DRAG DROP
You administer a SharePoint 2013 farm for Contoso, Ltd.
Company policy requires that minimal permissions are granted to users to perform their tasks.
You need to add User1 as Full Control on the User Profile Service Application.
How should you complete the relevant Windows PowerShell commands? To answer, select the
appropriate Windows PowerShell segment from each list in the answer area.
Explanation:
* The New-SPClaimsPrincipal cmdlet creates a claims principal.
* Parameter –IdentityType specifies the type of the new claims principal.
We use WindowsSamAccountName to specify the user name.
Note: The type must be one of the following: WindowsSamAccountName,
WindowsSecurityGroupSid, FormsUser, FormsRole, or EncodedClaim.
Example: Assigning an Administrator to the User Profile Service
$userServiceApp = Get-SPServiceApplication | where {$_.DisplayName -eq “User Profile Service
Application”}
$security = Get-SPServiceApplicationSecurity $userServiceAp
p -Admin
$principalUser = New-SPClaimsPrincipal -Identity “sp2010\mangler” -IdentityType
WindowsSamAccountName
Grant-SPObjectSecurity $security -Principal $principalUser -Rights “Full Control”
Set-SPServiceApplicationSecurity -Identity $serviceApp.Id -ObjectSecurity $security –Admin
Incorrect answers:
* The New-SPUser command does not have an –IdentityType parameter.
Useful PowerShell Cmdlets for Configuring SharePoint Server 2010 – Cheat Sheet Part 2
https://angler.wordpress.com/2011/03/22/useful-powershell-cmdlets-for-configuring-sharepointserver-2010-cheat-sheet-part-2/
no images, thanks!
Event without images, here is the link, https://technet.microsoft.com/en-us/library/ee721057.aspx?f=255&MSPPError=-2147217396
Command should look like this:
$serviceapp = Get-SPServiceApplication
$security = Get-SPServiceApplicationSecurity $serviceapp
-Admin
$principalUser1 = New-SPClaimsPrincipal -Identity “” -IdentityType WindowsSamAccountName
Grant-SPObjectSecurity $security -Principal $principalUser1 -Rights “Full Control”
Set-SPServiceApplicationSecurity $serviceapp -ObjectSecurity $security -Admin
Here is the image, http://examgod.com/bdimages/ee7009f6cfef_D890/image_thumb.png
New-SPClaimsPrincipal
WindowsSamAccountName
New-SPClaimsPrincipal
“Full control”
Set-SPServiceApplicationSecurity