PowerShell® Plugin

The PowerShell plugin allows you to execute scripts for specific events or situations in the system. Based on a widespread available technology, this lets you design your own individual extensions for tenfold.


You can use the Windows Server (or other Windows products) PowerShell-extensions to address or change Active Directory objects, or even to carry out more complex procedures, like rolling out software to client-devices. The entire scope of functions is at your disposal and thus there are no limits to your creativity.


The scripts are executed via the tenfold Agent, which must be installed on one of the supported operating systems in advance. The scripts can be conveniently uploaded via the tenfold web interface and are stored in the database.

As soon as the script is to be executed, it is transferred in encrypted form to the respective tenfold agent, which then executes the script in a specially created session. Parameters can be passed to the script by tenfold. If the script runs as part of the provisioning of a resource, the entire context of the respective request is automatically available to the script (all data on the request creator, recipient, resource and the like). Errors are reported back to tenfold by the agent and logged automatically. Once the error has been corrected, the execution can be repeated.

The “Import-Session” command triggers a remote session through which you can then execute scripts on servers other than the one tenfold agent is installed on.


Some plugin functions in the Essentials Edition and Essentials Plus Edition are restricted: you can, for instance, run scripts for global events, e.g. automatic generation and configuration of a terminal server profile path after a user has been created.

However, since only the Enterprise Edition allows you to determine user-defined resources, you can not use the PowerShell plugin for resource provisioning purposes. Please note: items that are depicted as resources in tenfold are – among others – business applications and permissions.

If you are unsure whether you will be able to use certain functions, due to the limitations mentioned above, please contact one of our partners or send us an inquiry to: info@tenfold-security.com

Products with PowerShell-API

Important notice: for products to which Microsoft provides an API via PowerShell, you may not have to conduct any individual configurations because there is already a tenfold-plugin for the product. The following products are supported:

  • Microsoft Exchange Server®
  • Microsoft Office 365®
  • Microsoft Dynamics Online®
  • Microsoft Dynamics CRM®
  • Microsoft Dynamics NAV®
  • Microsoft Dynamics AX®

System requirements

  • tenfold agent must be installed on one of the following supported operating systems:
    o Windows Server 2008 R2
    o Windows Server 2012
    o Windows Server 2012 R2
    o Windows Server 2016
  • PowerShell supports all versions currently available
  • All required extensions (Cmdlets) must be loaded and available

Required license (restricted use)

Required License (unrestricted use)

Request a free trial

It has never been easier to manage and keep track of your users and their access rights in one centralized software. Administrators, managers and your company as a whole will benefit from tenfold, as it provides a transparent overview of all access rights. tenfold can help you comply with standards, like ISO 27000, BSI, etc., and offers worthwhile functions for managing users and access rights.

Request trial