Authorization Plug-in Entry Points

Authorization plug-ins are configured only for an Internet Information Services (IIS) host process. Only one authorization plug-in can be configured per virtual directory.

All authorization plug-ins must support the following entry points:

• WSManPluginStartup
• WSManPluginShutdown
• WSManPluginAuthzUser
• WSManPluginAuthzOperation

The following entry point is optional:

• WSManPluginAuthzQueryQuota

The following table provides an overview of the authorization plug-in entry points in the Windows Remote Management (WinRM) Plug-in API.

Function	Description
WSMAN_PLUGIN_ AUTHORIZE_OPERATION	Called to authorize a specific operation. The DLL entry point name for this method must be WSManPluginAuthzOperation.
WSMAN_PLUGIN_ AUTHORIZE_QUERY_QUOTA	Called after a connection has been authorized to retrieve quota information for the user. The DLL entry point name for this method must be WSManPluginAuthzQueryQuota.
WSMAN_PLUGIN_ AUTHORIZE_RELEASE_CONTEXT	Called to release the context that a plug-in reports from either the WSManPluginAuthzUserComplete or WSManPluginAuthzOperationComplete methods. The DLL entry point name for this method must be WSManPluginAuthzReleaseContext.
WSMAN_PLUGIN_AUTHORIZE_USER	Called to determine whether the user is allowed to carry out a request. The dynamic-link library (DLL) entry point name for this method must be WSManPluginAuthzUser.