3.29 Class msDS-AzRole

This class defines a set of operations that can be performed by a particular set of users within a particular scope.

 cn: ms-DS-Az-Role
 ldapDisplayName: msDS-AzRole
 governsId: 1.2.840.113556.1.5.239
 objectClassCategory: 1
 rdnAttId: cn
 subClassOf: top
 mayContain: msDS-AzGenericData, msDS-AzObjectGuid
 systemMayContain: description, msDS-MembersForAzRole, 
  msDS-OperationsForAzRole, msDS-TasksForAzRole, msDS-AzApplicationData
 systemPossSuperiors: container, msDS-AzApplication, msDS-AzScope
 schemaIdGuid: 8213eac9-9d55-44dc-925c-e9a52b927644
 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
  (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
  (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;CO)
 defaultHidingValue: TRUE
 systemOnly: FALSE
 defaultObjectCategory: CN=ms-DS-Az-Role,<SchemaNCDN>

Version-Specific Behavior: First implemented on Active Directory Application Mode (ADAM) and Windows Server 2008 operating system.