Hi,
I'm currently writing a script that would be used to separate the contents of a single vaut into multiple ones. (Code)
While creating the vaults, I don't seem to be able to define their permissions.
Ideally, I would also like to replicate the existing "Home Folder" permissions onto their respective vaults.
Can this be done with the standard "RemoteDesktopManager" PowerShell module or would it require using the "Devolutions.Server" PowerShell module?
Best regards,
Alexis De Jaeger
Hello,
It is possible to set the permissions on folders and entries using the RDM PowerShell module.
Please see this script on GitHub that set permissions on folders based on a CSV file.
https://github.com/Devolutions/RDMSamples-ps/blob/main/module/security/SetPermissionsonFoldersInVault.ps1
Let me know if that helps.
Best regards,
Érica Poirier
Hi Érica,
Thank you for your reply.
This does cover the folder permission edition/recovery, but is it possible to edit vault permissions with the "RemoteDesktopManager" PowerShell module?
Best regards,
Alexis De Jaeger
Hi Alexis,
Thank you for your feedback.
Sure it's possible using the Get-RDMRootSession and Set-RDMRootSession cmdlets.
Best regards,
Érica Poirier
Hi Érica,
Thank you for your reply.
I've attempted it with a test vault and test user.
I have given the standard user access to the vault in question, so he can now see the test vault.
But upon running:
Set-RDMCurrentRepository (Get-RDMRepository -Name "Test Vault") $RootInfo = Get-RDMRootSession
I don't see any mentions of the user in question when verifying the contents of $RootInfo.Security.Permissions .
Thank you in advance for you reply.
Best regards,
Alexis De Jaeger
Hi,
My apologies, I realise that the post above could be a bit more precise.
Our current folder structure would have user-specific rights on some folders. Those being "Home folders", a corresponding vault will be created.
Would it be possible to take the folder permissions and use them as the corresponding vault permissions?
I hope this clears it up a bit.
Best regards,
Alexis
Hi Alexis,
I don't think it's possible to retrieve the User Specific Settings (USS) using PowerShell to set the permissions on the newly created vault.
As the USS are only available from the user context, no other user even with administrative rights can get that information.
Let me know if you need further information.
Best regards,
Érica Poirier