Puppet Community

`ds_pw_obfuscated` is indeed a field that the API returns, so the provider would need to be updated to accept that, or at least follow Postel's Law by tolerating arbitrary extra fields in the API output and just checking that required fields are present.

I think `ds_pw_obfuscated` has been around for a long long time too. Although, 2019 is 4 years ago now... :what_year_is_it:

yeah. I didn't see it on PE 2019. the provider uses the resources api, that was probably updated as well from 2019-&gt;2021

don't know if the rbac api changed or if a newer resource api version just doesn't like the missing field