Forum Discussion

Tonaco_pt's avatar
Tonaco_pt
Moderator
3 years ago

Get-EVArchive does not list manual permssion

Hello,

Using the PowerShell cmdlet Get-EVArchive to retrieve what archive a user has access, but the command does not return the archive with manually set permission.

I'm doing something wrong?

Does anyone have this issue?

We are on Enterprise Vault 14.1.0.1144

 

  • Marcde's avatar
    Marcde
    Moderator
    3 years ago

    Hi,

    can confirm the same in 12.5.3 but based on the description of the -user option i'd say that this is by design even though it sounds a bit vague:

     Archives in which a specified user has various permissions, either directly or through membership of an Active Directory group

     

    Regards

    Marc

    • Tonaco_pt's avatar
      Tonaco_pt
      Moderator
      3 years ago

      I create a powershell script to get this information. 

      My script first finds the user and group (we use to give permissions) SID, with this sid I run the following sql query, I got here (VOX)

      Select AA.ArchiveName,  RT.VaultEntryId AS ArchiveID, ac.ACEType as PermissionType, TT.SID 
from Archive AA
Inner join ACE AC
on aa.RootIdentity = ac.RootIdentity
Inner join Trustee TT
ON  TT.TrusteeIdentity = AC.TrusteeIdentity
INNER JOIN Root RT
ON RT.RootIdentity = AA.RootIdentity
Where  TT.SID  in ('<sid1>,<sid2>')

       

    • Prone2Typos's avatar
      Prone2Typos
      Moderator
      3 years ago

      Through support, but you may find that this is by design, and therefore an enhancement and not a defect. And there is a twist, poor design being executed properly is still executed by design, despite it being poorly designed.