API Reference

Class

AdxAclService

Namespace ADPlayground.Acl

Assembly ADPlayground

Source ADPlayground/ACL/AdxAclService.cs:21

Modifiers static

Chatbot-friendly ACL tooling facade over ADXACL/ACL operations. Provides identity translation and one-call get/set/modify/add/remove flows.

Inheritance

Object
AdxAclService

Methods

AddPermission 6 overloads

public static AdxAclModifyResult AddPermission(String adObject, AdxAclPermissionRequest request) #

ADPlayground/ACL/AdxAclService.cs:427

Returns: AdxAclModifyResult

Adds a single permission entry.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
request ADPlayground.Acl.AdxAclPermissionRequest requiredposition: 1: Permission entry to add.

Returns

Modify result with one resolved add request.

AddPermission(System.DirectoryServices.DirectoryEntry entry, ADPlayground.Acl.AdxAclPermissionRequest request) #

Adds a single permission entry.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to add.

Returns

Modify result with one resolved add request.

AddPermission(System.String adObject, ADPlayground.Acl.AdxAclPermissionRequest request) #

Adds a single permission entry.

Parameters

adObject System.String required: AD object path or DN.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to add.

Returns

Modify result with one resolved add request.

public static AdxAclGovernedOperationResult AddPermission(String adObject, AdxAclPermissionRequest request, AdxAclExecutionOptions executionOptions, AdxAclWriteAuthorizationPolicy policy = null)

ADPlayground/ACL/AdxAclService.cs:709

Returns: AdxAclGovernedOperationResult

Executes a governance-aware add operation using IX-style intent/approval metadata.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
request ADPlayground.Acl.AdxAclPermissionRequest requiredposition: 1: Permission entry to add.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions requiredposition: 2: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy = null optionalposition: 3: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

AddPermission(System.DirectoryServices.DirectoryEntry entry, ADPlayground.Acl.AdxAclPermissionRequest request, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy)

Executes a governance-aware add operation using IX-style intent/approval metadata.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to add.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

AddPermission(System.String adObject, ADPlayground.Acl.AdxAclPermissionRequest request, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy)

Executes a governance-aware add operation using IX-style intent/approval metadata.

Parameters

adObject System.String required: AD object path or DN.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to add.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

public static AdxAclWriteAuthorizationResult AuthorizeWrite(AdxAclExecutionOptions executionOptions, Boolean requiresWrite, AdxAclWriteAuthorizationPolicy policy = null)

ADPlayground/ACL/AdxAclService.GovernanceAndHelpers.cs:58

Returns: AdxAclWriteAuthorizationResult

Authorizes a pending ACL write operation using IX-style governance requirements.

Parameters

executionOptions ADPlayground.Acl.AdxAclExecutionOptions requiredposition: 0: Execution options (intent/allow-write/dry-run/metadata).
requiresWrite System.Boolean requiredposition: 1: True when the operation would mutate ACL state if applied.
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy = null optionalposition: 2: Optional authorization policy. Defaults to strict policy.

Returns

Authorization result for the requested operation.

GetSnapshot 3 overloads

public static AdxAclSnapshot GetSnapshot(DirectoryEntry entry) #

ADPlayground/ACL/AdxAclService.cs:99

Returns: AdxAclSnapshot

Builds a tooling snapshot from a security descriptor.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor.

Returns

ACL snapshot.

GetSnapshot(System.DirectoryServices.DirectoryEntry entry) #

Builds a tooling snapshot from a directory entry.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry.

Returns

ACL snapshot.

public static AdxAclSnapshot GetSnapshot(String adObject) #

ADPlayground/ACL/AdxAclService.cs:110

Returns: AdxAclSnapshot

Builds a tooling snapshot from an AD object path.

Parameters

adObject System.String requiredposition: 0: AD object path or DN.

Returns

ACL snapshot.

ModifyPermissions 6 overloads

public static AdxAclModifyResult ModifyPermissions(String adObject, IEnumerable<AdxAclPermissionRequest> addRequests = null, IEnumerable<AdxAclPermissionRequest> removeRequests = null)

ADPlayground/ACL/AdxAclService.cs:397

Returns: AdxAclModifyResult

Modifies explicit permissions by removing and adding selected entries.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} = null optionalposition: 1: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} = null optionalposition: 2: Entries to remove.

