MICROSOFT LYNC 2013 SERVER ROLES SOFTWARE

The SalesUsersAdministrator universal security group must already be created for this cmdlet to work.

It creates a Sales Users Administrator role to administer the user accounts in the Sales organizational unit. The following example limits user scope instead of server scope. Note that both the role itself, and the universal security group it is assigned to are called Site01 Server Administrators. Additionally, any users who are later added to this universal security group also gain the privileges of this role. New-CsAdminRole -Identity 'Site01 Server Administrators' -Template CsServerAdministrator -ConfigScopes 'site:Site01'ДЄfter this cmdlet runs, all users who are members of the Site01 Server Administrators group will have server administrator privileges for the servers in Site01. For this cmdlet to work, the Site01 site must already be defined, and a universal security group named Site01 Server Administrators must already exist. The role has the abilities of the predefined CsServerAdministrator role, but only for the servers located in the Site01 site. It creates a new role called Site01 Server Administrators. The following cmdlet is an example of a creating a role which has the privileges of one of the pre-defined administrative roles, but with limited scope. The Active Directory group you specify must already be created.

When you create a role with limited scope (a scoped role), you specify the scope, along with the existing role it is based on and the Active Directory group to be assigned the role. To accomplish this, you can create roles which are based on an existing role, but with a more limited scope. To follow least privilege practices, you should not assign users to roles with global scope if they are going to administer only a limited set of servers or users. This role is always assigned with a global scope.Д¬an manage the Persistent Chat feature and specific Persistent Chat rooms.ДЄll predefined roles shipped in Lync Server have a global scope. Lowest level of rights for Enhanced 9-1-1 (E9-1-1) management, including creating E9-1-1 locations and network identifiers, and associating these with each other. Cannot change user properties or policies, server configuration, or services.Д¬an modify archiving configuration and policies.Д¬an manage the configuration of the Response Group application within a site. Cannot make changes with global configuration impact.Д¬an view the deployment, including user and server information, in order to monitor deployment health.Д¬an view the deployment, including user's properties and policies.

MICROSOFT LYNC 2013 SERVER ROLES SOFTWARE

Can prevent new connections to servers, stop and start services, and apply software updates. Cannot modify policies.Д¬an create, configure, and manage voice-related settings and policies.Д¬an manage, monitor, and troubleshoot servers and services. Can expand a deployment by adding new sites, pools, and services.Д¬an enable and disable users for Lync Server, move users and assign existing policies to users. Predefined Administrative Roles RoleД¬an perform all administrative tasks and modify all settings, including creating roles and assigning users to roles. The fourth column shows the similar Microsoft Exchange Server role for each Lync Server role, if there is one. The following table lists the predefined roles in Lync Server, and gives a general overview of the types of tasks each can do. The objects that scope affects can be either user accounts (grouped by organizational unit) or servers (grouped by site). A scope is the set of objects which the cmdlets defined in a role can operate on. In RBAC, a role is enabled to use a list of cmdlets, designed to be useful for a certain type of administrator or technician.

Microsoft lync 2013 server roles