CdmRoleAssignment

Represents a authentication and privilege elevation role assignment. This object is only applicable in hierarchical zones. The following properties are defined for this object.

Property Type Description

AdTrustee

CdmAdPrincipal

The trustee, if it is an Active Directory account.

Computer

CdmManagedComputer

Containing computer.

ComputerRole

CdmComputerRole

Containing computer role.

CustomAttributes

string

Custom text strings for the role assignment.

Description

string

The role assignment description.

EndTime

DateTime

The ending date and time for the role assignment.

IsNeverExpire

Boolean

True if the role assignment never expires.

IsRoleOrphaned

Boolean

True if the role is missing or invalid.

IsStartImmediately

Boolean

True if the role assignment starts immediately.

IsTrusteeOrphaned

Boolean

True if the trustee is missing or invalid.

LocalTrustee

string

The trustee, if it is a local account.

PreferredServer

string

Preferred server to use for committing changes to Active Directory.

Role

CdmRole

Assigned role.

StartTime

DateTime

The starting date and time for the role assignment.

TrusteeType

string

Type of trustee.

Zone

CdmZone

Containing zone.