Wednesday, August 10, 2011

Determine Admin Role Needed to Run a Command in Lync

Lync Server has adopted the Role Based Access Control (RBAC) administrative model to allow for easy delegation of administrative tasks.  To get you started, there are some default groups created:

Lync Admin Role - list

Note that you can create your own custom roles if desired by using the “New-CsAdminRole” command. 

There is a simple command that can be used to determine what role is needed in order to execute specific commands.  This will allow you to identify what exact role a user will need to run the desired task.

Use the following command:

Get-CsAdminRole | Where-Object {$_.Cmdlets –match “command”}

Here are a few examples…

When running the command with “New-CsLocationPolicy”, you will notice that CSAdministrator, CSVoiceAdministrator, or CSServerAdministrator can run this command.

Lync Admin Role - cmd1

When running the command with “New-CsClientPolicy”, you will notice that CSAdministrator or CSServerAdministrator can run this command.

Lync Admin Role - cmd2

No comments:

Post a Comment