get-acl/set-acl example

get-acl-example.ps1

$userfqdn = "matt-surface\scanner"

$targetfolder = "C:\Users\Matt\Desktop\hassio"

$acl = get-acl $targetfolder
$acl.setaccessruleprotection($false, $false)

# FileSystemRights enum: https://docs.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.filesystemrights?view=netframework-4.7.2
# InheritanceFlags enum: https://docs.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.inheritanceflags?view=netframework-4.7.2
$ruleReadOnly = New-Object System.Security.AccessControl.FileSystemAccessRule($userfqdn,"ReadAndExecute", "ContainerInherit, ObjectInherit", "None", "Allow")
$ruleModify = New-Object System.Security.AccessControl.FileSystemAccessRule($userfqdn,"Modify", "ContainerInherit, ObjectInherit", "None", "Allow")
$ruleFullAccess = New-Object System.Security.AccessControl.FileSystemAccessRule($userfqdn,"FullControl", "ContainerInherit, ObjectInherit", "None", "Allow")

$acl.addaccessrule($ruleReadOnly)

set-acl $targetfolder $acl