HPECOMCmdlets

Author(s)

• Lionel Jullien (HPE)

Tags

Compute-Ops-Management COM GLP Hewlett-Packard-Enterprise HPE GreenLake HPEGreenLake

Functions

Add-HPECOMApplianceToGroup Add-HPECOMApprovalPolicyToGroup Add-HPECOMServerToGroup Add-HPEGLDeviceCompute Add-HPEGLDeviceNetwork Add-HPEGLDeviceStorage Add-HPEGLDeviceTagToDevice Add-HPEGLDeviceToService Add-HPEGLRoleToUser Add-HPEGLRoleToUserGroup Add-HPEGLSubscriptionToDevice Add-HPEGLUserToUserGroup Add-HPEGLWebhookSubscription Confirm-HPEGLLocation Confirm-HPEGLWebhookEndpoint Connect-HPECOMSecureGatewayDiscoveredServer Connect-HPEGL Connect-HPEGLDeviceComputeiLOtoCOM Connect-HPEGLWorkspace Connect-HPEOnepass Copy-HPECOMGroupApplianceServerProfileTemplate Copy-HPEGLScopeGroup Disable-HPECOMDataCollection Disable-HPECOMEmailNotificationPolicy Disable-HPECOMIloIgnoreRiskSetting Disable-HPECOMMetricsConfiguration Disable-HPECOMServerAutoiLOFirmwareUpdate Disable-HPECOMServerMaintenanceMode Disable-HPEGLDevice Disconnect-HPEGL Enable-HPECOMDataCollection Enable-HPECOMEmailNotificationPolicy Enable-HPECOMIloIgnoreRiskSetting Enable-HPECOMMetricsConfiguration Enable-HPECOMServerAutoiLOFirmwareUpdate Enable-HPECOMServerMaintenanceMode Enable-HPEGLDevice Get-HPECOMActivity Get-HPECOMAlert Get-HPECOMAppliance Get-HPECOMApplianceFirmwareBundle Get-HPECOMApprovalPolicy Get-HPECOMApprovalRequest Get-HPECOMEmailNotificationPolicy Get-HPECOMExternalService Get-HPECOMFilter Get-HPECOMFirmwareBaseline Get-HPECOMGroup Get-HPECOMGroupServerFirmwareCompliance Get-HPECOMGroupServeriLOConfigurationCompliance Get-HPECOMIloSecuritySatus Get-HPECOMJob Get-HPECOMJobTemplate Get-HPECOMMetricsConfiguration Get-HPECOMOneViewServerProfileTemplate Get-HPECOMReport Get-HPECOMSchedule Get-HPECOMSecureGatewayServerDiscovery Get-HPECOMServer Get-HPECOMServerActivationKey Get-HPECOMServerFirmwareDownloadReport Get-HPECOMServeriLOSSO Get-HPECOMServerInventory Get-HPECOMServerLogs Get-HPECOMServerUtilizationInsights Get-HPECOMSetting Get-HPECOMSustainabilityInsights Get-HPECOMWebhook Get-HPEGLAPIcredential Get-HPEGLAuditLog Get-HPEGLDevice Get-HPEGLDeviceAutoReassignSubscription Get-HPEGLDeviceAutoSubscription Get-HPEGLDomain Get-HPEGLJWTDetails Get-HPEGLLocation Get-HPEGLOrganization Get-HPEGLRegion Get-HPEGLRole Get-HPEGLScopeGroup Get-HPEGLService Get-HPEGLServiceResourceRestrictionPolicy Get-HPEGLServiceScopeFilter Get-HPEGLSSOAuthenticationPolicy Get-HPEGLSSOConnection Get-HPEGLSubscription Get-HPEGLTenantWorkspace Get-HPEGLUser Get-HPEGLUserAccountDetails Get-HPEGLUserGroup Get-HPEGLUserGroupMembership Get-HPEGLUserPreference Get-HPEGLUserRole Get-HPEGLWebhook Get-HPEGLWebhookSubscription Get-HPEGLWorkspace Get-HPEGLWorkspaceSAMLSSODomain Invoke-HPECOMApplianceRefreshSettings Invoke-HPECOMExternalServiceVCenterFirmwareBaselineSync Invoke-HPECOMGroupApplianceSettings Invoke-HPECOMGroupServerBiosConfiguration Invoke-HPECOMGroupServerExternalStorageComplianceCheck Invoke-HPECOMGroupServerExternalStorageConfiguration Invoke-HPECOMGroupServerFirmwareComplianceCheck Invoke-HPECOMGroupServerFirmwareDownload Invoke-HPECOMGroupServeriLOConfiguration Invoke-HPECOMGroupServeriLOConfigurationCompliance Invoke-HPECOMGroupServerInternalStorageConfiguration Invoke-HPECOMGroupServerOSInstallation Invoke-HPECOMSecureGatewayServerDiscovery Invoke-HPECOMServerExternalStorage Invoke-HPECOMServerFirmwareDownload Invoke-HPECOMWebRequest Invoke-HPEGLAutoReconnect Invoke-HPEGLWebhookDeliveryRetry Invoke-HPEGLWebRequest Join-HPEGLOrganization