Update-VPASSafeMember


Supported Environments:
SelfHosted
SharedServices
PCloudStandard


Synopsis:

UPDATE SAFE MEMBER


Description:

USE THIS FUNCTION TO UPDATE A SAFE MEMBER OF A SAFE IN CYBERARK


Syntax:

Update-VPASSafeMember [-member] <String> [-safe] <String> [[-AllPerms]] [[-AllAccess]] [[-AllAccountManagement]] [[-AllMonitor]] [[-AllSafeManagement]] [[-AllWorkflow]] [[-AllAdvanced]] [[-UseAccounts]] [[-RetrieveAccounts]] [[-ListAccounts]] [[-AddAccounts]] [[-UpdateAccountContent]] [[-UpdateAccountProperties]] [[-InitiateCPMAccountManagementOperations]] [[-SpecifyNextAccountContent]] [[-RenameAccounts]] [[-DeleteAccounts]] [[-UnlockAccounts]] [[-ManageSafe]] [[-ManageSafeMembers]] [[-BackupSafe]] [[-ViewAuditLog]] [[-ViewSafeMembers]] [[-AccessWithoutConfirmation]] [[-CreateFolders]] [[-DeleteFolders]] [[-MoveAccountsAndFolders]] [[-RequestsAuthorizationLevel1]] [[-RequestsAuthorizationLevel2]] [[-SafePermissionHashTable] <Hashtable>] [[-token] <Hashtable>] [<CommonParameters>]


Parameters:

-member <String>
Target unique safe member name

Required: true
Position: 1
Default value:
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-safe <String>
Target unique safe name

Required: true
Position: 2
Default value:
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllPerms [<SwitchParameter>]
Enables all safe permissions

Required: false
Position: 3
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllAccess [<SwitchParameter>]
Enables all Access safe permissions (UseAccounts, RetrieveAccounts, ListAccounts)

Required: false
Position: 4
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllAccountManagement [<SwitchParameter>]
Enables all AccountManagement safe permissions (AddAccounts, UpdateAccountContent, UpdateAccountProperties, InitiateCPMAccountManagementOperations, SpecifyNextAccountContent, RenameAccounts, DeleteAccounts, UnlockAccounts)

Required: false
Position: 5
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllMonitor [<SwitchParameter>]
Enables all Monitor safe permissions (ViewAuditLog, ViewSafeMembers)

Required: false
Position: 6
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllSafeManagement [<SwitchParameter>]
Enables all SafeManagement safe permissions (ManageSafe, ManageSafeMembers, BackupSafe)

Required: false
Position: 7
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllWorkflow [<SwitchParameter>]
Enables all Workflow safe permissions (RequestsAuthorizationLevel(1), AccessWithoutConfirmation)

Required: false
Position: 8
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AllAdvanced [<SwitchParameter>]
Enables all Advanced safe permissions (CreateFolders, DeleteFolders, MoveAccountsAndFolders)

Required: false
Position: 9
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-UseAccounts [<SwitchParameter>]
Gives the ability use accounts in a safe (click the connect button)

Required: false
Position: 10
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-RetrieveAccounts [<SwitchParameter>]
Gives the ability to pull accounts credentials in a safe (click the Show/Copy buttons)

Required: false
Position: 11
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-ListAccounts [<SwitchParameter>]
Gives the ability to view accounts in a safe

Required: false
Position: 12
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AddAccounts [<SwitchParameter>]
Gives the ability to add accounts in a safe

Required: false
Position: 13
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-UpdateAccountContent [<SwitchParameter>]
Gives the ability to manually update accounts secrets in a safe

Required: false
Position: 14
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-UpdateAccountProperties [<SwitchParameter>]
Gives the ability to update account properties in a safe (username field, address field, etc)

Required: false
Position: 15
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-InitiateCPMAccountManagementOperations [<SwitchParameter>]
Gives the ability to trigger the CPM to run a change, verify, or reconcile on accounts in a safe

Required: false
Position: 16
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-SpecifyNextAccountContent [<SwitchParameter>]
Gives the ability to specify what the next password the CPM will push to accounts in a safe

Required: false
Position: 17
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-RenameAccounts [<SwitchParameter>]
Gives the ability to modify the ObjectName of accounts in a safe

