SOLVED

WVD Role Assignments - can't determine who can do what.

%3CLINGO-SUB%20id%3D%22lingo-sub-437793%22%20slang%3D%22en-US%22%3EWVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-437793%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20three%20Techs%20trying%20to%20set%20up%20and%20test%20aspects%20of%20WVD.%20One%20user%20asked%20me%20if%20his%20account%20was%20in%20RDSOwners%20%2F%20RDSContributors%20group%20for%20our%20tenant.%20Is%20powershell%20the%20only%20way%20to%20find%20this%20out%3F%20I%20didn't%20see%20anything%20from%20the%20Azure%20portal%20or%20under%20the%20users%20entry%20in%20Azure%20AD.%20I%20couldn't%20find%20these%20as%20groups%20either.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20Powershell%20I%20tried%20Get-RdsRoleAssignment%20for%20our%20WVD%20tenant%20and%20only%20my%20username%20was%20listed%20as%20RDSOwner.%20No%20other%20names%20were%20listed.%20I%20tried%20to%20Set-RdsRoleAssignment%20and%20got%20an%20error%20that%20it%20isn't%20recognized%20as%20a%20cmdlet.%20I%20spent%20the%20last%20hour%20down%20the%20MS%20Docs%20rabbit%20hole%20for%20WVD%20and%20Azure%20with%20no%20clear%20cut%20answers.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20some%20of%20the%20cmdlets%20not%20active%20yet%20since%20WVD%20is%20still%20in%20preview%3F%20How%20can%20I%20set%20other%20users%20as%20RDSOwner%20or%20RDSContributor%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-439705%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-439705%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F317537%22%20target%3D%22_blank%22%3E%40Roger_Cox%3C%2FA%3E%26nbsp%3Byes%2C%20I%20believe%20PS%20is%20the%20only%20way.%26nbsp%3B%20try%20this%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGet-RDSRoleAssignment%20will%20list%20your%20WVD%20owners%2Fcontributors%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdd%20another%20owner%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-RdsRoleAssignment%20-TenantID%20%3CTENANT%3E%20-RoleDefinitionName%20%22RDS%20Owner%22%20-SignInName%20username%40domain.com%3C%2FTENANT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20had%20to%20do%20this%20as%20I%20was%20training%20our%20app%20person%20on%20this%20preview%20and%20it%20worked%20just%20fine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-961618%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-961618%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F279502%22%20target%3D%22_blank%22%3E%40stevenzelenko%3C%2FA%3E%26nbsp%3B%20As%20WVD%20is%20now%20publicly%20available%2C%20does%20this%20have%20capability%20to%20support%20security%20group%20account%20access%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1270785%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1270785%22%20slang%3D%22en-US%22%3EIs%20there%20a%20way%20to%20add%20an%20Azure%20AD%20group%20an%20RDS%20Owner%20%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1271490%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1271490%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F492419%22%20target%3D%22_blank%22%3E%40Yuukan%3C%2FA%3E%26nbsp%3BI'm%20the%20wrong%20guy%20to%20ask.%26nbsp%3B%20I'm%20just%20a%20customer.%26nbsp%3B%20Looks%20like%20we%20can't%20just%20yet.%26nbsp%3B%20I%20find%20it%20hard%20to%20believe%20that%20this%20service%20doesn't%20do%20group%20membership%20out%20of%20the%20box.%26nbsp%3B%20I%20would%20vote%20for%20this%20on%20teh%20user%20voice.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwindowsvirtualdesktop.uservoice.com%2Fforums%2F921118-general%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwindowsvirtualdesktop.uservoice.com%2Fforums%2F921118-general%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1328635%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20Role%20Assignments%20-%20can't%20determine%20who%20can%20do%20what.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1328635%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F492419%22%20target%3D%22_blank%22%3E%40Yuukan%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EYes%20-%20this%20is%20possible%20with%20the%20following%20powershell%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-RdsRoleAssignment%20-RoleDefinitionName%20%22RDS%20Owner%22%20-GroupObjectId%20%22%3CTHE%20guid%3D%22%22%20of%3D%22%22%20your%3D%22%22%20ad%3D%22%22%20group%3D%22%22%3E%22%20-TenantGroupName%20%22%3CYOUR%20wvd%3D%22%22%20tenant%3D%22%22%20group%3D%22%22%20name%3D%22%22%3E%22%20-TenantName%20%22%3CYOUR%20wvd%3D%22%22%20tenant%3D%22%22%20name%3D%22%22%3E%22%3C%2FYOUR%3E%3C%2FYOUR%3E%3C%2FTHE%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20helps%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBR%2C%3C%2FP%3E%3CP%3EChris%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

We have three Techs trying to set up and test aspects of WVD. One user asked me if his account was in RDSOwners / RDSContributors group for our tenant. Is powershell the only way to find this out? I didn't see anything from the Azure portal or under the users entry in Azure AD. I couldn't find these as groups either.

 

In Powershell I tried Get-RdsRoleAssignment for our WVD tenant and only my username was listed as RDSOwner. No other names were listed. I tried to Set-RdsRoleAssignment and got an error that it isn't recognized as a cmdlet. I spent the last hour down the MS Docs rabbit hole for WVD and Azure with no clear cut answers.

 

Are some of the cmdlets not active yet since WVD is still in preview? How can I set other users as RDSOwner or RDSContributor?

5 Replies
Highlighted
Best Response confirmed by Roger_Cox (New Contributor)
Solution

@Roger_Cox yes, I believe PS is the only way.  try this:

 

Get-RDSRoleAssignment will list your WVD owners/contributors

 

Add another owner:

 

New-RdsRoleAssignment -TenantID <tenant> -RoleDefinitionName "RDS Owner" -SignInName username@domain.com

 

I just had to do this as I was training our app person on this preview and it worked just fine.

@stevenzelenko  As WVD is now publicly available, does this have capability to support security group account access?

Highlighted
Is there a way to add an Azure AD group an RDS Owner ?
Highlighted

@Yuukan I'm the wrong guy to ask.  I'm just a customer.  Looks like we can't just yet.  I find it hard to believe that this service doesn't do group membership out of the box.  I would vote for this on teh user voice.

 

https://windowsvirtualdesktop.uservoice.com/forums/921118-general

Highlighted

@Yuukan 

Hi,

Yes - this is possible with the following powershell:

 

New-RdsRoleAssignment -RoleDefinitionName "RDS Owner" -GroupObjectId "<the GUID of your AD Group>" -TenantGroupName "<your WVD Tenant Group Name>" -TenantName "<your WVD Tenant Name>"

 

Hope this helps you.

 

BR,

Chris