Merge pull request #59 from dsccommunity/CMSecurityRoles

DSC_CMSecurityRoles

CHANGELOG.md

@@ -49,6 +49,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Added CMDistributionPointGroupMembers Resource
 - Added CMSecurityScopes Resource
 - Added CMUserDiscovery Resource
+- Added CMSecurityRoles Resource
 
 ### Changed
 

README.md

@@ -109,6 +109,9 @@ Please check out common DSC Community [contributing guidelines](https://dsccommu
  not remove the Security Scope.
 - **CMUserDiscovery**: Provides a resource to manage the Configuration Manager
  User Discovery method.
+- **CMSecurityRoles**: Provides a resource for adding and removing Security
+ Roles. Note: If the Security Role is currently assigned to an administrator,
+ DSC will not remove the Security Role.
 
 ### xSccmPreReqs
 
@@ -1092,3 +1095,31 @@ Please check out common DSC Community [contributing guidelines](https://dsccommu
 - [CMUserDiscovery_Exclude](Source\Examples\Resources\CMUserDiscovery\CMUserDiscovery_Exclude.ps1)
 - [CMUserDiscovery_Include](Source\Examples\Resources\CMUserDiscovery\CMUserDiscovery_Include.ps1)
 - [CMUserDiscovery_ScheduleNone](Source\Examples\Resources\CMUserDiscovery\CMUserDiscovery_ScheduleNone.ps1)
+
+### CMSecurityRoles
+
+- **[String] SiteCode** _(Key)_: Specifies the Site Code for the Configuration
+ Manager site.
+- **[String] SecurityRoleName** _(Key)_: Specifies the Security Role name.
+- **[String] Description** _(Write)_: Specifies the description of the Security Role.
+- **[String] XmlPath** _(Write)_: Specifies the path the Security Role xml file
+ to evaluate and import.
+- **[Boolean] OverWrite** _(Write)_: Specifies if the Security Roles does not match
+ the xml this will overwrite the policy.
+- **[Boolean] Append** _(Write)_: Specifies additional settings in the xml will
+ be appended to the current Security Role. If append is used a new xml file will
+ be created merging current settings with the additional settings in the xml. Any
+ settings that are currently configured and in the xml will match the settings specified
+ in the xml file. The original XML file will be renamed and be updated with a date
+ time stamp and renamed to .old.
+- **[String] Ensure** _(Write)_: Specifies whether the Security Role
+ is present or absent.
+ - Values include: { Present | Absent }
+- **[String] Operation** _(Read)_: Specifies the configurations of the Security Role.
+- **[String] UsersAssigned[]** _(Read)_: Specifies the accounts associated with the
+ Security Role.
+
+#### CMSecurityRoles Examples
+
+- [CMSecurityRoles_Present](Source\Examples\Resources\CMSecurityRoles\CMSecurityRoles_Present.ps1)
+- [CMSecurityRoles_Absent](Source\Examples\Resources\CMSecurityRoles\CMSecurityRoles_Absent.ps1)

source/ConfigMgrCBDsc.psd1

@@ -74,6 +74,7 @@
  'CMDistributionPointGroupMembers'
  'CMSecurityScopes'
  'CMUserDiscovery'
+ 'CMSecurityRoles'
  )
 
  <#
@@ -91,7 +92,7 @@
  'ManagementPoint','AssetIntelligencePoint','FallbackStatusPoint','SoftwareUpdatePoint','DistrubtionPoint','HeartbeatDiscovery',
  'ServiceConnectionPoint','NetworkDiscovery','ReportingServicePoint','SystemDiscovery','PXEDistributionPoint','PullDistributionPoint',
  'SiteMaintenance','AdministrativeUser','DistributionGroup','SiteSystemServer','StatusReportingComponent','CollectionMembershipEvaluationComponent',
- 'DistributionPointGroupMembers','SecurityScopes','UserDiscovery')
+ 'DistributionPointGroupMembers','SecurityScopes','UserDiscovery','SecurityRoles')
 
  # A URL to the license for this module.
  LicenseUri = 'https://github.com/dsccommunity/ConfigMgrCBDsc/blob/master/LICENSE'