---
title: "Discussion on \"Add dependent accounts in CyberArk (now Idira) with PACLI and PowerShell\" | Hashnode"
description: "Discussion on \"Add dependent accounts in CyberArk (now Idira) with PACLI and PowerShell\". CyberArk (now Idira) dependent accounts (or usages) are only accessible through the Classic UI and thus are not yet manageable through the CyberArk REST API. CyberArk in their epv-api-scripts repo on"
url: "https://hashnode.com/posts/add-dependent-accounts-in-cyberark-with-pacli-and-powershell/61d832094b84101d2c3ee0f5"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Add dependent accounts in CyberArk (now Idira) with PACLI and PowerShell](https://timschindler.blog/add-dependent-accounts-in-cyberark-with-pacli-and-powershell?utm_source=hashnode&utm_medium=feed)

CyberArk (now Idira) dependent accounts (or usages) are only accessible through the Classic UI and thus are not yet manageable through the CyberArk REST API. CyberArk in their epv-api-scripts repo on

Jan 7, 2022 · 4 min read · timschindler.blog  
Updated Jun 17  
Read the article

-   [#cybersecurity-1](https://hashnode.com/tag/cybersecurity-1)
-   [#powershell](https://hashnode.com/tag/powershell)
-   [#cyberark](https://hashnode.com/tag/cyberark)
-   [#idira](https://hashnode.com/tag/idira)

## Written by

[Tim Schindler](https://hashnode.com/@timschindler)

@timschindler · Amsterdam, NL

  
[View profile](https://hashnode.com/@timschindler)

Idira (CyberArk) MVP, Guardian | Principal Consultant at CyberIAM

Originally from the USA, working in Amsterdam, Netherlands in the digital identity space.

## Responses 2

Markdown supported · ⌘↵ to post

[mat](https://hashnode.com/@secdude)

[Feb 4, 2023](https://hashnode.com/posts/add-dependent-accounts-in-cyberark-with-pacli-and-powershell/61d832094b84101d2c3ee0f5/comment/63de9a3d22ecad9870b5e2e5)

hey tim, thanks for that reply. we tried that and realized poshpacli scrambles the file names randomly into other fields, like creation date. it varies from object to object, hence it is utterly broken. current approach ich scraping of pvwa gui parsing through powershell. sometimes cyberark knows how to keep people angry…

[mat](https://hashnode.com/@secdude)

[Feb 4, 2023](https://hashnode.com/posts/add-dependent-accounts-in-cyberark-with-pacli-and-powershell/61d832094b84101d2c3ee0f5/comment/63de728822ecad9870b5db95)

Any idea how to read existing depandants programatically from a vault in a migration scenario?

[Tim Schindler](https://hashnode.com/@timschindler)

[Feb 4, 2023](https://hashnode.com/posts/add-dependent-accounts-in-cyberark-with-pacli-and-powershell/61d832094b84101d2c3ee0f5/comment/63de728822ecad9870b5db95#reply-63de742b16b1848f6752a526)

I haven't tried this myself but I would investigate iterating through all safes and for each account/object in a safe, look for the `MasterPassName` file category/property. If the value is null, then it is not a dependent account whereas if there is a value, then it is a dependent account and also 'points' to the parent.

You would need to do this with PACLI/PoShPACLI.