你当前正在访问 Microsoft Azure Global Edition 技术文档网站。如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Update-AzRecoveryServicesVault

参考

模块:: Az.RecoveryServices

汇报恢复服务保管库的 MSIdentity。

语法

Update-AzRecoveryServicesVault
      [-ResourceGroupName] <String>
      [-Name] <String>
      [-IdentityId <String[]>]
      [-RemoveUserAssigned]
      [-RemoveSystemAssigned]
      [-DisableClassicAlerts <Boolean>]
      [-DisableAzureMonitorAlertsForJobFailure <Boolean>]
      [-PublicNetworkAccess <PublicNetworkAccess>]
      [-ImmutabilityState <ImmutabilityState>]
      [-CrossSubscriptionRestoreState <CrossSubscriptionRestoreState>]
      [-DefaultProfile <IAzureContextContainer>]
      [-Token <String>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Update-AzRecoveryServicesVault
      [-ResourceGroupName] <String>
      [-Name] <String>
      -IdentityType <MSIdentity>
      [-IdentityId <String[]>]
      [-DisableClassicAlerts <Boolean>]
      [-DisableAzureMonitorAlertsForJobFailure <Boolean>]
      [-PublicNetworkAccess <PublicNetworkAccess>]
      [-ImmutabilityState <ImmutabilityState>]
      [-CrossSubscriptionRestoreState <CrossSubscriptionRestoreState>]
      [-DefaultProfile <IAzureContextContainer>]
      [-Token <String>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

说明

此 cmdlet 用于在恢复服务保管库中添加或删除 MSI。使用 -IdentityType 参数将 SystemAssigned/UserAssigned 标识添加到 RSVault。使用 RemoveSystemAssigned/RemoveUserAssigned 开关从保管库中删除 MSI。

示例

示例 1：将 SystemAssigned 标识添加到恢复服务保管库

Update-AzRecoveryServicesVault -ResourceGroupName "rgName" -Name "vaultName" -IdentityType SystemAssigned

此 cmdlet 用于将 SystemAssigned 标识添加到恢复服务保管库。

示例 2：将 UserAssigned 标识添加到恢复服务保管库

$vault = Get-AzRecoveryServicesVault -Name "vaultName" -ResourceGroupName "resourceGroupName"
$identity1 = Get-AzUserAssignedIdentity -ResourceGroupName "resourceGroupName" -Name "UserIdentity1"
$identity2 = Get-AzUserAssignedIdentity -ResourceGroupName "resourceGroupName" -Name "UserIdentity2"
$updatedVault = Update-AzRecoveryServicesVault -ResourceGroupName $vault.ResourceGroupName -Name $vault.Name -IdentityType UserAssigned -IdentityId $identity1.Id, $identity2.Id
$updatedVault.Identity | Format-List

PrincipalId            :
TenantId               : xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Type                   : UserAssigned
UserAssignedIdentities : {[/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/resourceGroupName/providers/Microsoft.ManagedIdentity/userAssignedIdentities/UserIdentity1,
                         Microsoft.Azure.Management.RecoveryServices.Models.UserIdentity],
                         [/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/resourceGroupName/providers/Microsoft.ManagedIdentity/userAssignedIdentities/UserIdentity2,
                         Microsoft.Azure.Management.RecoveryServices.Models.UserIdentity]}

第一个 cmdlet 提取恢复服务保管库。第二个和第三个 cmdlet 提取用户创建的 MSIs。第四个 cmdlet 将用户 MSIS 添加到保管库。第五个 cmdlet 显示添加到保管库的标识。

示例 3：从保管库中删除 SystemAssigned 和 UserAssigned 标识

$vault = Get-AzRecoveryServicesVault -Name "vaultName" -ResourceGroupName "resourceGroupName"
$updatedVault = Update-AzRecoveryServicesVault -ResourceGroupName $vault.ResourceGroupName -Name $vault.Name -RemoveSystemAssigned
$AllUserIdentities =  $vault.Identity.UserAssignedIdentities.Keys | ForEach-Object {$_} 
$updatedVault = Update-AzRecoveryServicesVault -ResourceGroupName $vault.ResourceGroupName -Name $vault.Name -RemoveUserAssigned -IdentityId $AllUserIdentities
$updatedVault.Identity | Format-List

PrincipalId            :
TenantId               :
Type                   : None
UserAssignedIdentities :

