使用 PowerShell 添加/删除 SharePoint 组或用户的权限

更新 SharePoint 组或用户的权限级别相当简单。要添加或删除 SharePoint 组的权限级别，请导航至：

• 站点设置>>站点权限

• 选择要更改的个人或组 >> 单击“编辑用户权限”功能区按钮

  

• 选择或取消选择所需的任何相关权限级别

  

• 单击“确定”保存更改。

用于更新 SharePoint 组或用户权限的 PowerShell 脚本：

下面是我的 PowerShell 脚本，用于更改 SharePoint 组的权限： 假设，我们要删除“编辑”权限级别并将“贡献”添加到 SharePoint 网站的成员组。

#assign permission to sharepoint group powershell
Add-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue

#Configuration parameters
$SiteURL="https://intranet.crescent.com"
$GroupName="Crescent Intranet Members"
$PermissionToAdd="Contribute"
$PermissionToRemove="Edit"

#Get the Web & Group objects
$Web = Get-SPWeb $SiteURL
$Group = $web.SiteGroups[$GroupName]
$RoleAssignment = $Web.RoleAssignments.GetAssignmentByPrincipal($Group)

#For User, Use:
#$User = $web.EnsureUser("Crescent\Salaudeen")
#$RoleAssignment = $Web.RoleAssignments.GetAssignmentByPrincipal($User)

#Get the permission Levels to Add - Remove
$AddPermissionRole = $web.RoleDefinitions[$PermissionToAdd]
$RemovePermissionRole = $web.RoleDefinitions[$PermissionToRemove]

#Add Permission level to the group
if (!$RoleAssignment.RoleDefinitionBindings.Contains($AddPermissionRole))
{
    $RoleAssignment.RoleDefinitionBindings.Add($AddPermissionRole)
    Write-host "$($PermissionToAdd) Permission Added to the Group!"
}

#sharepoint powershell remove group permissions
if ($RoleAssignment.RoleDefinitionBindings.Contains($RemovePermissionRole))
{
    $RoleAssignment.RoleDefinitionBindings.Remove($RemovePermissionRole)
    Write-host "$($PermissionToRemove) permission removed from the Group!"
}
$RoleAssignment.Update()