Skip to content

Commit 161cf38

Browse files
authored
Update disconnected-operations-identity.md
Revised text
1 parent 16240b1 commit 161cf38

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

azure-local/manage/disconnected-operations-identity.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -308,7 +308,7 @@ $group = Get-ADGroup -Identity $groupName | Select-Object Name, ObjectGUID
308308
$group
309309
```
310310

311-
### Grant read access to the LDAP user on Users
311+
### Grant LDAP User read access on Users with inherit option
312312

313313
The following example grants read access to the LDAP user on the Users container using the `ActiveDirectorySecurityInheritance "All"` setting. Assigning an access rule with "All" makes the rule apply to the entire subtree of the target object.
314314

@@ -322,7 +322,7 @@ Set-ACL -Path "AD:\$($domain.DistinguishedName)" -AclObject $acl
322322
Write-Verbose "Granted 'GenericRead' permissions to ldap account."
323323
```
324324

325-
### Grant the GSMA account permission to read user properties (from the sync group)
325+
### Grant the GSMA account permission to read user properties
326326

327327
The following example shows how to let the GSMA account read user properties in Active Directory from the sync group.
328328

0 commit comments

Comments
 (0)