public/Remove-VPASIdentityRole.ps1
|
<#
.Synopsis DELETE ROLE IN IDENTITY CREATED BY: Vadim Melamed, EMAIL: vmelamed5@gmail.com .DESCRIPTION USE THIS FUNCTION TO DELETE AN EXISTING ROLE IN IDENTITY .PARAMETER NoSSL If the environment is not set up for SSL, API calls will be made via HTTP not HTTPS (Not Recommended!) .PARAMETER token HashTable of data containing various pieces of login information (PVWA, LoginToken, HeaderType, etc). If -token is not passed, function will use last known hashtable generated by New-VPASToken .PARAMETER RoleName Unique RoleName in Identity to query for target RoleID .PARAMETER RoleID Target RoleID that maps the target Role in Identity Supply the RoleID to skip querying for the target Role .EXAMPLE $DeleteIdentityRole = Remove-VPASIdentityRole -Name {NAME VALUE} .EXAMPLE $DeleteIdentityRole = Remove-VPASIdentityRole -RoleID {ROLEID VALUE} .OUTPUTS $true if successful $false if failed #> function Remove-VPASIdentityRole{ [OutputType([bool])] [CmdletBinding()] Param( [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=0)] [String]$RoleName, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=1)] [String]$RoleID, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=2)] [hashtable]$token, [Parameter(Mandatory=$false,ValueFromPipelineByPropertyName=$true,Position=3)] [Switch]$NoSSL ) Begin{ $tokenval,$sessionval,$PVWA,$Header,$ISPSS,$IdentityURL = Get-VPASSession -token $token } Process{ Write-Verbose "SUCCESSFULLY PARSED PVWA VALUE" Write-Verbose "SUCCESSFULLY PARSED TOKEN VALUE" try{ if(!$IdentityURL){ Write-VPASOutput -str "LOGIN TOKEN WAS NOT GENERATED THROUGH IDENTITY, TERMINATING API CALL" -type E return $false } if([String]::IsNullOrEmpty($RoleID)){ Write-Verbose "NO ROLE ID PASSED" Write-Verbose "INVOKING HELPER FUNCTION TO RETRIEVE ROLE ID" if($NoSSL){ $RoleID = Get-VPASRoleIDIdentityHelper -token $token -RoleName $RoleName -NoSSL } else{ $RoleID = Get-VPASRoleIDIdentityHelper -token $token -RoleName $RoleName } if($RoleID -eq -1){ Write-VPASOutput -str "MULTIPLE ROLE ENTRIES WERE RETURNED, ADD MORE TO NAME TO NARROW RESULTS" -type E Write-VPASOutput -str "RETURNING FALSE" -type E return $false } elseif($RoleID -eq -2){ Write-VPASOutput -str "NO ROLE ENTRIES WERE RETURNED" -type E Write-VPASOutput -str "RETURNING FALSE" -type E return $false } else{ Write-Verbose "FOUND UNIQUE ROLE ID" } } else{ Write-Verbose "ROLE ID PASSED, SKIPPING HELPER FUNCTION" } Write-Verbose "CONSTRUCTING PARAMS" $params = @{ Name = $RoleID } | ConvertTo-Json Write-Verbose "ADDING ROLE ID: $RoleID TO PARAMS" if($NoSSL){ Write-Verbose "NO SSL ENABLED, USING HTTP INSTEAD OF HTTPS" $uri = "http://$IdentityURL/SaasManage/DeleteRole/" } else{ Write-Verbose "SSL ENABLED BY DEFAULT, USING HTTPS" $uri = "https://$IdentityURL/SaasManage/DeleteRole/" } if($sessionval){ $response = Invoke-RestMethod -Headers @{"Authorization"=$Header} -Uri $uri -Method POST -Body $params -ContentType "application/json" -WebSession $sessionval } else{ $response = Invoke-RestMethod -Headers @{"Authorization"=$Header} -Uri $uri -Method POST -Body $params -ContentType "application/json" } Write-Verbose "PARSING DATA FROM CYBERARK" Write-Verbose "RETURNING TRUE" return $true }catch{ Write-Verbose "FAILED TO DELETE ROLE FROM IDENTITY" Write-VPASOutput -str $_ -type E return $false } } End{ } } |