Add-CMSecurityScopeToAdministrativeUser (ConfigurationManager) - Configuration Manager

Use this cmdlet to add a security scope to an administrative user or administrative group in Configuration Manager. For more information about security scopes, see Fundamentals of role-based administration in Configuration Manager. You can specify an administrative user or group by name or by ID or you can use the use the Get-CMAdministrativeUser cmdlet to obtain a user or group object. An administrative user in Configuration Manager defines a local or domain user or group. You can specify a security scope to add by name or by ID or you can use the Get-CMSecurityScope cmdlet to obtain a security scope. Note Run Configuration Manager cmdlets from the Configuration Manager site drive, for example PS XYZ:\>. For more information, see getting started.