Returns

Modify result with resolved identities and counts.

ModifyPermissions(System.DirectoryServices.DirectoryEntry entry, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} addRequests, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} removeRequests)

Modifies explicit permissions by removing and adding selected entries.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to remove.

Returns

Modify result with resolved identities and counts.

ModifyPermissions(System.String adObject, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} addRequests, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} removeRequests)

Modifies explicit permissions by removing and adding selected entries.

Parameters

adObject System.String required: AD object path or DN.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to remove.

Returns

Modify result with resolved identities and counts.

public static AdxAclGovernedOperationResult ModifyPermissions(String adObject, AdxAclExecutionOptions executionOptions, AdxAclWriteAuthorizationPolicy policy = null, IEnumerable<AdxAclPermissionRequest> addRequests = null, IEnumerable<AdxAclPermissionRequest> removeRequests = null)

ADPlayground/ACL/AdxAclService.cs:590

Returns: AdxAclGovernedOperationResult

Executes a governance-aware modify operation using IX-style intent/approval metadata.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions requiredposition: 1: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy = null optionalposition: 2: Optional authorization policy. Defaults to strict policy.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} = null optionalposition: 3: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} = null optionalposition: 4: Entries to remove.

Returns

Governed operation result including authorization and change preview.

ModifyPermissions(System.DirectoryServices.DirectoryEntry entry, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} addRequests, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} removeRequests)

Executes a governance-aware modify operation using IX-style intent/approval metadata.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to remove.

Returns

Governed operation result including authorization and change preview.

ModifyPermissions(System.String adObject, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} addRequests, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} removeRequests)

Executes a governance-aware modify operation using IX-style intent/approval metadata.

Parameters

adObject System.String required: AD object path or DN.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to remove.

Returns

Governed operation result including authorization and change preview.

OverwritePermissions 3 overloads

public static AclChangeSet OverwritePermissions(String adObject, IEnumerable<AdxAclPermissionRequest> requests) #

ADPlayground/ACL/AdxAclService.cs:339

Returns: AclChangeSet

Alias for AdxAclPermissionRequest>).

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requiredposition: 1: Desired entries.

Returns

Change set applied by the operation.

OverwritePermissions(System.DirectoryServices.DirectoryEntry entry, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests)

Alias for AdxAclPermissionRequest>).

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.

Returns

Change set applied by the operation.

OverwritePermissions(System.String adObject, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests)

Alias for AdxAclPermissionRequest>).

Parameters

adObject System.String required: AD object path or DN.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.

Returns

Change set applied by the operation.

PreviewModifyPermissions 3 overloads

public static AclChangeSet PreviewModifyPermissions(String adObject, IEnumerable<AdxAclPermissionRequest> addRequests = null, IEnumerable<AdxAclPermissionRequest> removeRequests = null)

ADPlayground/ACL/AdxAclService.cs:504

Returns: AclChangeSet

Previews ACL changes required for a modify operation (remove then add). This method does not apply changes.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to evaluate.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} = null optionalposition: 1: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} = null optionalposition: 2: Entries to remove.

Returns

Computed ACL change set.

PreviewModifyPermissions(System.DirectoryServices.DirectoryEntry entry, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} addRequests, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} removeRequests)

Previews ACL changes required for a modify operation (remove then add). This method does not apply changes.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to evaluate.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to remove.

Returns

Computed ACL change set.

PreviewModifyPermissions(System.String adObject, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} addRequests, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} removeRequests)

Previews ACL changes required for a modify operation (remove then add). This method does not apply changes.

Parameters

adObject System.String required: AD object path or DN.
addRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to add.
removeRequests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Entries to remove.

Returns

Computed ACL change set.

PreviewSetPermissions 3 overloads

public static AclChangeSet PreviewSetPermissions(String adObject, IEnumerable<AdxAclPermissionRequest> requests) #

ADPlayground/ACL/AdxAclService.cs:195

Returns: AclChangeSet

Previews ACL changes required to replace explicit entries with the supplied desired entries. This method does not apply changes.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to evaluate.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requiredposition: 1: Desired entries.

Returns

Computed ACL change set.

PreviewSetPermissions(System.DirectoryServices.DirectoryEntry entry, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests)

Previews ACL changes required to replace explicit entries with the supplied desired entries. This method does not apply changes.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to evaluate.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.

