IAzAuthorizationStore::AddPolicyAdministrator method (azroles.h)
The AddPolicyAdministrator method adds the specified security identifier (SID) in text form to the list of principals that act as policy administrators.
Syntax
HRESULT AddPolicyAdministrator(
[in] BSTR bstrAdmin,
[in, optional] VARIANT varReserved
);
Parameters
[in] bstrAdmin
Text form of the SID to add to the list of policy administrators.
[in, optional] varReserved
Reserved for future use.
Return value
If the method succeeds, it will return S_OK
. Any other HRESULT value indicates that the operation failed.
Remarks
Policy administrators for an object can perform the following tasks:
- Read the object
- Write attributes to the object
- Read attributes of child objects of the object
- Write attributes to child objects of the object
- Delete the object
- Delete child objects of the object
- Create child objects of the object
To view the list of policy administrators, use the PolicyAdministrators property.
You must call the Submit method to persist any changes made by this method.
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows Vista [desktop apps only] |
Minimum supported server | Windows Server 2003 [desktop apps only] |
Target Platform | Windows |
Header | azroles.h |
Library | Azroles.lib |
DLL | Azroles.dll |
Redistributable | Windows Server 2003 Administration Tools Pack on Windows XP |