if ($RoleDatacenterIsManagementForest -eq "True") { $userName = "OspAzureUser2"; $ospAzureRoleName = "OspAzure"; $roleAssignment = Get-ManagementRoleAssignment -Role $ospAzureRoleName -RoleAssignee $userName -DomainController $RoleDomainController; if ($roleAssignment -eq $null) { Write-ExchangeSetupLog -Info "Creating a new role assignment for role '$ospAzureRoleName' and user '$userName'." New-ManagementRoleAssignment -Role $ospAzureRoleName -User $userName -DomainController $RoleDomainController; } $ospElevationScriptsRoleName = "OspElevation"; $ospElevationRoleAssignment = Get-ManagementRoleAssignment -Role $ospElevationScriptsRoleName -RoleAssignee $userName -DomainController $RoleDomainController; if ($ospElevationRoleAssignment -eq $null) { Write-ExchangeSetupLog -Info "Creating a new role assignment for role '$ospElevationScriptsRoleName' and user '$userName'." New-ManagementRoleAssignment -Role $ospElevationScriptsRoleName -User $userName -DomainController $RoleDomainController; } }
if ($RoleDatacenterFfoEnvironment -eq "True") { Install-CannedRbacRoles -InvocationMode $RoleInstallationMode -DomainController ...
if ($RoleDatacenterIsManagementForest -eq "True") { $OspAzureUser2 = Get-LinkedUser -DomainController $RoleDomainController ...
if ($RoleDatacenterIsManagementForest -eq "True") { $policyName = Microsoft.Exchange.Data.Directory.SystemConfiguration. ...
if ($RoleDatacenterIsManagementForest -eq "True") { $userName = "OspAzureUser"; $OspElevationScriptsRoleName = "OspElevation"; ...
if ($RoleDatacenterIsManagementForest -eq "True") { $userName = "OspAzureUser2"; $ospAzureRoleName = "OspAzure"; $roleAssignment ...
if ($RoleDatacenterIsManagementForest -eq "True") { Set-ThrottlingPolicyAssociation -Identity "OspAzureUser2" -ThrottlingPolicy ...
if ($RoleDatacenterIsManagementForest -eq "True") { Set-User "OspAzureUser2" -RemotePowerShellEnabled $true -CertificateSubject ...
if ($RoleDatacenterIsManagementForest -eq 'True') { . $RoleBinPath\CentralAdminSetup.ps1; AddLocalComputerAccountToCentralAdminServersGroup ...
if ($RoleDatacenterIsManagementForest -eq 'True') { .$RoleBinPath\CentralAdminSetup.ps1; RemoveLocalComputerAccountFromCentralAdminServersGroup ...