3.4.4.3.3.1.7 ActiveDirectoryDirectoryServer/OperationMasterRole

The OperationMasterRole element contains an array of ActiveDirectoryOperationMasterRole (section 2.2.5.3) elements representing the FSMO roles held by this domain controller.

 <xs:element
   name="OperationMasterRole" nillable="true"
   type="ca:ArrayOfActiveDirectoryOperationMasterRole" />

The OperationMasterRole element is populated by comparing the nTDSDSA!distinguishedName attribute on the nTDSDSA object specified in the  GetADDomainControllerRequest/NtdsSettingsDN (section 3.4.4.3.2.3) input parameter element with the FSMO roles held in the domain. The fsmoRoleOwner attribute on each of the following objects contains the DN of the FSMO role holder. If the DN of the FSMO role holder is equal to the nTDSDSA!distinguishedName attribute, the OperationMasterRole array contains a corresponding <ActiveDirectoryOperationMasterRole> element. If the nTDSDSA!distinguishedName attribute is not present or cannot be read due to the client lacking access rights to read the attribute, the server returns a null ActiveDirectoryDirectoryServer/OperationMasterRole element. If the nTDSDSA!distinguishedName attribute is not equal to any of the fsmoRoleOwner attributes, either because the fsmoRoleOwner attribute has a different value or because the attribute is not present or cannot be read due to the client lacking access rights to read the attribute, the server returns an empty ActiveDirectoryDirectoryServer/OperationMasterRole element.

The fsmoRoleOwner attributes, and the corresponding FSMO role, are listed in the following table.