New-TSTMGMTAddAce

Create a new Access Control Entry (ACE) within the Management Platform.

Written by Giuseppe

Last published at: August 20th, 2020

Create a new Access Control Entry (ACE) within the Management Platform


SYNTAX

New-TSTMGMTAddAce

-RoleName <string> -AccessMask {View | ViewSubFolders | ViewSubObjects | Modify | AssignProfiles | AddFolder | AddObject | Delete | ViewPermissions | EditPermissions | RefreshProfile | Logoff | Shutdown | Restart | LockUnlock | RemoteControl | RepairPolices | SoftwareUpdate | AssignPackages | RetrieveDeviceLogs | AssignNotifications | FullControl} [-AppliesTo {ThisFolder | SubFolders | ThisFolderObjects | SubFolderObjects}] [-Deny]

New-TSTMGMTAddAce

-RoleId <guid> -AccessMask {View | ViewSubFolders | ViewSubObjects | Modify | AssignProfiles | AddFolder | AddObject | Delete | ViewPermissions | EditPermissions | RefreshProfile | Logoff | Shutdown | Restart | LockUnlock | RemoteControl | RepairPolices | SoftwareUpdate | AssignPackages | RetrieveDeviceLogs | AssignNotifications | FullControl} [-AppliesTo {ThisFolder | SubFolders | ThisFolderObjects | SubFolderObjects}] [-Deny]


DESCRIPTION

Create a new Access Control Entry (ACE) that can later be added to an objects security token


EXAMPLES

1.Create an ACE that allows Modify and View permission to the current folder for the 'Support Users' Role

        New-TSTMGMTAddAce -RoleName "\Roles\Support Users" -AccessMask Modify,View -AppliesTo ThisFolder

PARAMETERS


-AccessMask

        An array of permissions to assign to this ACE

Type: String[]
Required: Yes
Accept Pipeline Input: No
Accepted values: View, ViewSubFolders, ViewSubObjects, Modify, AssignProfiles, AddFolder, AddObject, Delete, ViewPermissions, EditPermissions, RefreshProfile, Logoff, Shutdown, Restart, LockUnlock, RemoteControl, RepairPolices, SoftwareUpdate, AssignPackages, RetrieveDeviceLogs, AssignNotifications, FullControl


-AppliesTo

        Determines what objects and folders this ACE applies to. Only applicable when applied to a folder

  • ThisFolder - The permission applies only to the folder the ACE is applied to
  • SubFolders - The permission applies to any child folder/s of the folder the ACE is applied to
  • ThisFolderObjects - The permission applies to any non-folder objects who's parent folder is the folder the ACE is applied to
  • SubFolderObjects - The permission applies to any non-folder objects who's parent folder is a child folder of the folder the ACE          is applied to
Type: String[]
Required: Yes
Accept Pipeline Input: No
Accepted values: ThisFolder , SubFolders, ThisFolderObjects, SubFolderObjects


-Deny

        The ACE will remove the associated permission from the object it is applied. Deny will take priority over any existing allow ACE's

Type: SwitchParameter
Required: No
Accept Pipeline Input: No


-RoleId

        The RoleId to assign to this ACE

Type: Guid
Required: No
Accept Pipeline Input: No


-RoleName

        The fully qualified name of the Role to assign to this ACE

Type: String
Required: No
Accept Pipeline Input: No


INPUTS

None


OUTPUTS

ThinScale.Management.PowerShell.TSTMGMTAddAce