- Raised minimal powershell version to 7.6 to use the module
- Added a new Update-RDMOption cmdlet to reload module options when a concurrent RDM instance has modified them
- Added -DefaultElevationGroupID to New-DSPamAccount to save default JIT elevation group identifiers (AD SIDs or Entra ID object IDs) on a PAM account at creation time
- Added -DefaultElevationGroupID to Update-DSPamAccount to replace or clear the saved default
- Added -Detailed switch to Get-DSPamAccount to retrieve full account data for all accounts in a single bulk call, equivalent to fetching each account individually with -AccountID
- Added -ElevationGroupID to Invoke-DSPamCheckout: omit to auto-apply the account's saved default, supply identifiers to override, or pass @() to skip JIT elevation entirely even when a default is configured
- Added -PageSize parameter to Get-DSPamAccount to control how many accounts are fetched per request when retrieving bulk results (default: 500)
- Deprecated the -HubPersonal parameter in New-RDMDataSource
- Export-RDMEntry now accepts entries as pipeline input
- Improved Get-RDMWorkspaceCustomVariable and Set-RDMWorkspaceCustomVariable cmdlets to correctly enumerate and consume pipeline objects
- Invoke-DSPamCheckout now accepts a -MfaCode parameter (string or SecureString via PSPassword) to satisfy MFA-on-checkout policies; the cmdlet automatically resolves the user's configured TOTP authenticator, and the code can be retrieved from a stored OTP entry using Get-DSEntryOTP
- New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy now support a -CheckoutMFAMode parameter to configure MFA enforcement on PAM checkout (Default, None, Mandatory, or MandatoryOnElevationOnly)
- Removed version management configuration prompt when upgrading a data source
- Renamed -HubBusiness to -Cloud on New-RDMDatasource and *-RDMHubVaultAccess cmdlets to *-RDMCloudVaultAccess (old names kept as aliases)
- Renamed "connection" and "session" to "entry" across cmdlets, parameters, and documentation
- Renamed "data source" to "workspace" across cmdlets, parameters, and documentation
- Renamed "password template" to "password policy" across cmdlets, parameters, and documentation
- Renamed "repository" to "vault" across cmdlets, parameters, and documentation
- Renamed "role" to "user group" across cmdlets, parameters, and documentation
- Renamed "virtual gateway" to "ruleset" across cmdlets, parameters, and documentation
- Update-RDMEntries no longer reloads options
- Fixed a null-reference exception in New-DSPamCheckoutPolicy and Update-DSPamCheckoutPolicy when the server returned an error response
- Fixed Export-RDMActivityLogsReport - -After/-Before parameters now honor time-of-day instead of being truncated to whole-day boundaries
- Fixed recently created users not being fetched by Add-RDMRoleToUser for its -UserName parameter
- Fixed Set-RDMEntry failing with "The entry is checked out" when saving a new entry with manual checkout mode
- Fixed Update-DSPamCheckoutPolicy throwing an argument exception when -Name was omitted while supplying other parameters