Documentation

SecurityInsight scripts

Every SecurityInsight script you may be asked to run: what it is for, who may run it, every permission and change it makes (with scope and why), its parameters, what -WhatIf shows and how to undo it. Read the page before you run the script.

Always save a script, check its SHA-256 against the published SHA256SUMS.txt, read it, then run it - each page shows the commands.

• Clear-SIGuardEvents

  Acknowledge every open guard event

• Grant-SIIdentity

  Grant a managed identity everything SecurityInsight reads with

• Grant-SISupportAccess

  Give or remove the Invardia Support app's access to SecurityInsight

• Grant-SIUpdaterDatabase

  Let the product updater apply database changes (one time)

• Initialize-SIDataSql

  Prepare the Pro database for the data backend

• Initialize-SIVulnTargetSql

  Prepare a database as the vulnerability close-loop's target

• Install-SecurityInsight

  Install SecurityInsight (two lines)

• Invoke-SIJobsOnce

  Run every SecurityInsight job once, in pipeline order

• New-SIManagementAppRegistration

  Create or update the web app's sign-in application

• Request-SILicense

  Ask Invardia for this install's Pro licence, and install it

• Reset-SIData

  Start the data again from nothing

• Set-SICiCutoff

  Set the one-time CI cut-off

• Set-SIDisplayNames

  Give an existing install's applications and SQL admin group the names people read

• Set-SIInstallRing

  Record this install's update ring

• Set-SIInstallTenant

  Record the tenant's name for the web app's header

• Set-SILicense

  Install a SecurityInsight Pro licence

• Set-SIMail

  Set up how SecurityInsight sends mail

• Set-SIServiceNowCredential

  Store the ServiceNow connection in the Key Vault

• Set-SISqlAdminGroup

  Make one role-assignable group the Pro SQL server's Entra admin

• Set-SIStorageSharedKey

  Show, or switch off, shared-key access on SecurityInsight's storage account

• Stop-SIRunAndUpdate

  Stop the running pipeline run, then update

• Switch-SIJobOrchestration

  Switch between the daily job flow and one timer per job

• Test-SIInstall

  Health check of a SecurityInsight install (read-only)

• Validate-SIOpenAI

  Create or check the Azure OpenAI account for the AI features

Part of the release

Part of the SecurityInsight release - not a standalone download; it runs via the product's own install command or the updater.

• Get-SIDeviationReport

  What have we switched off, changed or exempted?

• Grant-SISupportAppDatabase

  The Invardia Support app holds both parts of its database access: the database admin group and its own database user (one time per install)

• Grant-SITaggingDatabase

  Let asset tagging read its settings (Pro, once)

• Import-SICmdbCsv

  Import a v2.2 CMDB.csv once (Pro)

• Import-SIProSettings

  Move an install's configuration into the Pro database

• Install-SIFlowTask

  Run the engines as one daily flow (VM install)

• Install-SIUpdaterJob

  Create or update the updater job (container install, Pro)

• Invoke-SIContainerUpdate

  Bring a container install up to the code just synced

• New-SIServiceNowTestPack

  Write the ServiceNow test pack

• Publish-SITemplates

  Publish configuration templates into the Pro database

• Set-SIProSetting

  Set or reset one Pro setting

• Set-SISigninFront

  Put the SecurityInsight Pro web app behind the shared sign-in front -- or take it back

• Upgrade-SIToPro

  Upgrade a container install to Pro updates

• Validate-SILogAnalytics

  Provision the Log Analytics workspace, DCE and DCR

Every script, identity and permission for your security review: SecurityInsight

Other products:PIM Manager · Entra Policy Suite · Invardia· Download page