Forum Discussion

Roger_Cox's avatar
Roger_Cox
Copper Contributor
Apr 11, 2019

WVD Role Assignments - can't determine who can do what.

We have three Techs trying to set up and test aspects of WVD. One user asked me if his account was in RDSOwners / RDSContributors group for our tenant. Is powershell the only way to find this out? I didn't see anything from the Azure portal or under the users entry in Azure AD. I couldn't find these as groups either.

 

In Powershell I tried Get-RdsRoleAssignment for our WVD tenant and only my username was listed as RDSOwner. No other names were listed. I tried to Set-RdsRoleAssignment and got an error that it isn't recognized as a cmdlet. I spent the last hour down the MS Docs rabbit hole for WVD and Azure with no clear cut answers.

 

Are some of the cmdlets not active yet since WVD is still in preview? How can I set other users as RDSOwner or RDSContributor?

  • Roger_Cox yes, I believe PS is the only way.  try this:

     

    Get-RDSRoleAssignment will list your WVD owners/contributors

     

    Add another owner:

     

    New-RdsRoleAssignment -TenantID <tenant> -RoleDefinitionName "RDS Owner" -SignInName username@domain.com

     

    I just had to do this as I was training our app person on this preview and it worked just fine.

  • stevenzelenko's avatar
    stevenzelenko
    Brass Contributor

    Roger_Cox yes, I believe PS is the only way.  try this:

     

    Get-RDSRoleAssignment will list your WVD owners/contributors

     

    Add another owner:

     

    New-RdsRoleAssignment -TenantID <tenant> -RoleDefinitionName "RDS Owner" -SignInName username@domain.com

     

    I just had to do this as I was training our app person on this preview and it worked just fine.

    • Jasmer1's avatar
      Jasmer1
      Copper Contributor

      stevenzelenko  As WVD is now publicly available, does this have capability to support security group account access?

    • Yuukan's avatar
      Yuukan
      Copper Contributor
      Is there a way to add an Azure AD group an RDS Owner ?
      • ChrisH84's avatar
        ChrisH84
        Copper Contributor

        Yuukan 

        Hi,

        Yes - this is possible with the following powershell:

         

        New-RdsRoleAssignment -RoleDefinitionName "RDS Owner" -GroupObjectId "<the GUID of your AD Group>" -TenantGroupName "<your WVD Tenant Group Name>" -TenantName "<your WVD Tenant Name>"

         

        Hope this helps you.

         

        BR,

        Chris