and MAC) from a script.

Best regards,

Maxime

New Features

• Added Get-RDMSshAlgorithmSupport and Set-RDMSshAlgorithmSupport cmdlets to read and write the SSH Algorithm Support settings (cipher, host key, key exchange and MAC) in the configuration

• Added Start-RDMDebugLog and Stop-RDMDebugLog to write the debug log of the current session to the given file, for every debug level or only the ones given with -Level

• Added Test-RDMPassword to check a password against a password policy

Improvements

• Added "Contractor" to the available -AuthenticationType values in New-DSUser

• Added -ExpirationDate parameter to New-DSUser to set a user's expiration date

• Added -PasswordPolicy and -PasswordComplexity parameters to New-DSCredentialEntry and New-DSSSHShellEntry to assign a password policy to the new entry and set how a non-compliant password is handled

• Added -Policy parameter to New-RDMStandalonePassword to generate a password from a password policy object

• Start-RDMProfiler now writes each line to its -Path file immediately, so the file keeps every line logged before the process crashes or is stopped

Fixes

• Fixed Get-RDMPasswordPolicy failing to return the password policies of a Devolutions Cloud workspace

Breaking Changes

• Get-DSPamFolder is deprecated and no longer available for Devolutions Server workspaces past version 2026.3.0; users should instead use Get-DSFolder or Get-DSFolders

• Legacy Website entries can no longer be edited before being converted to modern Website entries

• Removed deprecated parameters ResetPasswordOnCheckIn, UnmanagedAction, and Unmanaged in Import-DSPamScanResult

New Features

• Added Add-RDMForbiddenPasswordList to add a forbidden password list

• Added ConvertTo-RDMEntryXml to serialize a live entry (from Get-RDMEntry) or a historical version (from Get-RDMEntryHistory) to XML

• Added Enable-DSPamProviderSelfRotation to convert a PAM provider's own username/password into a server-managed, self-rotating PAM account

• Added Get-DSAdministrativeRole, Add-DSRoleAssignment, Get-DSRoleAssignment, Remove-DSRoleAssignment, and Get-DSPrincipalRoleAssignment to look up, grant, and revoke Devolutions Server administrative role assignments at vault, gateway, PAM provider, organizational unit, or global scope (requires a workspace running 2026.3.0 or later)

• Added Get-RDMAdministrativeRole, Add-RDMRoleAssignment, Get-RDMRoleAssignment, Remove-RDMRoleAssignment, and Get-RDMPrincipalRoleAssignment for managing role assignments through an active RDM/RDMS data source connection

• Added Get-RDMEntryCheckOut to fetch an entry's current check-outs

• Added Get-RDMEntryHistory to list an entry's version history, newest first; accepts a PSConnection via pipeline or -InputObject, and requires a workspace that supports version history

• Added Get-RDMForbiddenPasswordList to fetch forbidden password lists

• Added Get-RDMImportableDomain to discover the domains an identity provider makes available for import

• Added Get-RDMImportableUser to discover the users an identity provider makes available for import

• Added Get-RDMTicket to retrieve tickets from a ticketing service selected via -ServiceName or -ServiceId (defaulting to the highest-priority one), emitting each ticket's Code, Summary, Priority, Status, Description, Assignee, and Url

• Added Get-RDMTicketingService to list the log-enabled ticketing services configured on the current data source (Name, Id, ServiceType, Priority), never returning stored credentials

• Added Get-RDMUserTags to allow fetching user tags

• Added Get-RDMUserTemplate to retrieve the user template (default settings for new users) from a workspace's system settings

• Added Get-RDMVaultTemplate, New-RDMVaultTemplate, Set-RDMVaultTemplate, and Remove-RDMVaultTemplate to manage vault templates on Devolutions Server and Devolutions Hub

• Added Import-RDMUser to import users discovered from an identity provider

• Added Invoke-RDMUserCleanup to clean up users that no longer match their identity provider

• Added Remove-RDMEntryHistory to delete specific version(s) of an entry's history, or all versions of one or more entries; requires administrator or vault-owner rights and a workspace that supports deleting version history (Hub Business is not supported)

• Added Remove-RDMForbiddenPasswordList to remove a forbidden password list

• Added Restore-RDMEntryHistory to revert a live entry to a version obtained from Get-RDMEntryHistory, preserving the entry's password history and restoring any embedded document from that version; supports -PassThru to return the reverted entry

