SOLVED
Home

WVD Role Assignments - can't determine who can do what.

%3CLINGO-SUB%20id%3D%22lingo-sub-437793%22%20slang%3D%22en-US%22%3EWVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-437793%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20three%20Techs%20trying%20to%20set%20up%20and%20test%20aspects%20of%20WVD.%20One%20user%20asked%20me%20if%20his%20account%20was%20in%20RDSOwners%20%2F%20RDSContributors%20group%20for%20our%20tenant.%20Is%20powershell%20the%20only%20way%20to%20find%20this%20out%3F%20I%20didn't%20see%20anything%20from%20the%20Azure%20portal%20or%20under%20the%20users%20entry%20in%20Azure%20AD.%20I%20couldn't%20find%20these%20as%20groups%20either.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20Powershell%20I%20tried%20Get-RdsRoleAssignment%20for%20our%20WVD%20tenant%20and%20only%20my%20username%20was%20listed%20as%20RDSOwner.%20No%20other%20names%20were%20listed.%20I%20tried%20to%20Set-RdsRoleAssignment%20and%20got%20an%20error%20that%20it%20isn't%20recognized%20as%20a%20cmdlet.%20I%20spent%20the%20last%20hour%20down%20the%20MS%20Docs%20rabbit%20hole%20for%20WVD%20and%20Azure%20with%20no%20clear%20cut%20answers.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20some%20of%20the%20cmdlets%20not%20active%20yet%20since%20WVD%20is%20still%20in%20preview%3F%20How%20can%20I%20set%20other%20users%20as%20RDSOwner%20or%20RDSContributor%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-439705%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-439705%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F317537%22%20target%3D%22_blank%22%3E%40Roger_Cox%3C%2FA%3E%26nbsp%3Byes%2C%20I%20believe%20PS%20is%20the%20only%20way.%26nbsp%3B%20try%20this%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGet-RDSRoleAssignment%20will%20list%20your%20WVD%20owners%2Fcontributors%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdd%20another%20owner%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-RdsRoleAssignment%20-TenantID%20%3CTENANT%3E%20-RoleDefinitionName%20%22RDS%20Owner%22%20-SignInName%20username%40domain.com%3C%2FTENANT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20had%20to%20do%20this%20as%20I%20was%20training%20our%20app%20person%20on%20this%20preview%20and%20it%20worked%20just%20fine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-961618%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-961618%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F279502%22%20target%3D%22_blank%22%3E%40stevenzelenko%3C%2FA%3E%26nbsp%3B%20As%20WVD%20is%20now%20publicly%20available%2C%20does%20this%20have%20capability%20to%20support%20security%20group%20account%20access%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Roger_Cox
New Contributor

We have three Techs trying to set up and test aspects of WVD. One user asked me if his account was in RDSOwners / RDSContributors group for our tenant. Is powershell the only way to find this out? I didn't see anything from the Azure portal or under the users entry in Azure AD. I couldn't find these as groups either.

 

In Powershell I tried Get-RdsRoleAssignment for our WVD tenant and only my username was listed as RDSOwner. No other names were listed. I tried to Set-RdsRoleAssignment and got an error that it isn't recognized as a cmdlet. I spent the last hour down the MS Docs rabbit hole for WVD and Azure with no clear cut answers.

 

Are some of the cmdlets not active yet since WVD is still in preview? How can I set other users as RDSOwner or RDSContributor?

2 Replies
Solution

@Roger_Cox yes, I believe PS is the only way.  try this:

 

Get-RDSRoleAssignment will list your WVD owners/contributors

 

Add another owner:

 

New-RdsRoleAssignment -TenantID <tenant> -RoleDefinitionName "RDS Owner" -SignInName username@domain.com

 

I just had to do this as I was training our app person on this preview and it worked just fine.

@stevenzelenko  As WVD is now publicly available, does this have capability to support security group account access?

Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies