Ever wanted to have a way to view the permissions that each user role has in an a glance view? PowerShell to the rescue!
At the bottom of this blog post is a link to a PowerShell script that you can run on your SM Management Server to produce a “report” showing the permissions that each user role has. It will display the display name, user role profile, and description of each user role, the member users/group of that user role and then enumerate each of the permissions on classes, views, console tasks, tasks, templates, and group/queue (object) scope.
Here is an example of the End User role that we ship out of the box:
I’ll also add this script to the SMLets CodePlex project.
This script is now available on the TechNet Gallery here:
<p>Thx for this post. </p>
<p>How i can extract Users Roles for to be able to import in a other scsm platform on the same AD domain ?</p>
<p>In fact i think the security group are not stored on MP and i dont want create 37 security groups with my litlle fingers ...;-p) </p>
<p>THX in advance</p>
<p>@Cedric - </p>
<p>Have a look at the PowerShell script sample called Test-SupportGroupConfig. Its a monster script but it shows some examples of creating user roles using SMLets.</p>
<p><a rel="nofollow" target="_new" href="http://smlets.codeplex.com/SourceControl/changeset/view/71582">smlets.codeplex.com/.../71582</a></p>
<p>Browse on the left side to Main\Source\SMLets\SMLets\Scripts</p>