Comments (4)
Updated to PSFalcon 2.2.6 - Now no error messages anymore. But IDs of custom roles will not be displayed.
Command with no custom roles:
Get-FalconRole -Cid xxxxx | Get-FalconRole
Command with error Detailed is not a valid parameter:
Get-FalconRole -Cid xxxxxxx -Id yyyyyyy -Detailed
PS: I love this PowerShell PSFalcon module, the wiki and the easy way of administration. Thank you for your awesome module, making everyday easier!
from psfalcon.
In my testing, the following command does return the role information for custom roles (i.e. those with an identifier value rather than plain text role label):
Get-FalconRole -Cid xxx | Get-FalconRole
The problem is that custom roles return a cid
value while the standard roles do not. Because of how PowerShell works, that means that you don't see the custom role in the final output. You can use Format-List
to see that it is there:
Get-FalconRole -Cid xxx | Get-FalconRole | Format-List
Or, you can use Select-Object
to force it to show in the table (with cid
being empty for all the other roles):
Get-FalconRole -Cid xxx | Get-FalconRole | Select-Object id,display_name,description,is_global,cid
I can't force it to end up in the final output automatically without adding some additional features to PSFalcon (which I do have on my bucket list for the future, but not anytime soon).
from psfalcon.
Thank you for your code-snippets.
It's working like you described.
Maybe you can help me with a problem I try to solve.
I want in the end to create some kind of excel pivot table.
Rows = Settings enabled / disabled within a Role.
Columns = RoleName
Why this?
CustomRoles will have the name of an EntraAD Security Group.
Automation will add analysts to the corresponding Roles.
Role permissions can be negotiated between different teams and then assigned.
Questions:
How can I get a csv export of all enabled security settings for custom groups per CID?
Thank you for your super fast response! 🥇
from psfalcon.
How can I get a csv export of all enabled security settings for custom groups per CID?
There isn't an API available that will output the permissions for a given role. :(
from psfalcon.
Related Issues (20)
- `SendASync` error with `Invoke-FalconDeploy` HOT 5
- [ BUG ] Get-FalconAsset code 400 error offset 10000 and limit 100 HOT 1
- [ BUG ] `Import-FalconConfig` ignores `FirewallGroup` HOT 1
- [ BUG ] `New-FalconReconRule` generating `Invalid Request` error with single rule HOT 4
- [ BUG ] `Receive` commands generate `index out of range` errors even when successful HOT 6
- [ BUG ] `Add-SensorTag` and `Remove-SensorTag` dont append/remove tags even through reboot HOT 4
- [ BUG ] `Write-Result not recognized` when using `Request-FalconToken` HOT 6
- [ ENHANCEMENT ] Add command to overwrite SensorTags instead of appending HOT 4
- [ BUG ] `Get-FalconHost` error on hostname HOT 5
- [ BUG ] `Id` does not match pattern when using `Get-FalconAsset` HOT 2
- [ DOCUMENTATION ] `tags` should be included in the list of available filters for `Get-FalconHost` HOT 1
- [ BUG ] `Import-FalconConfig` improperly assigns non-existent `rule_group_ids` when creating `FilewallPolicy` HOT 1
- {"code":400,"message":"offset 10000 and limit 100 are invalid; offset + limit must be less than or equal to 10000"} HOT 3
- [ QUESTION ] Client Secret as Secure String HOT 1
- [ BUG ] `Get-FalconAlert -All -Detailed` returns `413 - Request Too Large` HOT 2
- [ ENHANCEMENT ] Add ParameterSet to `Invoke-FalconAlertAction` and `Invoke-FalconIncidentAction` to allow for multiple actions in one API query HOT 4
- [ BUG ] `Index was out of range` error related to RTR sessions HOT 2
- [ BUG ] `New-FalconIoaRule` generates `400` error when following wiki example HOT 1
- [ BUG ] MacOS `SensorTag` commands do not handle uninstallation tokens
- [ ENHANCEMENT ] Force lowercase for `Cid` parameter when using `Add-FalconRole` HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from psfalcon.