Grant Users Limited or Full Access to Windows Failover Clusters

By default, domain admins have full access to a Windows Failover Cluster. All domain users are denied access to a Windows Failover cluster. If you wish to allow a few users to access a Windows Failover Cluster to view cluster resources and its properties, you can use Grant-ClusterAccess PowerShell cmdlet.

For example, to allow User1 of TechGenix.com domain to have read only access to a Windows Failover cluster, run below command:

  • Grant-ClusterAccess -User TechGenix.Com\User1 -ReadOnly

In case you need to give a user full access to the failover cluster, add -Full parameter as shown below:

  • Grant-ClusterAccess -User TechGenix.Com\User2 -Full

About Nirmal Sharma

Nirmal Sharma is a MCSEx3, MCITP and Microsoft MVP in Directory Services. He specializes in directory services, Microsoft Azure, Failover clusters, Hyper-V, and System Center products and has been involved with Microsoft Technologies since 1994. In his spare time, he likes to help others and share some of his knowledge by writing tips and articles on various sites and contributing to Health Packs for ADHealthProf.ITDynamicPacks.Net solutions. Nirmal can be reached at [email protected]

3 thoughts on “Grant Users Limited or Full Access to Windows Failover Clusters”

  1. Mritunjay Choubey

    Hi Nirmal,

    Could you also suggest the command or a way to assign permission without Powershell script ? Why I am asking this as I have a cluster with Windows 2008 Standard Sp2 and there is no cmdlets for failover cluster.

  2. What are the minimum permission required to allow users to failover the resources from one node to another node in MS Failover cluster?
    Is providing power user permission to user will allow the user to failover the resources?

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top