Citrix Virtual Apps and Desktops SDK


Add permissions to the set of permissions of a role.


Add-AdminPermission [-InputObject] <Permission[]> -Role <String> [-LoggingId <Guid>] [-BearerToken <String>] [-TraceParent <String>] [-TraceState <String>] [-VirtualSiteId <String>] [-AdminAddress <String>] [<CommonParameters>]

Add-AdminPermission [-Permission] <String[]> -Role <String> [-LoggingId <Guid>] [-BearerToken <String>] [-TraceParent <String>] [-TraceState <String>] [-VirtualSiteId <String>] [-AdminAddress <String>] [<CommonParameters>]


Detailed Description

Add extra permissions to the set of permissions that a role maps to.

Any administrator with a right including that role immediately gains the ability to use the operations of the new permissions.

Duplicate permissions do not produce an error, and permissions are skipped if the role already contains the permission (without error).

You cannot modify the permissions of built-in roles.

You are not permitted to add permissions that you yourself don’t have rights to.


Name Description Required? Pipeline Input Default Value
InputObject Specifies the permissions to add. true true (ByValue)  
Permission Specifies the list of permissions to add (by identifier). true true (ByPropertyName)  
Role Role name or identifier of the role to update. true false  
LoggingId Specifies the identifier of the high-level operation this cmdlet call forms a part of. Citrix Studio and Director typically create high-level operations. PowerShell scripts can also wrap a series of cmdlet calls in a high-level operation by way of the Start-LogHighLevelOperation and Stop-LogHighLevelOperation cmdlets. false false  
BearerToken Specifies the bearer token assigned to the calling user false false  
TraceParent Specifies the trace parent assigned for internal diagnostic tracing use false false  
TraceState Specifies the trace state assigned for internal diagnostic tracing use false false  
VirtualSiteId Specifies the virtual site the PowerShell snap-in will connect to. false false  
AdminAddress Specifies the address of a XenDesktop controller the PowerShell snap-in will connect to. You can provide this as a host name or an IP address. false false Localhost. Once a value is provided by any cmdlet, this value becomes the default.

Input Type


You can pipe a list of permissions to be added into this command.

Return Values



Example 1

C:\PS> Add-AdminPermission -Role MyRole -Permission Global_Read,Logging_Read



Add a couple of specific permissions to the ‘MyRole’ role.

Example 2

C:\PS> $list = Get-AdminRole "Delivery Administrator" | Select -Expand Permissions

C:\PS> Add-AdminPermission -Role MyRole -Permission $list



Add all of the permissions of the Delivery Administrator role to MyRole.