By default, domain admins have full access to a Windows Failover Cluster. All domain users are denied access to a Windows Failover cluster. If you wish to allow a few users to access a Windows Failover Cluster to view cluster resources and its properties, you can use Grant-ClusterAccess PowerShell cmdlet.
For example, to allow User1 of TechGenix.com domain to have read only access to a Windows Failover cluster, run below command:
- Grant-ClusterAccess -User TechGenix.Com\User1 -ReadOnly
In case you need to give a user full access to the failover cluster, add -Full parameter as shown below:
- Grant-ClusterAccess -User TechGenix.Com\User2 -Full
About Nirmal Sharma
Nirmal Sharma is a MCSEx3, MCITP and Microsoft MVP in Directory Services. He specializes in directory services, Microsoft Azure, Failover clusters, Hyper-V, and System Center products and has been involved with Microsoft Technologies since 1994. In his spare time, he likes to help others and share some of his knowledge by writing tips and articles on various sites and contributing to Health Packs for ADHealthProf.ITDynamicPacks.Net solutions. Nirmal can be reached at [email protected].
Hi Nirmal,
Could you also suggest the command or a way to assign permission without Powershell script ? Why I am asking this as I have a cluster with Windows 2008 Standard Sp2 and there is no cmdlets for failover cluster.
Is there a way to allow the user to power on and off VM’s in the cluster but do nothing else?
What are the minimum permission required to allow users to failover the resources from one node to another node in MS Failover cluster?
Is providing power user permission to user will allow the user to failover the resources?