Introduction Role Based Access Control (RBAC) is the new permissions model in Microsoft Exchange Server 2010. With RBAC, you don't need to modify and manage access control lists (ACLs), which was...
Published Nov 17, 2009
Version 1.0
Blog Post
Dick,
Well ... it looks like I was defeated by my own haste and an assumption or two.
The easiest way to test that this is working is to log in as the a user in the "VIP Editors" Group and make sure you can change one of the parameters that we defined. The problem there is that if you do this it will fail.
The reason is that I didn't include enough parameters on the set-user command for it to actually work.
The command you actually need to run is:
Add-ManagementRoleEntry "VIP EditorSet-User" -Parameters Office,Phone,Mobilephone,Department,Manager,Identity,whatif,erroraction,errorvariable,verbose,debug
Now ... the only one of those that I think you HAVE to have to get this to work is identity ... but the rest are good to have as well.
-Matt
PS. I will submit a correct to this article and get it updated as quickly as possible.
Well ... it looks like I was defeated by my own haste and an assumption or two.
The easiest way to test that this is working is to log in as the a user in the "VIP Editors" Group and make sure you can change one of the parameters that we defined. The problem there is that if you do this it will fail.
The reason is that I didn't include enough parameters on the set-user command for it to actually work.
The command you actually need to run is:
Add-ManagementRoleEntry "VIP EditorSet-User" -Parameters Office,Phone,Mobilephone,Department,Manager,Identity,whatif,erroraction,errorvariable,verbose,debug
Now ... the only one of those that I think you HAVE to have to get this to work is identity ... but the rest are good to have as well.
-Matt
PS. I will submit a correct to this article and get it updated as quickly as possible.