Import-SICmdbCsv
Import a v2.2 CMDB.csv once (Pro)
Part of the SecurityInsight release - not a standalone download; it runs via the product's own install command or the updater.
Purpose
Imports a v2.2 CMDB.csv (and an optional memberships file) once into SecurityInsight's own CMDB in the Pro database. The file is checked line by line first; nothing is written when a line is wrong.
When to run it
Once, when moving from v2.2 to Pro (the guided install and Import-SIProSettings call it).
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| sql | the install's identity (db_datawriter on the Pro database) | the Pro database | to write the services and their memberships |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Azure SQL (Pro) | create | the services (SVC-0001, ...) and their asset links from the CSV, and the record of the one-time import | SecurityInsight's own CMDB | delete the imported services in the web app (Configuration > CMDB) |
What it only reads
- the CMDB.csv and the memberships file
- SI_CmdbCsvPath in config\SecurityInsight.custom.ps1
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -Path | no | ||
| -MembersPath | no | ||
| -InstallPath | no | A v2.2 installation to read the CSV (and its SI_CmdbCsvPath) from -- the same switch Import-SIProSettings takes. | |
| -Server | no | [string]$global:SI_ProSqlServer | |
| -Database | no | [string]$global:SI_ProSqlDatabase | |
| -AppId | no | [string]$global:SI_SPN_AppId | |
| -TenantId | no | [string]$global:SI_SPN_TenantId | |
| -CertThumbprint | no | [string]$global:SI_SPN_CertThumbprint | |
| -Invoke | no | The database seam (sql, params, mode) -- a caller that already holds the Pro database (Import-SIProSettings) passes its own; otherwise one is opened from -Server / -Database. | |
| -Apply | no | ||
| -NoThrow | no | Report a wrong file or a refusal in the result instead of throwing (the guided install and the settings import). |
Preview with -WhatIf
Reads, checks and counts the file; nothing is imported.
Undo
Delete the imported services in the web app.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics.io, api.msrc.microsoft.com, api.security.microsoft.com, api.securitycenter.microsoft.com, api.securityplatform.microsoft.com, database.windows.net, entra.microsoft.com, graph.microsoft.com, invardia.com, licenses.nuget.org, login.microsoftonline.com, management.azure.com, monitor.azure.com, nvd.nist.gov, portal.invardia.com, storage.azure.com, vault.azure.net
How it runs
Part of the SecurityInsight release - not a standalone download; it runs via the product's own install command or the updater.
Release 3.0.79
Every script, identity and permission for your security review: SecurityInsight