IAzAuthorizationStore::DeletePolicyReaderName method (azroles.h)

The DeletePolicyReaderName method removes the specified account name from the list of principals that act as policy readers.

Syntax

HRESULT DeletePolicyReaderName(
  [in]           BSTR    bstrReader,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrReader

The account name to remove from the list of policy readers. The account name must be in user principal name (UPN) format (for example, "someone@example.com"). The LookupAccountName function is called to retrieve the domain.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, the method returns S_OK.

Any other HRESULT value indicates that the operation failed.

Remarks

Policy readers for an object can read attributes for the object and for child objects of the object. Readers can also use the policy; for example, readers can call the AccessCheck method. Readers cannot modify the object or its child objects.

To view the list of policy readers in account name format, use the PolicyReadersName property.

Requirements