If ($RoleDatacenterFfoEnvironment -eq "True") { $ospUserName = "OspUser"; Set-User $ospUserName -RemotePowerShellEnabled $True -CertificateSubject $RoleDatacenterOspCertSubjects -DomainController $RoleDomainController; # Define new Management Role $centralAdminManagementRole = Get-ManagementRole -DomainController $RoleDomainController -RoleType CentralAdminManagement | ? { $_.IsRootRole }; $ospUserUnscopedRoleName = "OspUser-UnscopedRole"; $ospUserUnscopedRole = Get-ManagementRole -DomainController $RoleDomainController | ? {$_.Name -ieq $ospUserUnscopedRoleName}; If(-Not $ospUserUnscopedRole) { $ospUserUnscopedRole = New-ManagementRole -Name $ospUserUnscopedRoleName -Parent $centralAdminManagementRole -DomainController $RoleDomainController; } }
If ($RoleDatacenterFfoEnvironment -eq "True") { # Create EOPChangeUser $eopChangeUserName = "EOPChangeUser"; $eopChangeUser ...
If ($RoleDatacenterFfoEnvironment -eq "True") { # Create OspUser $ospUserName = "OspUser"; $ospUser = Get-LinkedUser -DomainController ...
If ($RoleDatacenterFfoEnvironment -eq "True") { $eopChangeUserName = "EOPChangeUser"; Set-ThrottlingPolicyAssociation -Identity ...
If ($RoleDatacenterFfoEnvironment -eq "True") { $ospUserName = "OspUser"; Set-ThrottlingPolicyAssociation -Identity $ospUserName ...
If ($RoleDatacenterFfoEnvironment -eq "True") { $ospUserName = "OspUser"; Set-User $ospUserName -RemotePowerShellEnabled ...
if ($RoleDatacenterFfoEnvironment -eq "True") { Install-CannedRbacRoleAssignments -InvocationMode $RoleInstallationMode -DomainController ...
if ($RoleDatacenterFfoEnvironment -eq "True") { Install-CannedRbacRoles -InvocationMode $RoleInstallationMode -DomainController ...
if ($RoleDatacenterIsManagementForest -eq "True") { $OspAzureUser2 = Get-LinkedUser -DomainController $RoleDomainController ...
if ($RoleDatacenterIsManagementForest -eq "True") { $policyName = Microsoft.Exchange.Data.Directory.SystemConfiguration. ...