Edit FalconDeviceControlClass

Edit-FalconDeviceControlClass

SYNOPSIS

Modify Device Control policy classes

DESCRIPTION

Requires 'Device control policies: Write'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
InputObject	Object[]	One or more policy identifiers and class objects to modify in a single request				X
Id	String	Policy identifier
BluetoothClass	Object	Bluetooth class modifications and exceptions
UsbClass	Object	USB class modifications and exceptions

SYNTAX

Edit-FalconDeviceControlClass [-Id] <String> [[-BluetoothClass] <Object>] [[-UsbClass] <Object>] [-WhatIf] [-Confirm] [<CommonParameters>]

Edit-FalconDeviceControlClass -InputObject <Object[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /policy/entities/device-control-classes/v1

falconpy

patchDeviceControlPoliciesClassesV1

USAGE

Add USB device exceptions to a policy

[System.Collections.Generic.List[PSCustomObject]]$List = @(
  [PSCustomObject]@{
    action = 'FULL_ACCESS'
    class = 'MASS_STORAGE'
    combined_id = 'id'
  },
  [PSCustomObject]@{
    action = 'FULL_ACCESS'
    class = 'MASS_STORAGE'
    combined_id = 'id'
  }
)
Edit-FalconDeviceControlClass -Id <id> -UsbClass @{ upsert_exceptions = $List }

Remove USB device exceptions from a policy

Edit-FalconDeviceControlClass -Id <id> -UsbClass @{ delete_exceptions = @('id','id','id') }

2025-08-05: PSFalcon v2.2.9