• Added Set-RDMForbiddenPasswordList to modify a forbidden password list

• Added Set-RDMUserTags to allow updating user tags

• Added Sync-RDMUser to synchronize users from providers

• Added Sync-RDMUserGroup to synchronize user groups from providers

Improvements

• Added a -VaultTemplate parameter to New-RDMVault to create a new vault pre-populated from an existing vault template on Devolutions Server and Devolutions Hub

• Added -AllowCheckoutExtensions parameter to New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy to enable allowing or disabling checkout extensions on a policy

• Added -CheckOut parameter to Invoke-RDMEntryCheckIn to force the check-in of specific user check-outs

• Added -JitAccountMode parameter to New-DSPamAccount and Update-DSPamAccount, adding a new EnableDisable JIT mode that references an existing DomainUser or AzureADUser account instead of creating one, enabling it and adding it to configured groups on checkout, and disabling it and removing it on check-in

• Added -MaxCheckoutTime parameter to New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy to enable setting a policy's maximum checkout time

• Added -MaxExtensionTime parameter to New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy to enable setting a policy's maximum extension time

• Added -RequireApprovalForExtensions parameter to New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy to enable setting a policy's extension approval behavior

• Added -Resolved parameter to Get-DSPamCheckoutPolicy to return the effective global-default value for any policy setting left at its default

• Added -Tag parameter to Get-RDMUser to allow filtering returned users by their tags

• Added -UserType, -HasUserVaultAccess, -Language, -OfflineMode, -AllowDragAndDrop, -PasswordManagerOfflineMode, -AllowApiKey, -DefaultVault, and -PassThru parameters to Edit-RDMUserTemplate, alongside the existing -AddVault/-RemoveVault

• Blocked deletion of the currently-selected vault by Remove-RDMVault, which now raises an error

• Changed Edit-RDMUserTemplate to raise a catchable error on workspaces that don't support user templates (e.g., Hub, local), instead of silently warning and doing nothing

• Deprecated the -Workspace parameter on Edit-RDMUserTemplate; the cmdlet now operates on the current workspace by default, and using -Workspace emits a warning

• Emits a warning and returns $null from Get-RDMCommand -Tool SSH instead of a file path, since SSH is no longer bundled

• Invoke-RDMEntryCheckOut and Invoke-RDMEntryCheckIn now issue a single batched request for all entries piped through in one call instead of one request per entry on Devolutions Server workspace

• IsJitAccount on New-DSPamAccount is deprecated in favor of -JitAccountMode CreateDelete; it still works, but now emits a deprecation warning

• Marked Get-RDMForbiddenPassword and Set-RDMForbiddenPassword as deprecated

• New-DSPamProvider and Update-DSPamProvider now accept a -LinkedCredential parameter to link an existing PAM account (from Get-DSPamAccount) as the provider's credential instead of a Username/Password pair; the cmdlet raises a catchable error if the supplied object is not a PAM account

• New-DSPamProvider now returns the created PamProvider object instead of returning nothing

• New-DSVault, Update-DSVault, and New-DSPamVault now emit a warning instead of failing when their -User, -UserGroup, or -Application parameters can't be applied because the workspace uses the role-assignment model; the vault operation itself still succeeds

• On Devolutions Server workspaces running 2026.3.0 or later, Add-/Remove-RDMUserVaultAccess and Add-/Remove-RDMUserGroupVaultAccess simply assign or unassign the Vault User role on that vault instead of writing to the legacy per-vault list, and warn, naming the role, if the target still has access through another role assignment after a revoke

• PSConnectionHistory now includes a HistoryTypeDescription property showing what kind of change it was (Update, Insert, Delete, Restore, or Move)

• RDM license cmdlets now work on Hub data sources

• RDM user cmdlets now work on Hub data sources

• RDM user group cmdlets now work on Hub data sources

• Remove-RDMDeletedEntry now raises a targeted error when a piped-in history record is not a deleted-entry record (i.e., not obtained from Get-RDMDeletedEntry), instead of processing it silently

• Set-DSVaultUser, Set-DSVaultUserGroup, Set-DSVaultApplication, and Get-DSVaultPermission now raise a clear error directing callers to the new role-assignment cmdlets when run against a workspace that has switched to the role-assignment model, instead of appearing to succeed while doing nothing

• Set-RDMEntry and Set-RDMEntryPassword now validate forbidden passwords

• Update-DSPamAccount can now switch an existing account's JIT mode between None and EnableDisable, which it previously couldn't change at all after creation. CreateDelete remains settable only at creation (New-DSPamAccount) and can't be changed once set

• Update-DSPamProvider now emits a warning when a -LinkedCredential switch will delete the provider's current self-rotation-managed account

