LogOnTokenOptionsEffectiveCredentials Property

[DataMemberAttribute(Name = "effectiveCredentials", EmitDefaultValue = false)]
public LogOnCredentialData[]? EffectiveCredentials { get; set; }

<DataMemberAttribute(Name := "effectiveCredentials", EmitDefaultValue := false)>
Public Property EffectiveCredentials As LogOnCredentialData()
	Get
	Set

public:
[DataMemberAttribute(Name = L"effectiveCredentials", EmitDefaultValue = false)]
property array<LogOnCredentialData^>^ EffectiveCredentials {
	array<LogOnCredentialData^>^ get ();
	void set (array<LogOnCredentialData^>^ value);
}

[<DataMemberAttribute(Name = "effectiveCredentials", EmitDefaultValue = false)>]
member EffectiveCredentials : LogOnCredentialData[] with get, set

Property Value

Use this when you want to use the credentials of a privileged account to create a session on behalf of another account. The credentials of the privileged account (AKA "authenticating account") are specified in the other properties of the LogOnParameters object. The EffectiveCredentials property holds the credentials used to identify the account that will actually be associated with the logon session.

The authentication operation will fail with AccessDenied if the authenticating account does not have administrative privileges for the effective account. This means the authenticating account must either be a system administrator, or in the case where the effective account belongs to a tenant, a tenant administrator for that tenant.

Reference