KEPM Commands

This page gives description of Keeper Endpoint Privilege Manager Commands and their parameters and arguments

Overview

This section lists all the commands in Keeper's Commander (CLI) that are related to Keeper Endpoint Privilege Manager (KEPM). These commands provide administrators with powerful tools to manage privilege elevation policies, agents, deployments, and audit reporting. The commands cover creating, viewing, editing, organiing and managing KEPM entities and compliance monitoring.

The following commands are currently supported by SDK:

• KEPM Sync Commands
• KEPM Deployment Commands
• KEPM Agent Commands
• KEPM Policy Commands
• KEPM Collection Commands
• KEPM Approval Commands
• KEPM Report Commands

---

KEPM Sync Command

Synchronises KEPM data from the backend server to the local cache. This command ensures that local data is up-to-date with the server, supporting both incremental and full synchronization modes.

DotNet CLI

Command: epm-sync-down

Alias: epm-sync

Parameter:

Parameter	Description
-r, --reload	Perform a full sync instead of incremental. Clears the stored continuation token and re-downloads all EPM data.

Example:

My Vault > epm-sync-down --reload
Performing full sync...
EPM sync completed.

DotNet SDK

Function:

public async Task SyncDown(bool reload = false)

Power Commander

Command: Sync-KeeperEpm

Alias: kepm-sync

Parameters:

Parameter	Description
-Reload	Perform a full sync instead of incremental. Clears the stored continuation token and re-downloads all EPM data (deployments, agents, policies, collections, approvals)

Examples:

PS > Sync-KeeperEpm -Reload
Performing full sync...
EPM sync completed.

Python SDK

Function: PedmPlugin.sync_down

from keepersdk.plugin.pedm import admin_plugin

plugin = admin_plugin.PedmPlugin(enterprise_loader)
plugin.sync_down(reload=True)