Adding another admin user to Windows Azure Pack (WAP)

I’ve just finished setting up a lab environment with DSC and SMA and a colleague of mine also wanted a go in my new SMA playground. I created a user account for my colleague in my domain and then switched over to my Windows Azure Pack (WAP) server used to administer the SMA server. Surprisingly it was not immediately obvious how to give him access to the admin site. I was expecting a simple button to provide access to an account.

Which brought me to my first question:

Which accounts have admin access?

This wasn’t immediately obvious either.

After some investigation I found that I could see the admin users in [Microsoft.MgmtSvc.Store].[mp].[AuthorizedAdminUsers] table in the SQL database on the WAP server.
Some more research led me to the PowerShell module MgmtSvcConfig where you will find a cmdlet named Get-MgmtSvcAdminUser. Guess what it does?

So to see which accounts have admin access:


Then back to our original question

How do I add another admin user to Windows Azure Pack?

By using the same PowerShell module as before. This time using the Add-MgmtSvcAdminUser cmdlet.

Like this:

Add-MgmtSvcAdminUser -Principal "Domain\user"


Is there a way to add an admin user via GUI? Perhaps. I didn’t find a way. To be fair though I didn’t spend a long time looking when I found the PowerShell cmdlets.