Returns

Computed ACL change set.

PreviewSetPermissions(System.String adObject, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests)

Previews ACL changes required to replace explicit entries with the supplied desired entries. This method does not apply changes.

Parameters

adObject System.String required: AD object path or DN.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.

Returns

Computed ACL change set.

RemovePermission 6 overloads

public static AdxAclModifyResult RemovePermission(String adObject, AdxAclPermissionRequest request) #

ADPlayground/ACL/AdxAclService.cs:454

Returns: AdxAclModifyResult

Removes a single permission entry.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
request ADPlayground.Acl.AdxAclPermissionRequest requiredposition: 1: Permission entry to remove.

Returns

Modify result with one resolved remove request.

RemovePermission(System.DirectoryServices.DirectoryEntry entry, ADPlayground.Acl.AdxAclPermissionRequest request) #

Removes a single permission entry.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to remove.

Returns

Modify result with one resolved remove request.

RemovePermission(System.String adObject, ADPlayground.Acl.AdxAclPermissionRequest request) #

Removes a single permission entry.

Parameters

adObject System.String required: AD object path or DN.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to remove.

Returns

Modify result with one resolved remove request.

public static AdxAclGovernedOperationResult RemovePermission(String adObject, AdxAclPermissionRequest request, AdxAclExecutionOptions executionOptions, AdxAclWriteAuthorizationPolicy policy = null)

ADPlayground/ACL/AdxAclService.cs:795

Returns: AdxAclGovernedOperationResult

Executes a governance-aware remove operation using IX-style intent/approval metadata.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
request ADPlayground.Acl.AdxAclPermissionRequest requiredposition: 1: Permission entry to remove.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions requiredposition: 2: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy = null optionalposition: 3: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

RemovePermission(System.DirectoryServices.DirectoryEntry entry, ADPlayground.Acl.AdxAclPermissionRequest request, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy)

Executes a governance-aware remove operation using IX-style intent/approval metadata.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to remove.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

RemovePermission(System.String adObject, ADPlayground.Acl.AdxAclPermissionRequest request, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy)

Executes a governance-aware remove operation using IX-style intent/approval metadata.

Parameters

adObject System.String required: AD object path or DN.
request ADPlayground.Acl.AdxAclPermissionRequest required: Permission entry to remove.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

public static AdxAclResolvedPermission ResolvePermission(AdxAclPermissionRequest request) #

ADPlayground/ACL/AdxAclService.cs:21

Returns: AdxAclResolvedPermission

Resolves identity input to SID and returns normalized permission metadata.

Parameters

request ADPlayground.Acl.AdxAclPermissionRequest requiredposition: 0: Permission request to resolve.

Returns

Resolved request with SID and display name.

public static IReadOnlyList<AdxAclResolvedPermission> ResolvePermissions(IEnumerable<AdxAclPermissionRequest> requests) #

ADPlayground/ACL/AdxAclService.cs:65

Returns: IReadOnlyList<AdxAclResolvedPermission>

Resolves a collection of permission requests to normalized SID-based entries.

Parameters

requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requiredposition: 0: Permission requests.

Returns

Resolved permissions.

SetPermissions 6 overloads

public static AclChangeSet SetPermissions(String adObject, IEnumerable<AdxAclPermissionRequest> requests) #

ADPlayground/ACL/AdxAclService.cs:151

Returns: AclChangeSet

Replaces explicit ACL entries with the supplied desired entries.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requiredposition: 1: Desired entries.

Returns

Change set applied by the operation.

SetPermissions(System.DirectoryServices.DirectoryEntry entry, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests)

Replaces explicit ACL entries with the supplied desired entries.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.

Returns

Change set applied by the operation.

SetPermissions(System.String adObject, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests)

Replaces explicit ACL entries with the supplied desired entries.

Parameters

adObject System.String required: AD object path or DN.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.

Returns

Change set applied by the operation.

public static AdxAclGovernedOperationResult SetPermissions(String adObject, IEnumerable<AdxAclPermissionRequest> requests, AdxAclExecutionOptions executionOptions, AdxAclWriteAuthorizationPolicy policy = null)

ADPlayground/ACL/AdxAclService.cs:274

Returns: AdxAclGovernedOperationResult

Executes a governance-aware Set operation using IX-style intent/approval metadata.

