psPAS VS cybr-cli

Or use pspete for simpler scripting; https://pspas.pspete.dev/

For PowerShell take a look at https://github.com/cyberark/epv-api-scripts and https://github.com/pspete/psPAS

Hi Op, I would use this tool https://github.com/pspete/psPAS it's a module for powershell that will allow you to do what you want. I use the raw API a lot so any questions let me know.

I don't know the module or anything to use it on, however it does have a GitHub page so you might raise an issue there.

Our CyberArk team said they just enabled Windows user authentication for my CyberArk app. I would like to authenticate using this method with the psPAS PowerShell module. I'm guessing I need to do this with New-PASSession. The below example is my best attempt at doing this. I think I'm pretty close... however, I think I'm still missing something.

This is a community developed project and u/pspete is great at tackling Issues that are submitted on the project at https://github.com/pspete/psPAS. I’d recommend submitting an Issue there and provide as much info as possible and he can try to replicate your issue.

Also see https://github.com/pspete/psPAS/issues/14 for a related discussion/issue.

Release notes direct URL: https://github.com/infamousjoeg/cybr-cli/releases/tag/v0.1.11-beta

Alternatively, you can use the cybr-cli command cybr conjur info: https://github.com/infamousjoeg/cybr-cli/blob/main/docs/cybr_conjur_info.md

If you can’t use PowerShell and need to use a different shell language, cybr-cli can help: https://github.com/infamousjoeg/cybr-cli/blob/main/docs/cybr_users_add.md

You can use the cybr-cli: https://github.com/infamousjoeg/cybr-cli

You can’t generate a struct for policy for the exact reason you mentioned. It is best to consume it as a YAML file instead of trying to integrate it into the source code of the app. Check out my Go-based cybr-cli project, maybe it’ll help: https://github.com/infamousjoeg/cybr-cli

Another new feature is the ability to "Add Safe Members" using role-based permissions created from CyberArk best practices. You can view the documentation and permission mapping for more info.

I have just released cybr-cli v1.0.10-beta with support for user/group filtering on cybr safes list. Check out the documentation here: https://github.com/infamousjoeg/cybr-cli/blob/main/docs/cybr_safes_list.md.