New-HPECOMAppliance New-HPECOMApprovalPolicy New-HPECOMExternalService New-HPECOMFilter New-HPECOMGroup New-HPECOMServerActivationKey New-HPECOMServerInventory New-HPECOMSettingiLOSettings New-HPECOMSettingOneViewAppliance New-HPECOMSettingOneViewApplianceSoftware New-HPECOMSettingOneViewServerProfileTemplate New-HPECOMSettingOneViewSynergyAppliance New-HPECOMSettingServerBios New-HPECOMSettingServerExternalStorage New-HPECOMSettingServerFirmware New-HPECOMSettingServerInternalStorage New-HPECOMSettingServerInternalStorageVolume New-HPECOMSettingServerOSImage New-HPECOMWebhook New-HPEGLAPIcredential New-HPEGLDomain New-HPEGLLocation New-HPEGLOrganization New-HPEGLScopeGroup New-HPEGLService New-HPEGLSSOAuthenticationPolicy New-HPEGLSSOConnection New-HPEGLSubscription New-HPEGLUser New-HPEGLUserGroup New-HPEGLWebhook New-HPEGLWorkspace New-HPEGLWorkspaceSAMLSSODomain Remove-HPECOMAppliance Remove-HPECOMApplianceFromGroup Remove-HPECOMApprovalPolicy Remove-HPECOMApprovalPolicyFromGroup Remove-HPECOMExternalService Remove-HPECOMFilter Remove-HPECOMGroup Remove-HPECOMOneViewServerLocation Remove-HPECOMSchedule Remove-HPECOMServerActivationKey Remove-HPECOMServerFromGroup Remove-HPECOMSetting Remove-HPECOMWebhook Remove-HPEGLAPICredential Remove-HPEGLDevice Remove-HPEGLDeviceAutoReassignSubscription Remove-HPEGLDeviceAutoSubscription Remove-HPEGLDeviceFromService Remove-HPEGLDeviceLocation Remove-HPEGLDeviceServiceDeliveryContact Remove-HPEGLDeviceTagFromDevice Remove-HPEGLDomain Remove-HPEGLLocation Remove-HPEGLRoleFromUser Remove-HPEGLRoleFromUserGroup Remove-HPEGLScopeGroup Remove-HPEGLService Remove-HPEGLSSOAuthenticationPolicy Remove-HPEGLSSOConnection Remove-HPEGLSubscription Remove-HPEGLSubscriptionFromDevice Remove-HPEGLUser Remove-HPEGLUserFromUserGroup Remove-HPEGLUserGroup Remove-HPEGLWebhook Remove-HPEGLWebhookSubscription Remove-HPEGLWorkspace Remove-HPEGLWorkspaceSAMLSSODomain Resolve-HPECOMApprovalRequest Restart-HPECOMAppliance Restart-HPECOMserver Restore-HPEGLSession Save-HPEGLSession Send-HPECOMWebhookTest Send-HPEGLUserInvitation Send-HPEGLWebhookTest Send-HPEGLWorkspaceSAMLSSODomainNotifications Set-HPECOMApprovalPolicy Set-HPECOMExternalService Set-HPECOMFilter Set-HPECOMGroup Set-HPECOMOneViewServerLocation Set-HPECOMSchedule Set-HPECOMServerUIDIndicator Set-HPECOMSettingiLOSettings Set-HPECOMSettingOneViewAppliance Set-HPECOMSettingOneViewApplianceSoftware Set-HPECOMSettingOneViewServerProfileTemplate Set-HPECOMSettingOneViewSynergyAppliance Set-HPECOMSettingServerBios Set-HPECOMSettingServerExternalStorage Set-HPECOMSettingServerFirmware Set-HPECOMSettingServerInternalStorage Set-HPECOMSettingServerOSImage Set-HPECOMWebhook Set-HPEGLDeviceAutoReassignSubscription Set-HPEGLDeviceAutoSubscription Set-HPEGLDeviceLocation Set-HPEGLDeviceServiceDeliveryContact Set-HPEGLLocation Set-HPEGLOrganization Set-HPEGLScopeGroup Set-HPEGLSSOAuthenticationPolicy Set-HPEGLSSOConnection Set-HPEGLUserAccountDetails Set-HPEGLUserAccountPassword Set-HPEGLUserGroup Set-HPEGLUserPreference Set-HPEGLUserRole Set-HPEGLWebhook Set-HPEGLWorkspace Set-HPEGLWorkspaceSAMLSSODomain Start-HPECOMserver Stop-HPECOMGroupServerFirmware Stop-HPECOMserver Test-HPECOMExternalService Test-HPEGLDomain Update-HPECOMApplianceFirmware Update-HPECOMGroupApplianceFirmware Update-HPECOMGroupServerFirmware Update-HPECOMServerFirmware Update-HPECOMServeriLOFirmware Wait-HPECOMJobComplete

PSEditions

Core

Dependencies

This module has no dependencies.

