CIAccess Category | Vmware PowerCLI Reference

CI Access Category

Cmdlets are usually implemented around resource operations. The four basic operations are CREATE, READ, UPDATE and DELETE. This set of operations is known as CRUD. Most of the cmdlets support CRUD which are respectively cmdlets that start with the New/Get/Set/Remove cmdlet verbs but they also may have additional operations

Step 1: Retrieve a object by running a Get command

You can READ objects by using Get-CIAccessControlRule cmdlet. See example below: 
# Retrieve all access control rules for the specified entities.
Get-CIAccessControlRule -Entity 'MyVApp', 'MyCatalog'

Step 2 : Run commands from the CRUD group

You can CREATE objects by using New-CIAccessControlRule cmdlet. See example below: 
# Creates a new access control rule for the specified vApp. The access control rule provides the specified user with full control access privileges for the vApp.
New-CIAccessControlRule -Entity 'MyVApp' -User 'MyUser' -AccessLevel "FullControl"
You can UPDATE objects by using Set-CIAccessControlRule cmdlet. See example below: 
# Provides the MyUser user with full control access to the MyCatalog catalog.
$myRule = Get-CIAccessControlRule -Entity 'MyCatalog' -User 'MyUser'
Set-CIAccessControlRule -AccessControlRule $myRule -AccessLevel "FullControl"
You can REMOVE objects by using Remove-CIAccessControlRule cmdlet. See example below: 
# Removes all access control rules that exist for the vApp named MyVApp.
Get-CIAccessLevelRule -Entity 'MyVApp' | Remove-CIAccessControlRule