Modifying rights

To modify right definitions in a zone, users must have the following permissions:

Select this target object To apply these permissions

Authorization

Click the Properties tab, then select Allow for the following properties:

  • Write msDS-AzApplicationData

msDS-AzTaskObjectContainer/CN=roleName

This object is listed under a globally unique identifier (GUID) for the Authorization object and a specific role name.

Click the Properties tab, then select Allow for the following properties:

  • Read Name
  • Read name
  • Read description
  • Read msDS-AzApplicationData
  • Write Name
  • Write name
  • Write description
  • Write msDS-AzApplicationData