Release Notes

What's New in v1.0.27

Full release notes: https://github.com/jullienl/HPE-COM-PowerShell-Library/releases/tag/v1.0.27

HEADLINE FEATURE - OPENID CONNECT (OIDC) SINGLE SIGN-ON

Connect-HPEGL now signs in to HPE GreenLake workspaces and organizations federated with OpenID Connect (OIDC), in addition to SAML 2.0, for Okta, Microsoft Entra ID and PingIdentity. Previously, OIDC-federated workspaces could not be used from PowerShell at all. The federation protocol is detected automatically, so the same -PasswordlessSSOEmail and -Credential parameters work for both, with no script changes. Supported: passwordless (push, TOTP/OTP) and password-based sign-in (password only, or password + MFA step-up) with all three providers.

 Connect-HPEGL -PasswordlessSSOEmail user@company.com -Workspace Production
 Connect-HPEGL -Credential (Get-Credential -UserName user@company.com) -Workspace Production

PingIdentity OIDC tip: set the PingOne application's Token Endpoint Authentication Method to Client Secret Post.

ALSO IN THIS RELEASE

- Group-based user onboarding: create users whose permissions come entirely from user groups.
- Safer sign-in logs: -Verbose output now masks email addresses, sign-in tokens, authorization codes and cookie values.
- Targeted Secure Gateway discovery: discover iLOs at specific addresses or ranges.
BUG FIXES

- Connect-HPEGL: Fixed -PasswordlessSSOEmail failing for accounts whose email domain is a subdomain of hpe.com but is not @hpe.com itself (for example @labs.example.hpe.com). These accounts were treated as HPE internal accounts and stopped with a misleading message asking to use -PasswordlessSSOEmail. They now sign in through their organization's single sign-on.

- New-HPEGLUser: Users can now be created with membership in one or more user groups and no direct role assignment, so permissions come entirely from the groups' roles. Previously -RoleName was mandatory. At least one role or one user group is still required. If the user is created but cannot be added to a group, the result now shows Failed with the reason instead of reporting success. Running the command again for a user created earlier without workspace access now completes the missing group membership instead of failing with a conflict error.

- Add-HPEGLUserToUserGroup, Remove-HPEGLUserFromUserGroup, Get-HPEGLUserGroup, Get-HPEGLUserGroupMembership: Fixed adding and removing group members failing with "Not Found", group memberships failing to load, and member lists (-ShowUsers) and counts coming back empty, because these cmdlets used a group API version that is no longer available. They now use the current version. Users are also now found when they have no access to the current workspace yet (for example users created without direct roles).

- Remove-HPEGLUser: Fixed the cmdlet not recognizing that the connected workspace belongs to an organization: it only removed the user from the workspace instead of deleting the account from the organization as documented, and could not find users without access to the current workspace. In an organization, the default now deletes the account from the organization; use -FromWorkspaceOnly to remove the user from the current workspace only. Run with -WhatIf first.

- New-HPEGLUserGroup: Fixed group creation reporting success without assigning the requested role. Roles and scopes are now validated before creation, and the role is assigned after creation. If assignment fails, the result reports Failed and retains the created group's ID for retry.

- Connect-HPEGL: Fixed a sign-in failure affecting accounts whose email domain is configured for single sign-on in HPE GreenLake, but whose identity is a local HPE account rather than an account in the corporate identity provider (typically users created before their domain was set up for SSO). Signing in with -Credential failed with a misleading message saying the account did not exist in the identity provider. These accounts now sign in successfully.

- Remove-HPEGLWorkspace: Fixed incomplete session cleanup after deleting a workspace. The session is now fully cleared after a successful deletion, like Disconnect-HPEGL.

- Connect-HPEGL (Entra ID passwordless sign-in): Fixed a sign-in failure with Microsoft Authenticator when the push approval was not pre-armed by Entra ID; the approval is now requested automatically. When push notifications are temporarily blocked by Microsoft, a clear message now explains the cause and how to resolve it.

- Connect-HPEGLDeviceComputeiLOtoCOM, New-HPEGLWorkspaceSAMLSSODomain, Set-HPEGLWorkspaceSAMLSSODomain, Remove-HPEGLWorkspaceSAMLSSODomain: Fixed a failure ("times ('-1') must be a non-negative value") when these cmdlets run in a session without a console window, such as ForEach-Object -Parallel or thread jobs (Start-ThreadJob).

IMPROVEMENTS

- Connect-HPEGL: Email addresses are now masked in the verbose output, so a captured sign-in log can be shared when reporting an issue without exposing the account. Temporary sign-in values (session tokens, SAML messages, authorization codes) and cookie values are masked too. Messages displayed to you, and -WhatIf request previews, still show the real address.

- Invoke-HPECOMSecureGatewayServerDiscovery: Added a manual (targeted) discovery mode with the new -IPAddress and -IPRange parameters. You can now discover HPE iLO devices at specific addresses instead of scanning the whole subnet behind the Secure Gateway, making discovery faster and more precise. Individual addresses and ranges can be combined and duplicates are removed automatically.