Citrix Daas SDK

Remove-AdminPermission

Remove permissions from the set of permissions of a role.

Syntax

Remove-AdminPermission
      -Role <String>
      [-InputObject] <Permission[]>
      [-LoggingId <Guid>]
      [<CitrixCommonParameters>]
      [<CommonParameters>]
<!--NeedCopy-->
Remove-AdminPermission
      -Role <String>
      [-Permission] <String[]>
      [-LoggingId <Guid>]
      [<CitrixCommonParameters>]
      [<CommonParameters>]
<!--NeedCopy-->
Remove-AdminPermission
      -Role <String>
      [-All]
      [-LoggingId <Guid>]
      [<CitrixCommonParameters>]
      [<CommonParameters>]
<!--NeedCopy-->

Description

Remove permissions from the set of permissions that a role maps to.

Any administrator with a right including that role immediately loses the ability to use the operations of the removed permissions.

Duplicate permissions do not produce an error, and permissions that the roles does not already have are skipped (without error).

You cannot modify the permissions of built-in roles.

Examples

EXAMPLE 1

Remove a couple of specific permissions from the ‘MyRole’ role.

Remove-AdminPermission -Role MyRole -Permission Global_Read,Logging_Read
<!--NeedCopy-->

EXAMPLE 2

Remove all permissions from the ‘MyRole’ role.

Remove-AdminPermission -Role MyRole -All
<!--NeedCopy-->

Parameters

-InputObject

Specifies the permissions to remove.

Type: Permission[]
Position: 2
Default value: None
Required: True
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-Permission

Specifies the list of permissions to remove (by identifier).

Type: String[]
Aliases: Id
Position: 2
Default value: None
Required: True
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False

-Role

Role name or identifier of the role to update.

Type: String
Position: Named
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-All

Remove all permissions.

Type: SwitchParameter
Position: Named
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-LoggingId

Specifies the identifier of the high-level operation this cmdlet call forms a part of. Citrix Studio and Director typically create high-level operations. PowerShell scripts can also wrap a series of cmdlet calls in a high-level operation by way of the Start-LogHighLevelOperation and Stop-LogHighLevelOperation cmdlets.

Type: Guid
Position: Named
Default value: None
Required: False
Accept pipeline input: False
Accept wildcard characters: False

CitrixCommonParameters

This cmdlet supports the common Citrix parameters: -AdminAddress, -AdminClientIP, -BearerToken, -TraceParent, -TraceState and -VirtualSiteId. For more information, see about_CitrixCommonParameters.

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

Citrix.DelegatedAdmin.Sdk.Permission

You can pipe a list of permissions to be removed into this command.

Outputs

None

By default, this cmdlet returns no output.

Remove-AdminPermission