Applies to: Exchange Server 2007 SP3, Exchange Server
2007 SP2, Exchange Server 2007 SP1
Topic Last Modified: 2007-06-28
Use the Get-ADPermission cmdlet to get permissions on an Active Directory object.
Syntax
Get-ADPermission -Identity <ADRawEntryIdParameter>
[-DomainController <Fqdn>] [-User
<SecurityPrincipalIdParameter>]
|
Get-ADPermission -Identity <ADRawEntryIdParameter>
[-DomainController <Fqdn>] [-Owner
<SwitchParameter>]
|
Parameters
| Parameter | Required | Type | Description |
|---|---|---|---|
|
Identity |
Required |
Microsoft.Exchange.Configuration.Tasks.ADRawEntryIdParameter |
Use this parameter to specify the identity of the object that you are getting permissions on. |
|
DomainController |
Optional |
Microsoft.Exchange.Data.Fqdn |
To specify the fully qualified domain name of the domain controller that retrieves data from Active Directory, include the DomainController parameter in the command. |
|
Owner |
Optional |
System.Management.Automation.SwitchParameter |
This parameter specifies the owner of that Active Directory object. |
|
User |
Optional |
Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter |
This parameter specifies the user object that will get permissions added. |
Detailed Description
This cmdlet allows you to retrieve the permissions set for an Active Directory object.
To run the Get-ADPermission cmdlet, the account you use must be delegated the following:
- Exchange View-Only Administrator role
For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.
Input Types
Return Types
Errors
| Error | Description |
|---|---|
Exceptions
| Exceptions | Description |
|---|---|
Example
This example shows the Get-ADPermission cmdlet used to get the permissions for Ted.
 Copy Code |
|
|---|---|
Get-ADpermission -Identity Ted | Format-List |
|