PAM RBI Commands

This command provides the ability to edit remote browser isolation settings for a record.

RBI Edit command

Edits Remote Browser Isolation (RBI) settings on a pamRemoteBrowser record. Updates RBI field values (URL allow-lists, autofill, clipboard, audio, session persistence) and optionally the PAM graph flags for RBI / session recording / key events. Use pam-config list to find configuration UIDs.

DotNet CLI

Command: pam-rbi edit

Alias: pam-remote-browser edit

Parameters:

Parameter	Description
--record, -r or <record>	pamRemoteBrowser record UID or title
--configuration, -c	PAM Configuration UID or title
--remote-browser-isolation	RBI permission on the resource: on, off, or default
--connections-recording	Session recording: on, off, or default
--key-events, -k	Key events: on, off, or default
--allow-url-navigation	Allow URL navigation / manipulation: on, off, or default
--ignore-server-cert	Ignore server certificate errors: on, off, or default
--allow-file-uploads	Allow file uploads: on, off, or default
--allow-file-downloads	Allow file downloads: on, off, or default
--allowed-urls	Allowed URL patterns (repeatable / comma-separated; appends). Empty string clears
--allowed-resource-urls	Allowed resource URL patterns (repeatable / comma-separated; appends). Empty string clears
--autofill-credentials, -a	login or pamUser record UID/title for RBI autofill
--autofill-targets	Autofill target selectors (repeatable / comma-separated; appends). Empty string clears
--allow-copy	Allow clipboard copy: on, off, or default
--allow-paste, -p	Allow clipboard paste: on, off, or default
--disable-audio	Disable audio: on, off, or default
--audio-channels	Audio channels: 1 (mono) or 2 (stereo)
--audio-bit-depth	Audio bit depth: 8 or 16
--audio-sample-rate	Sample rate in Hz (e.g. 44100, 48000)
--session-persistence	none, user, resource, or default
--silent, -s	Silent mode

Examples:

My Vault> pam-rbi edit --record <RBI_RECORD_UID> --configuration <CONFIG_UID> --remote-browser-isolation=on
My Vault> pam-rbi edit <RBI_RECORD_UID> -c <CONFIG_UID> --connections-recording=on --key-events=on
My Vault> pam-rbi edit -r <RBI_RECORD_UID> --allowed-urls "https://*.example.com/*" --allow-copy=on --allow-paste=on
My Vault> pam-rbi edit -r <RBI_RECORD_UID> --autofill-credentials <LOGIN_OR_PAMUSER_UID> --autofill-targets "#username,#password"
My Vault> pam-rbi edit -r <RBI_RECORD_UID> --session-persistence user --disable-audio=off --audio-sample-rate 48000
My Vault> pam-remote-browser edit -r <RBI_RECORD_UID> --remote-browser-isolation=on

DotNet SDK

Function:

using KeeperSecurity.Plugins.PAM;
using System.Collections.Generic;

var result = await RbiUtils.EditRbiAsync(vault, new PamRbiEditOptions
{
    Record = "<RBI_RECORD_UID>",
    Configuration = "<CONFIG_UID>",
    RemoteBrowserIsolation = "on",
    ConnectionsRecording = "on",
    KeyEvents = "on",
    AllowUrlNavigation = "on",
    IgnoreServerCert = "off",
    AllowFileUploads = "off",
    AllowFileDownloads = "off",
    AllowedUrls = new List<string> { "https://*.example.com/*" },
    AllowedResourceUrls = new List<string> { "https://cdn.example.com/*" },
    AutofillCredentials = "<LOGIN_OR_PAMUSER_UID>",
    AutofillTargets = new List<string> { "#username", "#password" },
    AllowCopy = "on",
    AllowPaste = "on",
    DisableAudio = "off",
    AudioChannels = 2,
    AudioBitDepth = 16,
    AudioSampleRate = 48000,
    SessionPersistence = "user",
    Silent = false
});

foreach (var message in result.Messages)
{
    Console.WriteLine(message);
}

if (result.RecordUpdated || result.GraphUpdated)
{
    Console.WriteLine($"RBI settings updated for {result.RecordUid}");
}

Power Commander

Command: Set-KeeperPamRbi

Alias: pam-rbi-edit

Parameters:

Parameter	Description
-Record, -r	pamRemoteBrowser record UID/title
-Configuration, -c	PAM Configuration UID or title
-RemoteBrowserIsolation, -rbi	RBI permission on the resource: on, off, or default
-ConnectionsRecording, -cr	Session recording: on, off, or default
-KeyEvents, -k	Key events: on, off, or default
-AllowUrlNavigation, -nav	Allow URL navigation / manipulation: on, off, or default
-IgnoreServerCert, -isc	Ignore server certificate errors: on, off, or default
-AllowFileUploads	Allow file uploads: on, off, or default
-AllowFileDownloads	Allow file downloads: on, off, or default
-AllowedUrls, -au	Allowed URL patterns (repeatable / comma-separated; appends). Empty string clears
-AllowedResourceUrls, -aru	Allowed resource URL patterns (repeatable / comma-separated; appends). Empty string clears
-AutofillCredentials, -a	login or pamUser record UID/title for RBI autofill
-AutofillTargets, -at	Autofill target selectors (repeatable / comma-separated; appends). Empty string clears
-AllowCopy, -cpy	Allow clipboard copy: on, off, or default
-AllowPaste, -p	Allow clipboard paste: on, off, or default
-DisableAudio, -da	Disable audio: on, off, or default
-AudioChannels, -ac	Audio channels: 1 (mono) or 2 (stereo)
-AudioBitDepth, -bd	Audio bit depth: 8 or 16
-AudioSampleRate, -sr	Sample rate in Hz (e.g. 44100, 48000)
-SessionPersistence, -sp	none, user, resource, or default
-Silent, -s	Silent mode

Examples:

PS > Set-KeeperPamRbi -Record "5H7NHL6VeN5KwMPRwj07tw" -Configuration "fTKLyvpZsuabGJiRuut40g" `
  -RemoteBrowserIsolation on -ConnectionsRecording on -AllowCopy off -AllowPaste off `
  -AllowedUrls "https://*.bing.com","https://www.bing.com/*" -SessionPersistence user
RBI settings updated for 5H7NHL6VeN5KwMPRwj07tw

PS > pam-rbi-edit -r "5H7NHL6VeN5KwMPRwj07tw" -c "fTKLyvpZsuabGJiRuut40g" `
  -rbi on -cr on -nav off -isc off -au "https://www.bing.com/*" -cpy off -p off -sp none -s

PS > Set-KeeperPamRbi -Record "5H7NHL6VeN5KwMPRwj07tw" -AllowedUrls '' -AllowedResourceUrls '' -AutofillTargets ''

Python CLI

Command: Coming Soon

Python SDK

Command: Coming Soon