Add permission to VM with an existing role for an AD group through PowerCLI

[partisen]

Attempting to assign permissions to allow an AD group console rights over a single VM.  Currently trying something similar to the following but with no success.

Get-VM -Name test | New-VIPermission -Role (Get-VIRole -Name "Virtual Machine console users") -Principal "ADDomain\ADGroup"

Is this a syntax issue or is VIPermission the wrong way to go about this?

[scott28tt]

@partisen 

Moderator: Moved to PowerCLI Discussions, where it’s usually worth doing a search.

[LucD]

Is there an error message?

[partisen]

Get-VIRole : 1/27/2021 5:12:26 PM Get-VIRole VIRole with name 'Virtual Machine console users' was not found using the specified filter(s).
At line:1 char:45
+ ... ssion -Role (Get-VIRole -Name "Virtual Machine console users") -Princ ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (:) [Get-VIRole], VimException
+ FullyQualifiedErrorId : Core_OutputHelper_WriteNotFoundError,VMware.VimAutomation.ViCore.Cmdlets.Commands.PermissionManagement.GetVIRole

New-VIPermission : Cannot validate argument on parameter 'Role'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again.
At line:1 char:44
+ ... ssion -Role (Get-VIRole -Name "Virtual Machine console users") -Princ ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [New-VIPermission], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationError,VMware.VimAutomation.ViCore.Cmdlets.Commands.PermissionManagement.NewVIPermission

[LucD · Accepted solution]

That should be

Get-VIRole -Name "VirtualMachineConsoleUser"

[partisen]

That did it.  Thank you very much, LucD.

The corrected command.

Get-VM -Name test | New-VIPermission -Role (Get-VIRole -Name "VirtualMachineConsoleUser") -Principal "ADDomain\ADGroup"