Поделиться через

Define an Operation in Authorization Manager

  • Статья

Applies To: Windows Server 2008

Important

Authorization Manager is available for use in the following versions of Windows: Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows XP, Windows Vista, Windows 7, and Windows 8. It is deprecated as of Windows Server 2012 R2 and may be removed in subsequent versions.

An operation is a particular action or access that needs to be controlled or restricted by Authorization Manager. Operations are defined at the application level. Operations are combined into tasks at either the application or scope level.

You must be assigned to the Authorization Manager Administrator user role to complete this procedure. By default, Administrators is the minimum Windows group membership assigned to this role. Review the details in "Additional considerations" in this topic.

Define an operation in Authorization Manager

  1. If necessary, open Authorization Manager.

  2. If necessary, open or create an authorization store that contains an application.

  3. In the console tree, expand the application, and then expand Definitions.

  4. Right-click Operation Definitions, and choose New Operation Definition.

  5. Define the operation by providing a name, description, and operation number. The name and description are for your convenience. The operation number must be used by the calling program. The operation number is called an OperationID in the Application Programming Interface (API). The number must be a positive integer, greater than zero (0). For more information, see "Additional references" in this topic.

  6. Click OK

Additional considerations

  • To perform this procedure, you need to have access to an authorization store. By default, members of the Administrators group have the required access, but Authorization manager allows you to delegate responsibility. For more information, see Allow Other Users to Administer an Authorization Store.

  • To define an operation using the Authorization Manager console, you must use developer mode.

Additional references