第一个 cmdlet 提取恢复服务保管库。第二个 cmdlet 从保管库中删除 SystemAssigned 标识。第三个 cmdlet 从保管库中提取所有用户 MSIS 作为列表。第四个 cmdlet 从保管库中删除所有用户 MSIS。如果需要，可以提供要删除的选定用户标识作为逗号分隔，如前面的示例所示。第五个 cmdlet 显示保管库中的标识，因为我们删除了所有标识，类型将显示为 None。

示例 4：更新恢复服务保管库的 PublicNetworkAccess、ImmutabilityState

$vault = Get-AzRecoveryServicesVault -Name "vaultName" -ResourceGroupName "resourceGroupName"
$updatedVault = Update-AzRecoveryServicesVault -ResourceGroupName $vault.ResourceGroupName -Name $vault.Name -PublicNetworkAccess "Disabled" -ImmutabilityState "Unlocked"
$updatedVault.Properties.PublicNetworkAccess
$updatedVault.Properties.ImmutabilitySettings.ImmutabilityState

Disabled
Unlocked

第一个 cmdlet 提取恢复服务保管库。第二个 cmdlet 更新恢复服务保管库的 PublicNetworkAccess、ImmutabilityState 属性。第三个和第四个命令用于提取保管库的公共网络访问和不可变状态。

示例 5：为恢复服务保管库启用/禁用 CrossSubscriptionRestore

$vault = Get-AzRecoveryServicesVault -Name "vaultName" -ResourceGroupName "resourceGroupName"
$updatedVault = Update-AzRecoveryServicesVault -ResourceGroupName $vault.ResourceGroupName -Name $vault.Name -CrossSubscriptionRestoreState Disabled
$updatedVault.Properties.RestoreSettings.CrossSubscriptionRestoreSettings.CrossSubscriptionRestoreState

Disabled

第一个 cmdlet 提取恢复服务保管库。第二个 cmdlet 更新恢复服务保管库的 CrossSubscriptionRestoreState。第三个命令获取保管库的跨订阅还原状态。

参数

-Confirm

提示你在运行 cmdlet 之前进行确认。

Type:	SwitchParameter
Aliases:	cf
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-CrossSubscriptionRestoreState

保管库的跨订阅还原状态。允许的值为“Enabled”、“Disabled”、“PermanentlyDisabled”。

Type:	Nullable<T>[CrossSubscriptionRestoreState]
Accepted values:	Enabled, Disabled, PermanentlyDisabled
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

用于与 Azure 通信的凭据、帐户、租户和订阅。

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DisableAzureMonitorAlertsForJobFailure

用于指定是否应为每个作业失败接收内置 Azure Monitor 警报的布尔参数。

Type:	Nullable<T>[Boolean]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DisableClassicAlerts

用于指定是否应禁用或启用经典解决方案中的备份警报的布尔参数。

Type:	Nullable<T>[Boolean]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-IdentityId

要添加/删除的 UserAssigned 标识的 ARM ID。这是标识 ID 的逗号分隔列表。

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-IdentityType

分配给恢复服务保管库的 MSI 类型。

Type:	MSIdentity
Accepted values:	SystemAssigned, None, UserAssigned
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-ImmutabilityState

保管库的不可变状态。允许的值为“Disabled”、“Unlocked”、“Locked”。已解锁意味着已启用且可更改，锁定意味着已启用且无法更改。

Type:	Nullable<T>[ImmutabilityState]
Accepted values:	Disabled, Unlocked, Locked
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Name

指定要更新的恢复服务保管库的名称。

Type:	String
Position:	2
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-PublicNetworkAccess

用于启用/禁用保管库的公共网络访问的参数。此设置适用于专用终结点。

Type:	Nullable<T>[PublicNetworkAccess]
Accepted values:	Enabled, Disabled
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RemoveSystemAssigned

提供此开关以从保管库中删除 SystemAssigned Identity。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RemoveUserAssigned

提供此开关以从保管库中删除 UserAssigned Identity。此外，请提供 IdenityId 参数以及此开关。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ResourceGroupName

指定存在恢复服务保管库的 Azure 资源组的名称。

Type:	String
Position:	1
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Token

用于授权受跨租户资源防护保护的操作的参数。使用命令（Get-AzAccessToken -TenantId “xxxxxxxx-xxxx-xxxx-xxxx-xxxx-xxxxxx” ）用于提取不同租户的授权令牌的令牌

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-WhatIf

显示运行该 cmdlet 时会发生什么情况。 cmdlet 未运行。

Type:	SwitchParameter
Aliases:	wi
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

输入

String

输出

Vault