public/Update-VPASPSMSettingsByPlatformID.ps1
|
<#
.Synopsis UPDATE PSM SETTINGS BY PLATFORMID CREATED BY: Vadim Melamed, EMAIL: vmelamed5@gmail.com .DESCRIPTION USE THIS FUNCTION TO UPDATE PSM SETTINGS LIKE CONNECTION COMPONENTS AND PSMSERVERID FOR A SPECIFIC PLATFORM .PARAMETER token HashTable of data containing various pieces of login information (PVWA, LoginToken, HeaderType, etc). If -token is not passed, function will use last known hashtable generated by New-VPASToken .PARAMETER PlatformID Unique PlatformID that will be updated .PARAMETER ConnectionComponentID Unique ConnectionComponentID that will be added or removed .PARAMETER Action Which action will be taken on the updated fields Possible values: ADD, REMOVE .PARAMETER PSMServerID Unique target PSMServerID that will be added or removed .EXAMPLE $UpdatePSMSettingsStatus = Update-VPASPSMSettingsByPlatformID -PlatformID {PLATFORMID VALUE} -ConnectionComponentID {CONNECTION COMPONENT ID VALUE} .EXAMPLE $UpdatePSMSettingsStatus = Update-VPASPSMSettingsByPlatformID -PlatformID {PLATFORMID VALUE} -PSMServerID {PSM SERVER ID VALUE} .OUTPUTS $true if successful --- $false if failed #> function Update-VPASPSMSettingsByPlatformID{ [OutputType([bool])] [CmdletBinding()] Param( [Parameter(Mandatory=$true,ValueFromPipelineByPropertyName=$true,HelpMessage="Enter target platformID to update (for example: WinServerLocal)",Position=0)] [String]$PlatformID, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=1)] [String]$ConnectionComponentID, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=2)] [ValidateSet('ADD','REMOVE')] [String]$Action, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=3)] [String]$PSMServerID, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=4)] [hashtable]$token ) Begin{ $tokenval,$sessionval,$PVWA,$Header,$ISPSS,$IdentityURL,$EnableTextRecorder,$AuditTimeStamp,$NoSSL,$VaultVersion,$HideWarnings,$AuthenticatedAs,$SubDomain = Get-VPASSession -token $token $CommandName = $MyInvocation.MyCommand.Name $log = Write-VPASTextRecorder -inputval $CommandName -token $token -LogType COMMAND } Process{ Write-Verbose "SUCCESSFULLY PARSED PVWA VALUE" Write-Verbose "SUCCESSFULLY PARSED TOKEN VALUE" Write-Verbose "SUCCESSFULLY PARSED PLATFORMID VALUE: $PlatformID" Write-Verbose "SUCCESSFULLY PARSED SSL VALUE" try{ Write-Verbose "INVOKING PLATFORMID HELPER FUNCTION" $platID = Get-VPASPlatformIDHelper -token $token -platformID $PlatformID if($platID -eq -1){ $log = Write-VPASTextRecorder -inputval "COULD NOT FIND TARGET PLATFORMID: $PlatformID" -token $token -LogType MISC $log = Write-VPASTextRecorder -inputval "REST API COMMAND RETURNED: FALSE" -token $token -LogType MISC Write-Verbose "COULD NOT FIND TARGET PLATFORMID: $PlatformID" Write-VPASOutput -str "COULD NOT FIND TARGET PLATFORMID: $PlatformID" -type E return $false } else{ Write-Verbose "GETTING CURRENT PLATFORM PSM SETTINGS" $curvals = Get-VPASPSMSettingsByPlatformID -token $token -PlatformID $PlatformID $curPSMServerID = $curvals.PSMServerId $curPSMConnectors = @() $res = $curvals.PSMConnectors foreach($rec in $res){ $minirec = @{ PSMConnectorID = $rec.PSMConnectorID Enabled = $rec.Enabled } $curPSMConnectors += $minirec } if(![String]::IsNullOrEmpty($ConnectionComponentID) -and [String]::IsNullOrEmpty($Action)){ Write-VPASOutput -str "$ConnectionComponentID PASSED WITH NO ACTION, ADD OR REMOVE $ConnectionComponentID : " -type Y $Action = Read-Host } $params = @{} Write-Verbose "INITIALIZING API PARAMS" if([String]::IsNullOrEmpty($ConnectionComponentID)){ $params += @{ PSMConnectors = $curPSMConnectors } } else{ Write-Verbose "HANDLING $ConnectionComponentID AND ACTION INTO API PARAMS" $arrNew = @() $foundConnector = $false foreach($providedRec in $curPSMConnectors){ $Enabled = $providedRec.Enabled $PSMConnector = $providedRec.PSMConnectorID if($PSMConnector -eq $ConnectionComponentID){ $foundConnector = $true if($Action -eq "ADD"){ $log = Write-VPASTextRecorder -inputval "CONNECTION COMPONENT ALREADY EXISTS IN $PlatformID" -token $token -LogType MISC $log = Write-VPASTextRecorder -inputval "REST API COMMAND RETURNED: FALSE" -token $token -LogType MISC Write-VPASOutput -str "CONNECTION COMPONENT ALREADY EXISTS ON $PlatformID" -type E Write-Verbose "CONNECTION COMPONENT ALREADY EXISTS IN $PlatformID" Write-Verbose "RETURNING FALSE" return $false } elseif($Action -eq "REMOVE"){ Write-Verbose "$ConnectionComponentID WILL BE IGNORED FROM API PARAMETERS" } } else{ $arrADD = @{ PSMConnectorID = $PSMConnector Enabled = $Enabled } $arrNew += $arrADD } } if(!$foundConnector -and $Action -eq "ADD"){ $arrADD = @{ PSMConnectorID = $ConnectionComponentID Enabled = $true } $arrNew += $arrADD } $params += @{ PSMConnectors = $arrNew } } if([String]::IsNullOrEmpty($PSMServerID)){ $params += @{ PSMServerId = $curPSMServerID } } else{ Write-Verbose "ADDING $PSMServerID TO API PARAMS" $params += @{ PSMServerId = $PSMServerID } } $log = Write-VPASTextRecorder -inputval $params -token $token -LogType PARAMS $params = $params | ConvertTo-Json Write-Verbose "MAKING API CALL TO CYBERARK" if($NoSSL){ Write-Verbose "NO SSL ENABLED, USING HTTP INSTEAD OF HTTPS" $uri = "http://$PVWA/passwordvault/api/Platforms/Targets/$platID/PrivilegedSessionManagement/" } else{ Write-Verbose "SSL ENABLED BY DEFAULT, USING HTTPS" $uri = "https://$PVWA/passwordvault/api/Platforms/Targets/$platID/PrivilegedSessionManagement/" } $log = Write-VPASTextRecorder -inputval $uri -token $token -LogType URI $log = Write-VPASTextRecorder -inputval "PUT" -token $token -LogType METHOD if($sessionval){ $response = Invoke-RestMethod -Headers @{"Authorization"=$Header} -Uri $uri -Method PUT -Body $params -ContentType "application/json" -WebSession $sessionval } else{ $response = Invoke-RestMethod -Headers @{"Authorization"=$Header} -Uri $uri -Method PUT -Body $params -ContentType "application/json" } $log = Write-VPASTextRecorder -inputval "REST API COMMAND RETURNED: TRUE" -token $token -LogType MISC Write-Verbose "SUCCESSFULLY UPDATED PSM SETTINGS FOR PLATFORM: $PlatformID" Write-Verbose "RETURNING TRUE" return $true } }catch{ $log = Write-VPASTextRecorder -inputval $_ -token $token -LogType ERROR $log = Write-VPASTextRecorder -inputval "REST API COMMAND RETURNED: FALSE" -token $token -LogType MISC Write-Verbose "UNABLE TO UPDATE PSM SETTINGS FOR PLATFORM: $PlatformID" Write-VPASOutput -str $_ -type E return $false } } End{ $log = Write-VPASTextRecorder -inputval $CommandName -token $token -LogType DIVIDER } } |