search

infamousjoeg / cybr-cli

A "Swiss Army Knife" command-line interface (CLI) for easy human and non-human interaction with @CyberArk suite of products.
Apache License 2.0
72 stars 16 forks source link

Specify password for next CRM change #207

Closed Mordanthanus closed 1 year ago

Mordanthanus commented 1 year ago

Is your feature request related to a problem? Please describe. Currently, we manually use Accounts View (Classic UI) / Account Details / Change button / Specify the password for the next CRM change to set passwords on devices in one of our managed environments to the ones known by a vendor whenever we are preparing for upgrades/updates. Once the update is done, we have Cyberark set randomized passwords to those devices as normal.

Describe the solution you'd like Add a switch to cybr accounts change (https://github.com/infamousjoeg/cybr-cli/blob/main/docs/cybr_accounts_change.md) to specify the password for CRM to use when changing the account... to correspond with the option in the web UI.

Describe alternatives you've considered I have looked at several PowerShell modules (in active development) that work with Cyberark and have not found this option available.

infamousjoeg commented 1 year ago

As per @Mordanthanus feature request, the command cybr accounts change should support the following credential change methods using flags:

  1. Change Password Immediately (Current behavior)
  2. Change Password in the Vault Only
  3. Change Password, Set Next Password (Specifically requested in this issue)
infamousjoeg commented 1 year ago

Also, for clarification purposes, CRM as referenced by OP is meant to be CPM (Central Policy Manager).

infamousjoeg commented 1 year ago

As per @Mordanthanus feature request, the command cybr accounts change should support the following credential change methods using flags:

1. Change Password Immediately _(Current behavior)_

2. Change Password in the Vault Only

3. Change Password, Set Next Password _(Specifically requested in this issue)_

Item 2 is not supported in Privilege Cloud and has been left out of final command.