Fixes

• Fixed a TypeLoadException when authenticating to Microsoft Graph (Connect-MgGraph) after importing Devolutions.PowerShell, caused by a conflict between bundled Azure/Graph/Identity assemblies

• Fixed Bitwarden synchronizers warning with "The Bitwarden synchronizer is not supported." on Open-RDMSyncEntry

• Fixed bug in Invoke-RDMEntryCheckOut where folders couldn't be checked out if one of their children was checked out

• Fixed New-DCEntry not persisting document attachment metadata when using -DocumentPath parameter

• Fixed Rename-RDMGroup allowing a folder to be renamed to a name that collides with an existing sibling or descendant group

• Fixed Set-RDMEntry and New-RDMFavoriteFolder's duplicate-folder-name check missing collisions with folders hidden from the user by permissions

• Fixed Set-RDMEntryCredentials reporting a user vault entry's previous credential mode instead of the mode just set (e.g. Inherited) when the entry was queried again in the same PowerShell session

Hi,

The setting hasn't moved to an encrypted file, it's still in RemoteDesktopManager.cfg as plain text. If you don't see it in the file, that's because it's currently at its default value, and default values aren't written out to the config file.

You can add it manually: open RemoteDesktopManager.cfg and add the following line just inside the opening <Option> tag:

<DisableSendingAnalytics>true</DisableSendingAnalytics>

On the cmdlet request: there isn't one today, but we're looking at adding PowerShell support to manage this setting going forward.

Best regards,

Maxime

Hello,

A ticket has been opened. Cmdlets to manage the SSH Algorithm Support settings will be added.

Best regards,

Maxime

Hello,

Sorry for the late reply. A ticket has been opened.

Best regards,

Maxime

Hello,

You're right, there's no PowerShell support for External Credential settings today. A ticket has been opened and we'll keep you updated on progress.

Best regards,

Maxime

Fixes

• Fixed a TypeLoadException when authenticating to Microsoft Graph (Connect-MgGraph) after importing Devolutions.PowerShell, caused by a conflict between bundled Azure/Graph/Identity assemblies

• Fixed New-DCEntry cmdlet not persisting document attachment metadata when using -DocumentPath parameter

Hello,

Thank you for your feedback.

I moved your thread to the PowerShell Universal Bug Report section.

Best regards,

Maxime

Hello,

Sorry for the delay.

Starting with version 2026.2.2 of the Devolutions.PowerShell module, you can access these values in two ways:

• Directly on the PSConnection object: under the Cmd property, the Parameter{n}DefaultValue fields will return the plaintext value if you have the Edit right on the entry — and, when the parameter's type is Secured, the ViewSensitiveInformation right as well.

• Via the new RDMEntryParameter cmdlets: a dedicated set of cmdlets (Get-, Add-, Set-, Remove-RDMEntryParameter) for managing an entry's parameters, so you don't need to know which slot a given parameter is stored in.

Let us know if you need anything else.

Best regards,

Maxime

New Features

• Added Protect-RDMEntry cmdlet to seal credential and document entries on Devolutions Server; replaces the previous pattern of setting SealState on the entry object

• Added Remove-DSGatewayFarm to remove gateway farms

Improvements

• Added deprecated warning to Start-RDMInstance

• Added -UseEntryPasswordPolicy and -PasswordPolicy parameters to Export-RDMPasswordAnalyzerReport to evaluate the compliance of passwords against a password policy

• Improved error message when providing a wrong vault ID across multiple cmdlets: Get-DSEntry, Get-DSFolders, Get-DSRootEntry, Get-DSPamFolder, and Get-DSEntriesPermissions

• Invoke-RDMParentEntry now supports -WhatIf and -Confirm

• Invoke-RDMUnparentEntry now supports -WhatIf and -Confirm

• Set-RDMEntry now raises a catchable error when the target entry is sealed, instead of silently downgrading the seal state

• Set-RDMEntryStatus now accepts Archived and Broken as valid -Status values, matching the statuses available in the Devolutions Remote Desktop Manager client

• Unprotect-RDMSealedEntry now raises a catchable error when the unseal operation fails on the server, instead of emitting a warning

Fixes

• Fixed a crash when wildcard entries (e.g., *.example.com) were present in the custom proxy bypass list

• Fixed an issue where the -Entry parameter in New-RDMRandomPassword was not using the correct inherited password policy when the entry's complexity was set to inherit from its parent folder

• Fixed cmdlet aliases (for example Get-RDMDataSource) not being recognized in a new session until the module was explicitly imported

• Fixed Get-RDMDiagnostic always returning false for IsLicenseValid and empty for LicenseType

• Fixed Get-RDMEntryDocument throwing parameter set error when using -CaseSensitive with -LiteralName

