scenario:
admin wants to be able to run ad-adpermission cmdlet but cmdlet isn’t available.
Follow these steps to resolve:
step 1: Find parent role and create new mgmt role (child role) called Adpermissions for eg
New-ManagementRole -Name “Adpermissions” -Parent “Active Directory Permissions”
New-ManagementRole -Name “Adpermissions” -Parent “Active Directory Permissions”
Step 2: Assign role to a security group. security group must be create must be created prior to doing step 2
New-ManagementRoleAssignment -Name “Adpermissions-Ex2010-AdPermissions” -Role “Adpermissions” -SecurityGroup “Ex2010-AdPermissions”
New-ManagementRoleAssignment -Name “Adpermissions-Ex2010-AdPermissions” -Role “Adpermissions” -SecurityGroup “Ex2010-AdPermissions”
Ex-Shell 