IAzScope interface (azroles.h)

The IAzScope interface defines a logical container of resources to which the application manages access. The scope name will be used in calls to the AccessCheck method to determine whether a user has the requested access to resources logically contained within the scope.

Inheritance

The IAzScope interface inherits from the IDispatch interface. IAzScope also has these types of members:

Methods

The IAzScope interface has these methods.

IAzScope::AddPolicyAdministrator The AddPolicyAdministrator method of IAzScope adds the specified security identifier in text form to the list of principals that act as policy administrators.
IAzScope::AddPolicyAdministratorName The AddPolicyAdministratorName method of IAzScope adds the specified account name to the list of principals that act as policy administrators.
IAzScope::AddPolicyReader The AddPolicyReader method of IAzScope adds the specified security identifier in text form to the list of principals that act as policy readers.
IAzScope::AddPolicyReaderName The AddPolicyReaderName method of IAzScope adds the specified account name to the list of principals that act as policy readers.
IAzScope::AddPropertyItem Adds the specified principal to the specified list of principals. (IAzScope.AddPropertyItem)
IAzScope::CreateApplicationGroup Creates an IAzApplicationGroup object with the specified name. (IAzScope.CreateApplicationGroup)
IAzScope::CreateRole Creates an IAzRole object with the specified name. (IAzScope.CreateRole)
IAzScope::CreateTask Creates an IAzTask object with the specified name. (IAzScope.CreateTask)
IAzScope::DeleteApplicationGroup Removes the IAzApplicationGroup object with the specified name from the IAzScope object.
IAzScope::DeletePolicyAdministrator The DeletePolicyAdministrator method of IAzScope removes the specified security identifier in text form from the list of principals that act as policy administrators.
IAzScope::DeletePolicyAdministratorName The DeletePolicyAdministratorName method of IAzScope removes the specified account name from the list of principals that act as policy administrators.
IAzScope::DeletePolicyReader The DeletePolicyReader method of IAzScope removes the specified security identifier in text form from the list of principals that act as policy readers.
IAzScope::DeletePolicyReaderName The DeletePolicyReaderName method of IAzScope removes the specified account name from the list of principals that act as policy readers.
IAzScope::DeletePropertyItem Removes the specified principal from the specified list of principals. (IAzScope.DeletePropertyItem)
IAzScope::DeleteRole Removes the IAzRole object with the specified name from the IAzScope object.
IAzScope::DeleteTask Removes the IAzTask object with the specified name from the IAzScope object.
IAzScope::get_ApplicationData The ApplicationData property of IAzScope sets or retrieves an opaque field that can be used by the application to store information. (Get)
IAzScope::get_ApplicationGroups Retrieves an IAzApplicationGroups object that is used to enumerate IAzApplicationGroup objects from the policy data. (IAzScope.get_ApplicationGroups)
IAzScope::get_BizrulesWritable Retrieves a value that indicates whether a non-delegated scope is writable.
IAzScope::get_CanBeDelegated Retrieves a value that indicates whether the scope can be delegated.
IAzScope::get_Description Sets or retrieves a comment that describes the scope. (Get)
IAzScope::get_Name Sets or retrieves the name of the scope. (Get)
IAzScope::get_PolicyAdministrators The PolicyAdministrators property of IAzScope retrieves the security identifiers (SIDs), in text form, of principals that act as policy administrators.
IAzScope::get_PolicyAdministratorsName Retrieves the account names of principals that act as policy administrators. (IAzScope.get_PolicyAdministratorsName)
IAzScope::get_PolicyReaders The PolicyReaders property of IAzScope retrieves the security identifiers (SIDs), in text form, of principals that act as policy readers.
IAzScope::get_PolicyReadersName Retrieves the account names of principals that act as policy readers. (IAzScope.get_PolicyReadersName)
IAzScope::get_Roles Retrieves an IAzRoles object that is used to enumerate IAzRole objects from the policy data.
IAzScope::get_Tasks Retrieves an IAzTasks object that is used to enumerate IAzTask objects from the policy data.
IAzScope::get_Writable Retrieves a value that indicates whether the scope can be modified by the user context that initialized it.
IAzScope::GetProperty Returns the IAzScope object property with the specified property ID.
IAzScope::OpenApplicationGroup Opens an IAzApplicationGroup object by specifying its name. (IAzScope.OpenApplicationGroup)
IAzScope::OpenRole Opens an IAzRole object with the specified name. (IAzScope.OpenRole)
IAzScope::OpenTask Opens an IAzTask object with the specified name. (IAzScope.OpenTask)
IAzScope::put_ApplicationData The ApplicationData property of IAzScope sets or retrieves an opaque field that can be used by the application to store information. (Put)
IAzScope::put_Description Sets or retrieves a comment that describes the scope. (Put)
IAzScope::put_Name Sets or retrieves the name of the scope. (Put)
IAzScope::SetProperty Sets the specified value to the IAzScope object property with the specified property ID.
IAzScope::Submit Persists changes made to the IAzScope object.

Requirements

Requirement	Value
Minimum supported client	Windows Vista [desktop apps only]
Minimum supported server	Windows Server 2003 [desktop apps only]
Target Platform	Windows
Header	azroles.h
Redistributable	Windows Server 2003 Administration Tools Pack on Windows XP