• Fixed New/Set/Remove-RDMEntryDocumentation not running security checks on the appropriate vault

• Fixed New-RDMEntryDocumentation throwing NullReferenceException on SQLite

• Fixed New-RDMRandomPassword throwing a NullReferenceException when the entry's password complexity policy resolves to the root in workspaces not supporting it

• Fixed Set-RDMEntry, Set-RDMEntryStatus, Set-RDMEntryOTP, Set-RDMEntryPrivateKey, Set-RDMEntryPrivateKeyCertificateData, and Set-RDMPlaylistShared incorrectly mutating the in-memory object when -WhatIf was

• Fixed Set-RDMEntryDocument not properly updating Phonebook entries

Breaking Changes

• Raised minimal powershell version to 7.6 to use the module

New Features

• Added a new Update-RDMOption cmdlet to reload module options when a concurrent RDM instance has modified them

Improvements

• Added -DefaultElevationGroupID to New-DSPamAccount to save default JIT elevation group identifiers (AD SIDs or Entra ID object IDs) on a PAM account at creation time

• Added -DefaultElevationGroupID to Update-DSPamAccount to replace or clear the saved default

• Added -Detailed switch to Get-DSPamAccount to retrieve full account data for all accounts in a single bulk call, equivalent to fetching each account individually with -AccountID

• Added -ElevationGroupID to Invoke-DSPamCheckout: omit to auto-apply the account's saved default, supply identifiers to override, or pass @() to skip JIT elevation entirely even when a default is configured

• Added -PageSize parameter to Get-DSPamAccount to control how many accounts are fetched per request when retrieving bulk results (default: 500)

• Deprecated the -HubPersonal parameter in New-RDMDataSource

• Export-RDMEntry now accepts entries as pipeline input

• Improved Get-RDMWorkspaceCustomVariable and Set-RDMWorkspaceCustomVariable cmdlets to correctly enumerate and consume pipeline objects

• Invoke-DSPamCheckout now accepts a -MfaCode parameter (string or SecureString via PSPassword) to satisfy MFA-on-checkout policies; the cmdlet automatically resolves the user's configured TOTP authenticator, and the code can be retrieved from a stored OTP entry using Get-DSEntryOTP

• New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy now support a -CheckoutMFAMode parameter to configure MFA enforcement on PAM checkout (Default, None, Mandatory, or MandatoryOnElevationOnly)

• Removed version management configuration prompt when upgrading a data source

• Renamed "connection" and "session" to "entry" across cmdlets, parameters, and documentation

• Renamed "data source" to "workspace" across cmdlets, parameters, and documentation

• Renamed "password template" to "password policy" across cmdlets, parameters, and documentation

• Renamed "repository" to "vault" across cmdlets, parameters, and documentation

• Renamed "role" to "user group" across cmdlets, parameters, and documentation

• Renamed "virtual gateway" to "ruleset" across cmdlets, parameters, and documentation

• Renamed -HubBusiness to -Cloud on New-RDMDatasource and *-RDMHubVaultAccess cmdlets to *-RDMCloudVaultAccess (old names kept as aliases)

• Update-RDMEntries no longer reloads options

Fixes

• Fixed a null-reference exception in New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy when the server returned an error response

• Fixed Export-RDMActivityLogsReport - -After/-Before parameters now honor time-of-day instead of being truncated to whole-day boundaries

• Fixed recently created users not being fetched by Add-RDMRoleToUser for its -UserName parameter

• Fixed Set-RDMEntry failing with "The entry is checked out" when saving a new entry with manual checkout mode

• Fixed Update-DSPamCheckoutPolicy throwing an argument exception when -Name was omitted while supplying other parameters

Improvements

• Added -AsBase64 parameter to New-DPSEncryptConfiguration to return the configuration as a Base64 string

• Added -OutputPath parameter to New-DPSEncryptConfiguration to enable creating a new encryption configuration at any specified file path

Fixes

• Fixed password list item custom fields and passwords not being resolved by Get-RDMEntry

New Features

• Added ConvertFrom-RDMWebsiteLegacyEntry to convert legacy website entries to the modern website entry type

• Added Get-DSActivityLog cmdlet to retrieve activity log entries from Devolutions Server with date range and user filtering

• Added Get-DSAdministrationLog cmdlet to retrieve administration log entries from Devolutions Server

• Added Get-DSPamLog cmdlet to retrieve PAM log entries from Devolutions Server, with support for filtering by message type

• Added Get-DSPamPasswordRotationLog cmdlet to retrieve PAM password rotation log entries from Devolutions Server

