bryan_ricciardo

Hi Simon,

Thank you very much for laying out how to do this with the current PowerShell modules. I will be testing this out in the near future. I do not see any REST documentation for the PAM modules I have checked in DVLS under the API documentation as well.

I will follow up with support should I run into further troubles getting this functioning properly.

Thanks again for your continued support.

Regards,

Bryan

We would like full PowerShell/API/Ansible support for automating Devolutions PAM Linux SSH onboarding.

Use case:

We manage a large Linux/Unix fleet and need to onboard many Linux SSH PAM providers and managed credentials programmatically. Today this appears to require manual UI steps or incomplete/undocumented automation.

Requested capabilities:

1. Create a standalone PAM credential programmatically.

- Username

- Password or generated secret

- Vault/folder placement

- Checkout policy / permissions where applicable

2. Create a Linux SSH PAM Provider programmatically.

- Provider name

- Host/FQDN/IP

- Port

- Timeout

- Credential mode

- Heartbeat verification mode

- Credential type linked credential

- Link the provider to an existing standalone PAM credential

3. Create Linux SSH managed credentials/accounts programmatically using that provider.

- Account username

- Provider association

- Vault/folder placement

- Checkout policy

- Password rotation policy

- Heartbeat settings

Business reason:

This is needed for enterprise-scale PAM onboarding, CI/CD-style provisioning, ansible automated PAM deployment for new systems, repeatable Dev/Test/Prod environments, and compliance-driven infrastructure-as-code workflows.

Without this, Linux SSH PAM onboarding is difficult to standardize and audit at scale.

I want to add I think this is an important request, it would be required for root passwords along with local service or application accounts. In our case these accounts are audited by internal and external auditors and are required to be restricted from remote login.