IGPMPermission interface (gpmgmt.h)
The IGPMPermission interface contains methods to retrieve permission-related properties when using the GPMC. The GPMPermission object represents the pairing of a trustee (such as a user or security group) and a policy-related permission that applies to a single object; for example, to a GPO or a WMI filter. To create a GPMPermission object, call the IGPM::CreatePermission method.
Inheritance
The IGPMPermission interface inherits from the IDispatch interface.
Remarks
The interface divides the policy-related permissions into categories. The following table lists the categories, permissions included in the categories, and the object to which they can be applied, as defined in the GPMPermissionType.
| Securable object | Permission category | Permission level |
|---|---|---|
| Site | GPO linking | permSOMLink |
| OU | GPO linking | permSOMLink |
| RSoP logging | permSOMLogging | |
| RSoP planning | permSOMPlanning | |
| Domain | GPO linking | permSOMLink |
| Creating GPOs | permSOMGPOCreate | |
| RSoP logging | permSOMLogging | |
| RSoP planning | permSOMPlanning | |
| Creating WMI filters | permSOMWMICreate | |
| permSOMWMIFullControl | ||
| WMI filter | Editing WMI filters | permWMIFilterEdit |
| Full control of all WMI filters | permWMIFilterFullControl | |
| Custom control of WMI filters | permWMIFilterCustom | |
| GPO | Security filtering | permGPOApply |
| Delegation | permGPORead | |
| permGPOEdit | ||
| permGPOEditSecurityAndDelete | ||
| permGPOCustom | ||
| Starter GPO | Delegation | permStarterGPORead |
| permStarterGPOEdit | ||
| permStarterGPOFullControl | ||
| permStarterGPOCustom | ||
| permSOMStarterGPOCreate |
For more information about predefined policy-related permissions, see IGPM::CreatePermission (GPM.CreatePermission).
For more information about security groups, see How Security Groups are Used in Access Control in the Active Directory Programmer's Guide.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows Vista |
| Minimum supported server | Windows Server 2008 |
| Target Platform | Windows |
| Header | gpmgmt.h |