• Added Get-RDMVaultCustomVariable to retrieve a vault's custom variables

• Added New-RDMVaultCustomVariable to add a custom variable to a vault

• Added Remove-RDMVaultCustomVariable to remove custom variables from a vault

• Added Set-RDMVaultCustomVariable to modify a vault's custom variables

Improvements

• Added Scope and Before parameters to Remove-RDMDeletedEntry to enable mass-removing deleted entries before a given time

• Updated cmdlet help for Update-DSEntryBase and New-DSEntryBase to recommend -Depth 10 when piping entries through ConvertTo-Json, preventing a type conversion error on deep properties such as lifecycle policy actions

Fixes

• Fixed Devolutions.PowerShell.Extension already loaded preventing the import of Devolutions.PowerShell

• Fixed Invoke-RDMEntryCheckOut preventing checkouts for entries set to multiple/infinite checkouts

• Fixed Set-RDMEntryProperty with WhatIf still modifying property of entry

Hi Simon,

Sorry for the delay. The module version 2026.1.5 ships four new reporting cmdlets that address the use cases you described.

• Get-DSPamLog is the PowerShell equivalent of the PAM Recent Activities report. It covers checkouts, check-ins, password views, account imports, and policy changes. Filterable by event type, date range, credential, vault, or user. Note that PAM system events are excluded by default — pass -IncludePamSystem to include them.

• Get-DSPamPasswordRotationLog mirrors the Last Password Update report. It returns the last rotation record per account, including credential type, vault, folder, timestamp, and schedule. Accounts that have never been rotated are excluded unless you pass -IncludeNoPasswordUpdate.

• Get-DSActivityLog is the equivalent of Activity Logs. It covers connection events across all vaults — use -MessageType to narrow down to PAM-specific events.

• Get-DSAdministrationLog maps to Administration Logs. It captures server-level events, including PAM vault creation and configuration changes. There is currently no filter to isolate PAM events from other administrative events, so some post-processing on the results will be needed.

If anything is missing or needs improvement, let us know!

Best regards,

Maxime

Hello,

Get-DSApplicationIdentity has been added to retrieve the list of application identities directly in the version 2026.1.4 of the Devolutions.PowerShell module.

Please reach out if you have any questions or need anything else.

Best regards,

Maxime

Hello,

Both of these are now supported in the latest release (2026.1.4):

• New-DSPamAccount has a new -IsJitAccount parameter to mark an account as a JIT account on creation.

• Update-DSPamProvider has new -Account and -PrivilegeSetName parameters to assign a PAM account to the specified JIT privilege sets on the provider.

This means you can now fully automate the process of creating JIT accounts and assigning them to the appropriate privilege sets.

Please reach out if you have any questions or need anything else.

Best regards,

Maxime

Hello,

This is now possible in version 2026.1.4 with the new Publish-DSGatewayRevocationList cmdlet, which supports publishing revocation lists for one or all gateways.

Please reach out if you have any questions or need anything else!

Best regards,

Maxime

New Features

• Added Get-DSApplicationIdentity to retrieve the list of application identities

• Added Get-RDMApplicationIdentity to retrieve the list of application identities for the current data source

• Added Get-RDMHubVaultAccess to retrieve permission assignments for a Devolutions Hub vault

• Added New-RDMHubVaultAccess to create a PSVaultPermissionInfo permission assignment object linked to a user, user group, or application identity

• Added PSVaultPermissionInfo output object exposing individual permission flags (EditEntries, ManageAttachments, etc.)

• Added Publish-DSGatewayRevocationList to publish revocation lists for one or all gateways

• Added Remove-RDMHubVaultAccess to remove permission assignments from a Devolutions Hub vault

• Added Set-RDMHubVaultAccess cmdlet to replace the full set of permission assignments on a Devolutions Hub vault

Improvements

• Added -Account and -PrivilegeSetName parameters to Update-DSPamProvider to assign a PAM account to the specified JIT privilege sets on the provider

• Added -IsJitAccount parameter to New-DSPamAccount to mark a new account as a JIT account

• Improved Update-RDMUI reliability after RDM process restart

Fixes

• Fixed Add-RDMEntryAttachment -PassThru returning no results when used with a DVLS or Hub data source

• Fixed favorites not being added when using Add-RDMFavoriteEntry

Hi Sandro,

Thank you for the feedback! We have created an internal ticket to track the implementation of the Restore-DSDeletedRole cmdlet. We will keep you informed of the progress.

Best regards,

Maxime

Hello Ron,

You are welcome! Please reach out to us if you need anything else.

Best regards,

Maxime