FND:How to Set User Security Rights for a Class of Configuration Manager Objects

To set user security rights for a class of Microsoft System Center Configuration Manager 2007 objects by using the managed SMS Provider, you create and populate a SMS_UserClassPermissions object. You have to provide the class, the new class permission (read, modify, delete, and so on), and the user that the permission applies to.

For more information about Configuration Manager 2007 object rights, see Classes and Instances for Object Security in Configuration Manager (http://go.microsoft.com/fwlink/?LinkID=111709).

For more information about setting rights for individual Configuration Manager objects, see How to Set User Security Rights for a Configuration Manager Object.

To set user security rights for a class of Configuration Manager objects

Set up a connection to the SMS Provider. For more information, see About the SMS Provider in Configuration Manager.
Using the connection object you obtain in step one, create an SMS_UserClassPermissions object.
With the SMS_UserClassPermissions object, set the UserName property to the user name that you want to set permissions for.
Set the ObjectKey to the object type that you want to set permissions for. For more information, see SMS_UserClassPermissions.
Set the ClassPermissions property to the required permissions.
Commit the SMS_UserClassPermissions object.

Example

The following example gives modify access to all collections for the supplied user.

For information about calling the sample code, see Calling Configuration Manager Code Snippets.

Visual Basic

Edit|Remove

Sub SetSecurityForCollections(connection, userName)

    Dim permissions
    On Error Resume Next
    
    ' Create the user class permissions object.
    Set permissions = connection.Get("SMS_UserClassPermissions").SpawnInstance_()
    If Err.Number<>0 Then
        Wscript.Echo "Couldn't get class permissions object"
        Exit Sub
    End If
     
    permissions.UserName = userName
    permissions.ObjectKey = 1 'collections
    permissions.ClassPermissions = 3 ' Read and modify
    
    permissions.Put_
    If Err.Number<>0 Then
        Wscript.Echo "Couldn't commit class permissions"
        Exit Sub
    End If
End Sub

Sub SetSecurityForCollections(connection, userName)

    Dim permissions
    On Error Resume Next
    
    ' Create the user class permissions object.
    Set permissions = connection.Get("SMS_UserClassPermissions").SpawnInstance_()
    If Err.Number<>0 Then
        Wscript.Echo "Couldn't get class permissions object"
        Exit Sub
    End If
     
    permissions.UserName = userName
    permissions.ObjectKey = 1 'collections
    permissions.ClassPermissions = 3 ' Read and modify
    
    permissions.Put_
    If Err.Number<>0 Then
        Wscript.Echo "Couldn't commit class permissions"
        Exit Sub
    End If
End Sub