search

pspete / psPAS

PowerShell module for CyberArk Privileged Access Security REST API
https://pspas.pspete.dev
MIT License
291 stars 91 forks source link

Search Deleted Items/Restore Object #332

Closed dokki767 closed 3 years ago

dokki767 commented 3 years ago

This is more of a question so sorry if not psPAS 'issue', is there a switch or special cmdlet to search 'deleted items' via the API and also restore them? Native search functions seem to not 'see' those deleted items.

NathanielMaier commented 3 years ago

This seems like a better question for CyberArk - I'd suggest you open a support case with them to ask if the REST API supports any actions for deleted account objects. My assumption is no, it does not, in which case you could submit an Enhancement Request with CyberArk. Only after that functionality exists within the REST API could psPAS then implement it with PowerShell.

As a (albeit painful) workaround, you should be able to use the PACLI UNDELETEFILE command (even via PoShPACLI Restore-PVFile).

dokki767 commented 3 years ago

That's kind of what I was thinking too. I do have an active support case open, I can update this issue with their response for documenting the current approach in case other users have similar questions.

pspete commented 3 years ago

There is no documented method for the feature described - your usual support channels or an ER with the vendor is the way to go.