Parameters

security System.DirectoryServices.ActiveDirectorySecurity requiredposition: 0: Security descriptor to modify.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requiredposition: 1: Desired entries.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions requiredposition: 2: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy = null optionalposition: 3: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

SetPermissions(System.DirectoryServices.DirectoryEntry entry, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy)

Executes a governance-aware Set operation using IX-style intent/approval metadata.

Parameters

entry System.DirectoryServices.DirectoryEntry required: Directory entry to modify.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

SetPermissions(System.String adObject, System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} requests, ADPlayground.Acl.AdxAclExecutionOptions executionOptions, ADPlayground.Acl.AdxAclWriteAuthorizationPolicy policy)

Executes a governance-aware Set operation using IX-style intent/approval metadata.

Parameters

adObject System.String required: AD object path or DN.
requests System.Collections.Generic.IEnumerable{ADPlayground.Acl.AdxAclPermissionRequest} required: Desired entries.
executionOptions ADPlayground.Acl.AdxAclExecutionOptions required: Execution options (intent/allow-write/dry-run/metadata).
policy ADPlayground.Acl.AdxAclWriteAuthorizationPolicy required: Optional authorization policy. Defaults to strict policy.

Returns

Governed operation result including authorization and change preview.

public static Boolean TryCreatePermissionRequest(String identity, String rights, String accessControlType, String inheritance, out AdxAclPermissionRequest request, out String error)

ADPlayground/ACL/AdxAclService.GovernanceAndHelpers.cs:300

Returns: Boolean

Creates a permission request from chatbot-friendly text inputs.

Parameters

identity System.String requiredposition: 0: Identity value (SID/name/UPN/DN).
rights System.String requiredposition: 1: Rights value (for example GenericRead|WriteDacl).
accessControlType System.String requiredposition: 2: Optional access control type (Allow/Deny). Defaults to Allow.
inheritance System.String requiredposition: 3: Optional inheritance mode. Defaults to None.
request ADPlayground.Acl.AdxAclPermissionRequest@ requiredposition: 4: Created request on success.
error System.String@ requiredposition: 5: Validation error on failure.

Returns

True when request creation succeeds.

public static Boolean TryParseAccessControlType(String value, out AccessControlType accessControlType) #

ADPlayground/ACL/AdxAclService.GovernanceAndHelpers.cs:204

Returns: Boolean

Parses access control type from text (Allow/Deny).

Parameters

value System.String requiredposition: 0: Text value.
accessControlType System.Security.AccessControl.AccessControlType@ requiredposition: 1: Parsed access control type on success.

Returns

True when parsing succeeds.

public static Boolean TryParseInheritance(String value, out AclInheritance inheritance) #

ADPlayground/ACL/AdxAclService.GovernanceAndHelpers.cs:236

Returns: Boolean

Parses inheritance from text.

Parameters

value System.String requiredposition: 0: Text value.
inheritance ADPlayground.Acl.AclInheritance@ requiredposition: 1: Parsed inheritance on success.

Returns

True when parsing succeeds.

public static Boolean TryParseIntent(String value, out AdxAclExecutionIntent intent) #

ADPlayground/ACL/AdxAclService.GovernanceAndHelpers.cs:22

Returns: Boolean

Parses execution intent from text.

Parameters

value System.String requiredposition: 0: Text value.
intent ADPlayground.Acl.AdxAclExecutionIntent@ requiredposition: 1: Parsed intent on success.

Returns

True when parsing succeeds.

public static Boolean TryParseRights(String value, out AclRights rights) #

ADPlayground/ACL/AdxAclService.GovernanceAndHelpers.cs:186

Returns: Boolean

Parses rights from text (supports enum names and comma-separated flag lists).

Parameters

value System.String requiredposition: 0: Text value.
rights ADPlayground.Acl.AclRights@ requiredposition: 1: Parsed rights on success.

Returns

True when parsing succeeds.

Inherited Methods

Properties

public static IAdxAclGovernanceAuditSink GovernanceAuditSink { get; set; } #

ADPlayground/ACL/AdxAclService.GovernanceAudit.cs:22

Gets or sets sink used to persist governed ACL operation audit events. Set to null to disable persistence.