Ever wanted to have a way to view the permissions that each user role has in an a glance view? PowerShell to the rescue!
At the bottom of this blog post is a link to a PowerShell script that you can run on your SM Management Server to produce a “report” showing the permissions that each user role has. It will display the display name, user role profile, and description of each user role, the member users/group of that user role and then enumerate each of the permissions on classes, views, console tasks, tasks, templates, and group/queue (object) scope.
Here is an example of the End User role that we ship out of the box:
I’ll also add this script to the SMLets CodePlex project.
This script is now available on the TechNet Gallery here:
Thx for this post.
How i can extract Users Roles for to be able to import in a other scsm platform on the same AD domain ?
In fact i think the security group are not stored on MP and i dont want create 37 security groups with my litlle fingers ...;-p)
THX in advance
Have a look at the PowerShell script sample called Test-SupportGroupConfig. Its a monster script but it shows some examples of creating user roles using SMLets.
Browse on the left side to Main\Source\SMLets\SMLets\Scripts