官术网_书友最值得收藏!

Ensuring user account permissions

Let's check whether the account has the necessary permissions using the following PowerShell cmdlet:

Get-MsolUserRole

This cmdlet gets all the administrator roles that the specified user belongs to. It will also return the roles that the user is a member of through security group membership.

The cmdlet accepts the following three parameters. ObjectId and UserPrincipalName are the required parameters, and we need to pass/provide at least one of them:

  • [-ObjectId <Guid>]: Specifies the unique ID of the user to retrieve roles for.
  • [-TenantId <Guid>]: Specifies the unique ID of the tenant on which the operation is to be performed. The default value is the tenant of the current user. This parameter applies only to partner users.
  • [-UserPrincipalName <String>]: Specifies the UserPrincipalName of the user to retrieve roles for.

The following cmdlet will display the administrative role for a user:

Get-MsolUserRole -UserPrincipalName "pgbhoyar@pgbhoyar.onmicrosoft.com"

The following screenshot shows the output for the preceding command:

Here, the Company Administrator is the same as global administrator.

To grant additional accounts admin roles, we can use the following PowerShell cmdlet:

Add-MsolRoleMember

To get the available administrative roles, we can use the following PowerShell cmdlet:

Get-MsolRole

The following screenshot shows the output for the preceding command:

If we need to grant the user global administrator/company administrator role, we can use the following PowerShell cmdlet:

Add-MsolRoleMember -RoleName "Company Administrator"
-RoleMemberEmailAddress "prashant-admin@pgbhoyar.onmicrosoft.com"

To verify that the user has the admin role now, we can use the PowerShell Get-MsolUserRole cmdlet mentioned earlier.

主站蜘蛛池模板: 穆棱市| 沛县| 库车县| 威海市| 茶陵县| 金沙县| 老河口市| 奈曼旗| 甘德县| 响水县| 慈利县| 茌平县| 普格县| 县级市| 炎陵县| 大丰市| 莱州市| 临桂县| 郑州市| 沂南县| 彰武县| 古田县| 同心县| 彭州市| 连江县| 阿拉善右旗| 鲁甸县| 遵化市| 青川县| 肇州县| 清水县| 曲水县| 石首市| 青川县| 南汇区| 万山特区| 临澧县| 太仆寺旗| 台前县| 瓦房店市| 永康市|