< Back
Remove-AadrmRoleBasedAdministrator
Post
NAME Remove-AadrmRoleBasedAdministrator
SYNOPSIS
Removes administrative rights from Rights Management.
SYNTAX
Remove-AadrmRoleBasedAdministrator [-EmailAddress <String>] [-Role <Role>] [<CommonParameters>]
Remove-AadrmRoleBasedAdministrator [-ObjectId <Guid>] [-Role <Role>] [<CommonParameters>]
Remove-AadrmRoleBasedAdministrator [-Role <Role>] [-SecurityGroupDisplayName <String>] [<CommonParameters>]
DESCRIPTION
The Remove-AadrmRoleBasedAdministrator cmdlet removes administrative rights to your organization's Azure Rights
Management service, so that administrators you have previously delegated to configure this service can no longer
do so by using PowerShell commands.
You must use PowerShell to configure delegated administrative control for the Azure Rights Management service; you
cannot do this configuration by using a management portal.
To see the full list of delegated administrators for the Azure Rights Management service, use
Get-AadrmRoleBasedAdministrator. Run the Remove-AadrmRoleBasedAdministrator cmdlet for each user or group that you
want to remove from the list.
PARAMETERS
-EmailAddress <String>
Specifies the email address of a user or group to remove administrative rights for the Azure Rights Management
service. If the user has no email address, specify the user's Universal Principal Name.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
-ObjectId <Guid>
Specifies the GUID of a user or group to remove administrative rights for the Azure Rights Management service.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
-Role <Role>
Specifies a role. The cmdlet removes an administrator that belongs to the role that you specify.
The acceptable values for this parameter are:
- ConnectorAdministrator
- GlobalAdministrator
If you do not specify a role, the cmdlet removes the administrator from the GlobalAdministrator role.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
-SecurityGroupDisplayName <String>
Specifies the display name of a user or group that should no longer have administrative rights for the Azure
Rights Management service.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
NOTES
Example 1: Remove administrative rights by using a display name
PS C:\\>Remove-AadrmRoleBasedAdministrator -SecurityGroupDisplayName "Finance Employees"
This command removes administrative rights to the Azure Rights Management service for the group that has a display
name of "Finance Employees".
Example 2: Remove administrative rights by using an email address
PS C:\\>Remove-AadrmRoleBasedAdministrator -EmailAddress "EvanNarvaez@Contoso.com"
This command removes administrative rights to the Azure Rights Management service for the user who has an email
address of "EvanNarvaez@Contoso.com".
RELATED LINKS
Online Version: http://go.microsoft.com/fwlink/?LinkId=400620
Add-AadrmRoleBasedAdministrator
Get-AadrmRoleBasedAdministrator
SYNOPSIS
Removes administrative rights from Rights Management.
SYNTAX
Remove-AadrmRoleBasedAdministrator [-EmailAddress <String>] [-Role <Role>] [<CommonParameters>]
Remove-AadrmRoleBasedAdministrator [-ObjectId <Guid>] [-Role <Role>] [<CommonParameters>]
Remove-AadrmRoleBasedAdministrator [-Role <Role>] [-SecurityGroupDisplayName <String>] [<CommonParameters>]
DESCRIPTION
The Remove-AadrmRoleBasedAdministrator cmdlet removes administrative rights to your organization's Azure Rights
Management service, so that administrators you have previously delegated to configure this service can no longer
do so by using PowerShell commands.
You must use PowerShell to configure delegated administrative control for the Azure Rights Management service; you
cannot do this configuration by using a management portal.
To see the full list of delegated administrators for the Azure Rights Management service, use
Get-AadrmRoleBasedAdministrator. Run the Remove-AadrmRoleBasedAdministrator cmdlet for each user or group that you
want to remove from the list.
PARAMETERS
-EmailAddress <String>
Specifies the email address of a user or group to remove administrative rights for the Azure Rights Management
service. If the user has no email address, specify the user's Universal Principal Name.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
-ObjectId <Guid>
Specifies the GUID of a user or group to remove administrative rights for the Azure Rights Management service.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
-Role <Role>
Specifies a role. The cmdlet removes an administrator that belongs to the role that you specify.
The acceptable values for this parameter are:
- ConnectorAdministrator
- GlobalAdministrator
If you do not specify a role, the cmdlet removes the administrator from the GlobalAdministrator role.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
-SecurityGroupDisplayName <String>
Specifies the display name of a user or group that should no longer have administrative rights for the Azure
Rights Management service.
Required? false
Position? named
Default value None
Accept pipeline input? True (ByPropertyName, ByValue)
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
NOTES
Example 1: Remove administrative rights by using a display name
PS C:\\>Remove-AadrmRoleBasedAdministrator -SecurityGroupDisplayName "Finance Employees"
This command removes administrative rights to the Azure Rights Management service for the group that has a display
name of "Finance Employees".
Example 2: Remove administrative rights by using an email address
PS C:\\>Remove-AadrmRoleBasedAdministrator -EmailAddress "EvanNarvaez@Contoso.com"
This command removes administrative rights to the Azure Rights Management service for the user who has an email
address of "EvanNarvaez@Contoso.com".
RELATED LINKS
Online Version: http://go.microsoft.com/fwlink/?LinkId=400620
Add-AadrmRoleBasedAdministrator
Get-AadrmRoleBasedAdministrator