SMS_Admin Server WMI Class

 

Updated: November 1, 2013

Applies To: System Center 2012 Configuration Manager, System Center 2012 Configuration Manager SP1, System Center 2012 R2 Configuration Manager

The SMS_Admin Windows Management Instrumentation (WMI) class is an SMS Provider server class, in Configuration Manager, that represents the role-based administration user.

The following syntax is simplified from Managed Object Format (MOF) code and includes all inherited properties.

Class SMS_Admin : SMS_BaseClass
{
    UInt32 AccountType;
    UInt32 AdminID;
    String AdminSid;
    String Categories[];
    String CategoryNames[];
    String CollectionNames[];
    String CreatedBy;
    DateTime CreatedDate;
    String DisplayName;
    String DistinguishedName;
    SMS_AdminExtendedData ExtendedData[];
    Boolean IsCovered;
    Boolean IsDeleted;
    Boolean IsGroup;
    String LastModifiedBy;
    DateTime LastModifiedDate;
    String LogonName;
    SMS_APermission Permissions[];
    String RoleNames[];
    String Roles[];
    String SKey;
    String SourceSite;
};

The following table lists the methods in the SMS_Admin class.

Method

Description

GetAdminExtendedData Method in Class SMS_Admin

Returns extended data the current user and its groups have for a given type.

AccountType

Data type: UInt32

Access type: Read-only

Qualifiers: [read]

The type of account. The possible values are:

0

User

1

Group

2

Machine

128

UnverifiedUser

129

UnverifiedGroup

130

UnverifiedMachine

AdminID

Data type: UInt32

Access type: Read-only

Qualifiers: [key, read]

The ID of the admin object. This value is auto-generated when the object is created and never changed afterward. The default value is 0.

AdminSid

Data type: String

Access type: Read/Write

Qualifiers: [lazy, not_null, unique]

The SID of the user, when the admin is created.

Categories

Data type: String Array

Access type: Read-only

Qualifiers: [lazy, read]

The RBA secured categories associated with this account

CategoryNames

Data type: String Array

Access type: Read-only

Qualifiers: [read]

The name of the RBA secured categories associated with this account.

CollectionNames

Data type: String Array

Access type: Read-only

Qualifiers: [read]

The name of the collections associated with this account.

CreatedBy

Data type: String

Access type: Read-only

Qualifiers: [not_null, read, SizeLimit(“512”)]

The name of the user that created this account.

CreatedDate

Data type: DateTime

Access type: Read-only

Qualifiers: [not_null, read]

The date when this account was created.

DisplayName

Data type: String

Access type: Read/Write

Qualifiers: [sizelimit (“512”)]

The display name of the account.

DistinguishedName

Data type: String

Access type: Read/Write

Qualifiers: [sizelimit(“4000”)]

The distinguished name of the account. If the distinguished name is not null, LogonName and AdminSid will be ignored.

ExtendedData

Data type: SMS_AdminExtendedData Array

Access type: Read/Write

Qualifiers: [lazy]

Reserved for internal use.

IsCovered

Data type: Boolean

Access type: Read-only

Qualifiers: [lazy, read]

true if the current user has more permissions than this account.

IsDeleted

Data type: Boolean

Access type: Read-only

Qualifiers: [read]

true, if the account has been deleted from Active Directory.

IsGroup

Data type: Boolean

Access type: Read-only

Qualifiers: [read]

true, if the account is an Active Directory security group.

LastModifiedBy

Data type: String

Access type: Read-only

Qualifiers: [not_null, read, SizeLimit(“512”)]

The name of the user that last modified this account.

LastModifiedDate

Data type: DateTime

Access type: Read-only

Qualifiers: [not_null, read]

The date the account was last modified.

LogonName

Data type: String

Access type: Read/Write

Qualifiers: [not_null, sizelimit]

The logon name of the account. This could be a Windows NT 4 name (ADS_NAME_TYPE_NT4) or a simple domain name (ADS_NAME_TYPE_DOMAIN_SIMPLE).

Permissions

Data type: SMS_APermission Array

Access type: Read/Write

Qualifiers: [lazy]

The list of permission assigned to this account.

RoleNames

Data type: String Array

Access type: Read-only

Qualifiers: [read]

The list of role names associated with the current user.

Below is a list of the built-in role identifiers and names.

Role Identifier

Role Name

SMS0001R

Full Administrator

SMS0002R

Read-only Analyst

SMS0003R

Remote Tools Operator

SMS0004R

Asset Manager

SMS0006R

Compliance Settings Manager

SMS0007R

Application Deployment Manager

SMS0008R

Application Author

SMS0009R

Application Administrator

SMS000AR

Operating System Deployment Manager

SMS000BR

Infrastructure Manager

SMS000CR

Software Update Manager

SMS000ER

Operations Administrator

SMS000FR

Security Administrator

SMS000GR

EndPoint Protection Manager

Roles

Data type: String Array

Access type: Read-only

Qualifiers: [lazy, read]

The ID of roles associated with the current user.

Below is a list of the built-in role identifiers and names.

Role Identifier

Role Name

SMS0001R

Full Administrator

SMS0002R

Read-only Analyst

SMS0003R

Remote Tools Operator

SMS0004R

Asset Manager

SMS0006R

Compliance Settings Manager

SMS0007R

Application Deployment Manager

SMS0008R

Application Author

SMS0009R

Application Administrator

SMS000AR

Operating System Deployment Manager

SMS000BR

Infrastructure Manager

SMS000CR

Software Update Manager

SMS000ER

Operations Administrator

SMS000FR

Security Administrator

SMS000GR

EndPoint Protection Manager

SKey

Data type: String

Access type: Read-only

Qualifiers: [read]

Reserved for internal use.

SourceSite

Data type: String

Access type: Read-only

Qualifiers: [read, sizelimit(“3”)]

The site where the account was created.

Show: