powershell PS SP用户配置文件权限

Posted 2021-05-22

$USPA = Get-SpServiceapplication | Where-Object {$_.TypeName -eq "User Profile Service Application"}
$sec = Get-SPServiceApplicationSecurity $USPA

#This is where I found the issue
$sec.AccessRules

#And here's how I fixed it

$account = New-SPClaimsPrincipal psns\psc28010sa -IdentityType WindowsSamAccountName
$sec = Get-SPServiceApplicationSecurity $USPA
Grant-SPObjectSecurity $sec -Principal $account -Rights "Full Control"
Set-SPServiceApplicationSecurity -Identity $USPA -ObjectSecurity $sec