New-CMAdministrativeUserPermission

New-CMAdministrativeUserPermission
    -InputObject <IResultObject>
    [-Collection <IResultObject[]>]
    [-CollectionId <String[]>]
    [-CollectionName <String[]>]
    [-SecurityScope <IResultObject[]>]
    [-SecurityScopeId <String[]>]
    [-SecurityScopeName <String[]>]
    [-DisableWildcardHandling]
    [-ForceWildcardHandling]
    [<CommonParameters>]

New-CMAdministrativeUserPermission
    -RoleId <String>
    [-Collection <IResultObject[]>]
    [-CollectionId <String[]>]
    [-CollectionName <String[]>]
    [-SecurityScope <IResultObject[]>]
    [-SecurityScopeId <String[]>]
    [-SecurityScopeName <String[]>]
    [-DisableWildcardHandling]
    [-ForceWildcardHandling]
    [<CommonParameters>]

New-CMAdministrativeUserPermission
    -RoleName <String>
    [-Collection <IResultObject[]>]
    [-CollectionId <String[]>]
    [-CollectionName <String[]>]
    [-SecurityScope <IResultObject[]>]
    [-SecurityScopeId <String[]>]
    [-SecurityScopeName <String[]>]
    [-DisableWildcardHandling]
    [-ForceWildcardHandling]
    [<CommonParameters>]

Use this cmdlet to create a permissions object to assign to an administrative user in Configuration Manager. Permissions can include security roles, security scopes, or collections. An administrative user in Configuration Manager defines a local or domain user or group. For more information about security roles, see Fundamentals of role-based administration in Configuration Manager.

Use this permissions object with the New-CMAdministrativeUser cmdlet and its Permission parameter.

This example creates an object that defines the following permissions:

• Security role: Read-only Analyst
• Security scope: Scope1
• Collection: All Systems

It then creates a new administrative user for contoso\jqpublic and assigns these permissions. The last command displays the new user's permissions.

$accountName = "contoso\jqpublic"
$roleName = "Read-only Analyst"
$scopeName = "Scope1"
$collectionName = "All Systems"

$role = Get-CMSecurityRole -Name $roleName
$scope = Get-CMSecurityScope -Name $scopeName
$collection = Get-CMCollection -Name $collectionName

$perms = $role | New-CMAdministrativeUserPermission -RoleName $role.RoleName -SecurityScopeNames $scope.CategoryName -CollectionNames $collection.Name

$User = New-CMAdministrativeUser -Name $accountName -Permission $perms
$User.Permissions

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

For more information on this return object and its properties, see SMS_APermission server WMI class.