Resource Type: dsc_xadobjectpermissionentry

Defined in:

lib/puppet/type/dsc_xadobjectpermissionentry.rb

Providers:

powershell

Overview

The DSC xADObjectPermissionEntry resource type. Automatically generated from ‘xActiveDirectory/DSCResources/MSFT_xADObjectPermissionEntry/MSFT_xADObjectPermissionEntry.schema.mof’

To learn more about PowerShell Desired State Configuration, please visit technet.microsoft.com/en-us/library/dn249912.aspx.

For more information about built-in DSC Resources, please visit technet.microsoft.com/en-us/library/dn249921.aspx.

For more information about xDsc Resources, please visit github.com/PowerShell/DscResources.

Properties

• ensure

  The basic property that the resource should be in.

  Supported values:

  • exists?
  • present
  • absent

Parameters

• dsc_accesscontroltype

  AccessControlType - Indicates whether to Allow or Deny access to the target object. Valid values are Allow, Deny.

• dsc_activedirectoryrights

  ActiveDirectoryRights - A combination of one or more of the ActiveDirectoryRights enumeration values that specifies the rights of the access rule. Default is ‘GenericAll’. Valid values are AccessSystemSecurity, CreateChild, Delete, DeleteChild, DeleteTree, ExtendedRight, GenericAll, GenericExecute, GenericRead, GenericWrite, ListChildren, ListObject, ReadControl, ReadProperty, Self, Synchronize, WriteDacl, WriteOwner, WriteProperty.

• dsc_activedirectorysecurityinheritance

  ActiveDirectorySecurityInheritance - One of the ‘ActiveDirectorySecurityInheritance’ enumeration values that specifies the inheritance type of the access rule. Valid values are All, Children, Descendents, None, SelfAndChildren.

• dsc_ensure

  Ensure - Indicates if the access will be added (Present) or will be removed (Absent). Default is ‘Present’. Valid values are Present, Absent.

• dsc_identityreference

  IdentityReference - Indicates the identity of the principal for the permission entry. Use the notation <Domain><SamAccountName> for the identity.

• dsc_inheritedobjecttype

  InheritedObjectType - The schema GUID of the child object type that can inherit this access rule. If the permission entry shouldn’t be restricted to a specific inherited object type, use the zero guid: 00000000-0000-0000-0000-000000000000.

• dsc_objecttype

  ObjectType - The schema GUID of the object to which the access rule applies. If the permission entry shouldn’t be restricted to a specific object type, use the zero guid: 00000000-0000-0000-0000-000000000000.

• dsc_path

  Path - Active Directory path of the target object to add or remove the permission entry, specified as a Distinguished Name.

• dsc_psdscrunascredential

  PsDscRunAsCredential

• name (namevar)
• provider

  The specific backend to use for this ‘dsc_xadobjectpermissionentry` resource. You will seldom need to specify this — Puppet will usually discover the appropriate provider for your platform.