IAzAuthorizationStore::AddPolicyReader method (azroles.h)

The AddPolicyReader method adds the specified security identifier (SID) in text form to the list of principals that act as policy readers.

Syntax

HRESULT AddPolicyReader(
  [in]           BSTR    bstrReader,
  [in, optional] VARIANT varReserved
);

Parameters

[in] bstrReader

Text form of the SID to add to the list of policy readers.

[in, optional] varReserved

Reserved for future use.

Return value

If the method succeeds, it will return S_OK. Any other HRESULT value indicates that the operation failed.

Remarks

Policy readers for an object can read attributes for the object and for child objects of the object. Readers can also use the policy; for example, readers can call the AccessCheck method. Readers cannot modify the object or its child objects.

To view the list of policy readers, use the PolicyReaders property.

You must call the Submit method to persist any changes made by this method.

Requirements

See also

AccessCheck

Submit