Add a User or Group to the SPWebApplication User Policy for all Web Applications in the farm
Here are some PowerShell example to add a domain user or group to the User Policy for a SharePoint 2010 Web Application.
In this example, we’ll give domain\user01 “FullRead” permissions to the SharePoint Web Application https://sharepoint2010. This could be useful if you need to grant a domain account FullRead for searching.
$userOrGroup = "domain\user01" $displayName = "Search Crawl Account" Get-SPWebApplication https://sharepoint2010 | foreach { $webApp = $_ $policy = $webApp.Policies.Add($userOrGroup, $displayName) $policyRole = $webApp.PolicyRoles.GetSpecialRole([Microsoft.SharePoint.Administration.SPPolicyRoleType]::FullRead) $policy.PolicyRoleBindings.Add($policyRole) $webApp.Update() }
In this example, we’ll give domain\user02 “FullControl” permissions to all of the SharePoint Web Applications in the farm:
$userOrGroup = "domain\user02" $displayName = "SharePoint Admin" Get-SPWebApplication | foreach { $webApp = $_ $policy = $webApp.Policies.Add($userOrGroup, $displayName) $policyRole = $webApp.PolicyRoles.GetSpecialRole([Microsoft.SharePoint.Administration.SPPolicyRoleType]::FullControl) $policy.PolicyRoleBindings.Add($policyRole) $webApp.Update() }
Comments
Anonymous
October 08, 2014
This is great, but how do you do this in C#?Anonymous
December 27, 2015
Nice stuff. Thanks for documenting it.