CdaAuditRoleRight

This object represents the rights granted to a trustee on the audit role. The following properties are defined for this object.

Property Type Description

AuditRole

CdaAuditRole

The audit role

Trustee

String

Trustee name in format <DOMAIN>\<User account name>

Note: The consistent name format is shown in the Audit Manager console. For an orphan trustee, it shows SID in SDDL format.

TrusteeType

String

Indicate the type of the trustee,for example Active Directory User or Group

Rights

string[]

The collection of rights granted to the trustee on the audit role.

Possible rights:

Full Control

Change Permissions

Change Role Membership

Change Role Definition