If you want a different user or group to have user management permissions, you should add that user (or group) to the RTCUniversalUserAdmins group. You can’t use this cmdlet to grant permissions to an arbitrary user or group. Note that Grant-CsOUPermission can only assign permissions to members of the RTCUniversalUserAdmins group. If those permissions are not set, you can resolve this problem by running the Grant-CsOUPermission cmdlet. The Test-CsOUPermission cmdlet verifies that the required permissions needed to manage users, computers, and other objects are set on an Active Directory container. Those management privileges will only be available to domain administrators. As a result, members of the RTCUniversalUserAdmins group won't be able to manage Skype for Business Server entities. If you have disabled permission inheritance in Active Directory, setup won't be able to assign those permissions. When you install Skype for Business Server, one of the tasks that was performed by the Setup program gives the RTCUniversalUserAdmins group the Active Directory permissions that are needed to manage users, computers, contacts, application contacts, and InetOrg persons. To see a list of all RBAC roles that can use this cmdlet, run the following command from the Windows PowerShell prompt: Get-CsAdminRole | Where-Object When run using a remote instance of Windows PowerShell, users must be assigned an RBAC role that has permission to run the Test-CsOUPermission cmdlet. When run locally using the Skype for Business Server Management Shell, users must be members of the RTCUniversalServerAdmins security group.
As needed if permission-related issues arise. After initial Skype for Business Server deployment.
0 kommentar(er)
