Lync 2013 Unauthorized: Access is denied due to a RBAC authorization Failure

今天安装Lync 2013, 全部都做完了，但是打开Lync控制台的时候用域管理员不能登录了。报错： Unauthorized: Access is denied due to a RBAC authorization Failure ， 如下图，

修改了关于SQL的一些权限都不行。最终发现将administrator加入到CSadministrators这个组里就可以了。

微软官方也有相应的解说 https://technet.microsoft.com/zh-CN/library/gg413092(v=ocs.15).aspx 

下面是安装好Lync之后自动生成的一些组的作用的介绍，

RBAC Group:

1. CSAdministrator – Highest level of Lync Server administration account that allows administrative tasks, modify  settings, creating and assign user roles, adding new site, pools and services

2. CSArchiving Administrator – Modify archiving configuration and policies

3. CSBranchOfficeTechnician – Manage Survival Branch Appliance*

4. CSHelpDesk – Read-only rights on user properties & policies

5. CSLocationAdministrator – Lowest level of rights for Enhanced 9-1-1 (E9-1-1) management, including creating E9-1-1 locations and network identifiers, and associating these with each other

6. CSResponseGroupAdministrator – Manage configuration for Response Group application within a specific site

7. CSRoleAdministrator – Manage & assign roles to users*

8. CSServerAdministrator – Manage, monitor, and troubleshoot servers and services. Has rights to prevent new connections to servers, stop and start services, and apply software updates

9. CSUserAdministrator – Enable, Disable, and move (between servers/pools) and assign existing policies to users

10. CSViewOnlyAdministrator – Read-only access of configuration at server, pool, and user information

11. CSVoiceAdministrator – Create, configure, and manage voice-related settings and policies

 

欢迎关注我的博客http://zyliday.blog.51cto.com/，致力于为大家提供更多优质的博文.谢谢！