Required: false
Position: 18
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-DeleteAccounts [<SwitchParameter>]
Gives the ability to delete accounts from a safe

Required: false
Position: 19
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-UnlockAccounts [<SwitchParameter>]
Gives the ability to unlock or check-in locked account on someone else's behalf in a safe

Required: false
Position: 20
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-ManageSafe [<SwitchParameter>]
Gives the ability to modify safe details (DaysRetention, VersionRetention, Description, etc)

Required: false
Position: 21
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-ManageSafeMembers [<SwitchParameter>]
Gives the ability to add, remove, modify safe members on a safe

Required: false
Position: 22
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-BackupSafe [<SwitchParameter>]
Gives the ability to backup a safe

Required: false
Position: 23
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-ViewAuditLog [<SwitchParameter>]
Gives the ability to view the activities performed on accounts in a safe

Required: false
Position: 24
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-ViewSafeMembers [<SwitchParameter>]
Gives the ability to view safe members on a safe

Required: false
Position: 25
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-AccessWithoutConfirmation [<SwitchParameter>]
Gives the ability to access the safe without needing confirmation from an approver

Required: false
Position: 26
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-CreateFolders [<SwitchParameter>]
Gives the ability to create folders in a safe

Required: false
Position: 27
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-DeleteFolders [<SwitchParameter>]
Gives the ability to delete folders from a safe

Required: false
Position: 28
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-MoveAccountsAndFolders [<SwitchParameter>]
Gives the ability to move accounts and folders from one safe to another

Required: false
Position: 29
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-RequestsAuthorizationLevel1 [<SwitchParameter>]
Gives the ability to approve or deny users from using an account (Level1) in a safe

Required: false
Position: 30
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-RequestsAuthorizationLevel2 [<SwitchParameter>]
Gives the ability to approve or deny users from using an account (Level2) in a safe

Required: false
Position: 31
Default value: False
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-SafePermissionHashTable <Hashtable>
Hashtable that contains the set of safe permissions to be applied to a specific safe member.
Hashtable has priority over the safe permission flags that are passed

Required: false
Position: 32
Default value:
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

-token <Hashtable>
HashTable of data containing various pieces of login information (PVWA, LoginToken, HeaderType, etc).
If -token is not passed, function will use last known hashtable generated by New-VPASToken

Required: false
Position: 33
Default value:
Accept pipeline input: true (ByPropertyName)
Accept wildcard characters: false

<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug
ErrorAction, ErrorVariable, WarningAction, WarningVariable
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216)


Examples:

$UpdateSafeMemberJSON = Update-VPASSafeMember -member {MEMBER VALUE} -safe {SAFE VALUE} -AllPerms

$UpdateSafeMemberJSON = Update-VPASSafeMember -member {MEMBER VALUE} -safe {SAFE VALUE} -AllAccess -AllMonitor

$UpdateSafeMemberJSON = Update-VPASSafeMember -member {MEMBER VALUE} -safe {SAFE VALUE} -UseAccounts -RetrieveAccounts -AllMonitor


Outputs:

If successful:
{
         "safeUrlId": "NewSafeVpas",
         "safeName": "NewSafeVpas",
         "safeNumber": 133,
         "memberId": "1dfc3edf-4564-4abf-9bc1-1234",
         "memberName": "vadim@vman.pam",
         "memberType": "User",
         "membershipExpirationDate": null,
         "isExpiredMembershipEnable": false,
         "isPredefinedUser": false,
         "isReadOnly": false,
         "permissions": {
                 "useAccounts": true,
                 "retrieveAccounts": true,
                 "listAccounts": true,
                 "addAccounts": true,
                 "updateAccountContent": true,
                 "updateAccountProperties": true,
                 "initiateCPMAccountManagementOperations": true,
                 "specifyNextAccountContent": true,
                 "renameAccounts": true,
                 "deleteAccounts": true,
                 "unlockAccounts": true,
                 "manageSafe": true,
                 "manageSafeMembers": true,
                 "backupSafe": true,
                 "viewAuditLog": true,
                 "viewSafeMembers": true,
                 "accessWithoutConfirmation": true,
                 "createFolders": true,
                 "deleteFolders": true,
                 "moveAccountsAndFolders": true,
                 "requestsAuthorizationLevel1": true,
                 "requestsAuthorizationLevel2": false
         }
}

$false if failed