官术网_书友最值得收藏!

Ensuring user account permissions

Let's check whether the account has the necessary permissions using the following PowerShell cmdlet:

Get-MsolUserRole

This cmdlet gets all the administrator roles that the specified user belongs to. It will also return the roles that the user is a member of through security group membership.

The cmdlet accepts the following three parameters. ObjectId and UserPrincipalName are the required parameters, and we need to pass/provide at least one of them:

  • [-ObjectId <Guid>]: Specifies the unique ID of the user to retrieve roles for.
  • [-TenantId <Guid>]: Specifies the unique ID of the tenant on which the operation is to be performed. The default value is the tenant of the current user. This parameter applies only to partner users.
  • [-UserPrincipalName <String>]: Specifies the UserPrincipalName of the user to retrieve roles for.

The following cmdlet will display the administrative role for a user:

Get-MsolUserRole -UserPrincipalName "pgbhoyar@pgbhoyar.onmicrosoft.com"

The following screenshot shows the output for the preceding command:

Here, the Company Administrator is the same as global administrator.

To grant additional accounts admin roles, we can use the following PowerShell cmdlet:

Add-MsolRoleMember

To get the available administrative roles, we can use the following PowerShell cmdlet:

Get-MsolRole

The following screenshot shows the output for the preceding command:

If we need to grant the user global administrator/company administrator role, we can use the following PowerShell cmdlet:

Add-MsolRoleMember -RoleName "Company Administrator"
-RoleMemberEmailAddress "prashant-admin@pgbhoyar.onmicrosoft.com"

To verify that the user has the admin role now, we can use the PowerShell Get-MsolUserRole cmdlet mentioned earlier.

主站蜘蛛池模板: 民丰县| 平果县| 东乌珠穆沁旗| 晋中市| 康马县| 吴堡县| 固原市| 鸡西市| 绥德县| 建德市| 长沙市| 苏尼特右旗| 桑日县| 平罗县| 合作市| 海阳市| 临夏市| 桓仁| 三原县| 仁寿县| 翁源县| 惠安县| 万山特区| 渑池县| 双城市| 琼海市| 洪雅县| 京山县| 旺苍县| 碌曲县| 兴安盟| 万载县| 洛南县| 榆中县| 石景山区| 永德县| 旌德县| 安泽县| 花垣县| 昌平区| 兴山县|