Set Registry Permissions

Adds permissions for a specified user or group to a registry key with a specified inheritance type.

Parameters

Registry Root

Required — Default: HKEY_LOCAL_MACHINE

The registry hive to add the permission to Allowed values: HKEY_CLASSES_ROOT, HKEY_LOCAL_MACHINE, HKEY_USERS, HKEY_CURRENT_CONFIG.

Registry Key

Required

The registry key to add the permission to

User or group

Required

The user or group to add permissions for - ex. Domain\User or $env:COMPUTERNAME\LocalGroupName or S-1-5-32-544 or BUILTIN\Users. Please add only one user or group.

Permission

Required — Default: Full Control

Choose Permission Allowed values: Change Permissions, Create Link, Create SubKey, Delete, Enumerate SubKeys, Execute Key, Full Control, Notify, Query Values, Read Key, Read Permissions, Set Value, Take Ownership, Write Key.

Details

• Category: Permissions
• Brick ID: Registry-Add-Permission

Raw JSON definition

• JSON

{
  "category": "permissions",
  "description": "Adds permissions for a specified user or group to a registry key with a specified inheritance type.",
  "developerVendor": "CapaSystems A/S",
  "displayName": null,
  "id": "Registry-Add-Permission",
  "name": "Set Registry Permissions",
  "parameters": [
    {
      "defaultValue": "",
      "defaultValueObject": {
        "id": "HKEY_LOCAL_MACHINE",
        "name": "HKEY_LOCAL_MACHINE"
      },
      "description": "The registry hive to add the permission to",
      "id": "RegistryRoot",
      "name": "Registry Root",
      "regExValidation": "",
      "required": true,
      "type": "ComboBox",
      "value": null,
      "values": [],
      "valuesObject": [
        {
          "id": "HKEY_CLASSES_ROOT",
          "name": "HKEY_CLASSES_ROOT"
        },
        {
          "id": "HKEY_LOCAL_MACHINE",
          "name": "HKEY_LOCAL_MACHINE"
        },
        {
          "id": "HKEY_USERS",
          "name": "HKEY_USERS"
        },
        {
          "id": "HKEY_CURRENT_CONFIG",
          "name": "HKEY_CURRENT_CONFIG"
        }
      ]
    },
    {
      "defaultValue": "",
      "defaultValueObject": null,
      "description": "The registry key to add the permission to",
      "id": "RegistryKey",
      "name": "Registry Key",
      "regExValidation": "",
      "required": true,
      "type": "TextBox",
      "value": null,
      "values": [],
      "valuesObject": null
    },
    {
      "defaultValue": "",
      "defaultValueObject": null,
      "description": "The user or group to add permissions for - ex. Domain\\User or $env:COMPUTERNAME\\LocalGroupName or S-1-5-32-544 or BUILTIN\\Users. Please add only one user or group.",
      "id": "Identity",
      "name": "User or group",
      "regExValidation": "",
      "required": true,
      "type": "TextBox",
      "value": null,
      "values": [],
      "valuesObject": null
    },
    {
      "defaultValue": "",
      "defaultValueObject": {
        "id": "FullControl",
        "name": "Full Control"
      },
      "description": "Choose Permission",
      "id": "Right",
      "name": "Permission",
      "regExValidation": "",
      "required": true,
      "type": "ComboBox",
      "value": null,
      "values": [],
      "valuesObject": [
        {
          "id": "ChangePermissions",
          "name": "Change Permissions"
        },
        {
          "id": "CreateLink",
          "name": "Create Link"
        },
        {
          "id": "CreateSubKey",
          "name": "Create SubKey"
        },
        {
          "id": "Delete",
          "name": "Delete"
        },
        {
          "id": "EnumerateSubKeys",
          "name": "Enumerate SubKeys"
        },
        {
          "id": "ExecuteKey",
          "name": "Execute Key"
        },
        {
          "id": "FullControl",
          "name": "Full Control"
        },
        {
          "id": "Notify",
          "name": "Notify"
        },
        {
          "id": "QueryValues",
          "name": "Query Values"
        },
        {
          "id": "ReadKey",
          "name": "Read Key"
        },
        {
          "id": "ReadPermissions",
          "name": "Read Permissions"
        },
        {
          "id": "SetValue",
          "name": "Set Value"
        },
        {
          "id": "TakeOwnership",
          "name": "Take Ownership"
        },
        {
          "id": "WriteKey",
          "name": "Write Key"
        }
      ]
    }
  ],
  "powershell": {
    "base64Encoded": true,
    "function": "ZnVuY3Rpb2..."
  },
  "type": "powerbrick",
  "version": "2026.7.2.1"
}