powershell - 将 SharePoint 组替换为另一个

Question

我有一个带有许多子网站的 SharePoint 网站。在一些站点和子站点上有一个名为“a-team”的广告组。

组“a-team”必须不再具有访问权限。一个名为“c-team”的新组已创建。我的问题是在“a-team”所在的所有站点/子站点上用“c-team”替换“a-team”。没有“a-team”关闭的站点/子站点不会添加“c-team”。

现在，将“c-team”添加到所有站点/子站点的代码是错误的。如果组“a-team”在站点/子站点上，它只会添加组。没有“a-team”关闭的子站点不会添加“c-team”。

[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint")
$siteUrl = "http://MyTest.demosite.net/sites/EAL"
$permissionLevel = "Design"
$domainGroup = "c:0+.w|s-1-5-21-3475484702-42583850-3077926241-3108" # a-team
$domainGroupAdd = "c:0+.w|s-1-5-21-3475484702-42583850-3077926241-3110" # c-team
$spSite = new-object Microsoft.SharePoint.SPSite($siteUrl)
$firstTime = "true";
$myRole;

foreach ($web in $spSite.AllWebs){
## Finding role ##
$roles = $Web.RoleDefinitions;                
$roleAssignments = $web.RoleAssignments;
if ($firstTime -eq "true")
{
    for($k = 0; $k -lt $roles.Count; $k++){
        Write-Output $web.Url
        $role = $roles[$k]         
        if( $role.Name -eq $permissionLevel)
        {                
            $myRole = $role; # Role fundet                             
        }
    }
    $firstTime = "false";
}    

 ## Adding group "c-team" to site ##
if($roleAssignment.Member.SystemUserKey -eq  $domainGroup){
    Write-Host -ForegroundColor White -BackgroundColor Green "Found the right type " $role.Name;
    $assignment = New-Object Microsoft.SharePoint.SPRoleAssignment($domainGroupAdd, "", "", "");
    $assignment.RoleDefinitionBindings.Add($myRole);
    $roleassignments = $web.RoleAssignments;
    $roleassignments.Add($assignment);
    Write-Output $web.Url;
}

$web.Dispose();
}
$spSite.Dispose();

例子

前：

http://MyTest.demosite.net/sites/EAL" - Site permissions: "a-team", admin
http://MyTest.demosite.net/sites/EAL/Test1" - Site permissions: "a-team", admin
http://MyTest.demosite.net/sites/EAL/Test2" - Site permissions: admin
http://MyTest.demosite.net/sites/EAL/Test3" - Site permissions: "a-team", admin
http://MyTest.demosite.net/sites/EAL/Test4" - Site permissions: admin

After:
http://MyTest.demosite.net/sites/EAL" - Site permissions: "c-team", admin
http://MyTest.demosite.net/sites/EAL/Test1" - Site permissions: "c-team", admin
http://MyTest.demosite.net/sites/EAL/Test2" - Site permissions: admin
http://MyTest.demosite.net/sites/EAL/Test3" - Site permissions: "c-team", admin
http://MyTest.demosite.net/sites/EAL/Test4" - Site permissions: admin

Answer 1

我找到了解决方案。替换共享点中的组：

首先添加新的，然后删除旧的。

$siteUrl = "http://MyDemosite.demosite.net/sites/EAL" 
$permissionLevel = "Design" 
$oldGroupName    = "eal\a-team" 
$newGroup = "c:0+.w|s-1-5-21-3475484702-42583850-3077926241-3109" 

$spSite = new-object Microsoft.SharePoint.SPSite($siteUrl) 

$firstTime = "true";
$myRole;

foreach ($web in $spSite.allwebs)
{    
    $roles = $web.RoleDefinitions; 

    if ($firstTime -eq "true")
    {
        for($k = 0; $k -lt $roles.Count; $k++)
        {
            Write-Output $web.Url
            $role = $roles[$k]         
            if( $role.Name -eq $permissionLevel)
            {                
                $myRole = $role;                              
            }
        }
        $firstTime = "false";
    }   

    foreach ($name in $web.RoleAssignments.member.displayname) 
    {
        if($name -eq $oldGroupName)
        { 
            Write-Host -ForegroundColor White -BackgroundColor Green "Found the right type " $role.Name
            $assignment = New-Object Microsoft.SharePoint.SPRoleAssignment($newGroup, "", "", "");
            $assignment.RoleDefinitionBindings.Add($myRole);
            $roleassignments = $web.RoleAssignments;
            $roleassignments.Add($assignment);
            Write-Output $web.Url; 
        }
    }
    $web.Dispose();
}
$spSite.Dispose();  

并删除所有网站上的组/用户：

[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint")
$siteUrl = "http://mydemosite.demosite.net/sites/eal" 
$RemoveGroup = "eal\b-team"
$spSite = new-object Microsoft.SharePoint.SPSite($siteUrl) 

foreach ($web in $spSite.allwebs)
{    
    ## Remove user/group
    foreach ($user in $web.SiteUsers) 
    {
        if ($user.DisplayName -eq $RemoveGroup)
        {
            $web.siteusers.Remove($user) 
            Write-Host -ForegroundColor White -BackgroundColor Green "Found the right user "
        }
    }
    $web.Dispose();
}
$spSite.Dispose();