search

pspete / psPAS

PowerShell module for CyberArk Privileged Access Security REST API
https://pspas.pspete.dev
MIT License
291 stars 91 forks source link

Invoke-PASCPMOperation password change says account is deleted. but is not #348

Closed renzinpoo closed 3 years ago

renzinpoo commented 3 years ago

Describe the issue I am trying to do a manual password change via the command :

Invoke-PASCPMOperation -AccountID $id -ChangeTask -NewCredentials $securestring

it responds with an error. saying account is deleted

image

I did verify that account exists.

image

To Reproduce Steps to reproduce the behavior:

Expected behavior I expect there to be no error as account is not deleted

Screenshots & Console Output If applicable, add screenshots to help explain your problem.

Console Output Code Block:

Your Environment Include relevant details about your environment

Additional context Add any other context about the problem here.

pspete commented 3 years ago

The second screenshot does not prove that the account is not deleted; it is possible to query deleted accounts by id. Try the search again by specifying values for the -safeName & -search parameters - do the details of the account get returned? Can the issue be reproduced on any other account or just this one?

renzinpoo commented 3 years ago

it shows using those commands still. im only seeing this error for this account though

image

pspete commented 3 years ago

The id is not the same.... or the safe

pspete commented 3 years ago

The message being returned from the api is not changed in the modules code, it is returned as is. It appears the account with the id raising the informational message has in fact been deleted. Closing as nothing to fix. If you believe this to be incorrect, please comment and provide further details.