delegate_zone_right
Use the delegate_zone_right
command to delegate an administrative right for the currently selected zone to a security principal (user or group). Zone rights allow a user or group to use and manage zone properties, including computer-specific zone properties and computer roles.
Zone type
Classic and hierarchical
Syntax
delegate_zone_right right principal_upn
Abbreviation
None.
Options
This command takes no options.
Arguments
This command takes the following arguments:
Argument | Type | Description |
right |
string |
Required. Specifies the right to delegate. Possible values:
|
|
||
|
||
|
||
right (continued) |
string (continued) |
|
|
||
|
||
|
||
|
||
right (continued) |
string (continued) |
|
principal_upn |
string |
Required. Specifies the user principal name (UPN) of a user or group in Active Directory to delegate the specified right to. |
Return value
This command returns no value if it runs successfully.
Examples
delegate_zone_right add_user adam.avery@acme.com
This example delegates the right to add users to the currently selected zone to the Active Directory user Adam Avery.
Related commands
Before you use this command, you must have a currently selected zone stored in memory. The following commands enable you to view and select a zone to work with:
- create_zone creates a new zone in Active Directory.
- get_zones returns a Tcl list of all zones within a specified domain.
- select_zone retrieves a zone from Active Directory and stores it in memory.
After you have a zone stored in memory, you can use the following commands to work with that zone:
- delegate_zone_right delegates a zone use right to a specified user or computer.
- delete_zone deletes the selected zone from Active Directory and memory.
- get_child_zones returns a Tcl list of child zones, computer roles, or computer zones.
- get_zone_field reads a field value from the currently selected zone.
- get_zone_nss_vars returns the NSS substitution variable for the selected zone.
- save_zone saves the selected zone with its current settings to Active Directory.
- set_zone_field sets a field value in the currently selected zone.