Deprecated: YoastSEO_Vendor\Symfony\Component\DependencyInjection\Container::__construct(): Implicitly marking parameter $parameterBag as nullable is deprecated, the explicit nullable type must be used instead in /home/nubelus/sharedove/adisjugo/wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/dependency-injection/Container.php on line 60

Deprecated: YoastSEO_Vendor\League\OAuth2\Client\Provider\AbstractProvider::authorize(): Implicitly marking parameter $redirectHandler as nullable is deprecated, the explicit nullable type must be used instead in /home/nubelus/sharedove/adisjugo/wp-content/plugins/wordpress-seo/vendor_prefixed/league/oauth2-client/src/Provider/AbstractProvider.php on line 416

Deprecated: YoastSEO_Vendor\GuzzleHttp\Client::getConfig(): Implicitly marking parameter $option as nullable is deprecated, the explicit nullable type must be used instead in /home/nubelus/sharedove/adisjugo/wp-content/plugins/wordpress-seo/vendor_prefixed/guzzlehttp/guzzle/src/Client.php on line 181

Deprecated: YoastSEO_Vendor\GuzzleHttp\ClientInterface::getConfig(): Implicitly marking parameter $option as nullable is deprecated, the explicit nullable type must be used instead in /home/nubelus/sharedove/adisjugo/wp-content/plugins/wordpress-seo/vendor_prefixed/guzzlehttp/guzzle/src/ClientInterface.php on line 77
{"id":2459,"date":"2015-12-10T20:45:36","date_gmt":"2015-12-10T19:45:36","guid":{"rendered":"https:\/\/blog.sharedove.com\/adisjugo\/?p=2459"},"modified":"2016-01-12T11:46:07","modified_gmt":"2016-01-12T11:46:07","slug":"minroles-under-the-hood","status":"publish","type":"post","link":"https:\/\/blog.sharedove.com\/adisjugo\/index.php\/2015\/12\/10\/minroles-under-the-hood\/","title":{"rendered":"Minroles under the hood"},"content":{"rendered":"

Today I was playing with the minroles, a new concept inside SharePoint 2016. Basically, the idea of minrole is to streamline and \u201ctemplatize\u201d deployment of SharePoint farms. You need another web front end? No problem, just deploy another server with the \u201cFront-End\u201d minrole, and voila, there you go \u2013 no need to think about services which should run on that server, Microsoft is doing that sort of thinking for you now.<\/p>\n

It can help. I\u2019ve seen a lot of (and I mean: a lot of!) screwed up SharePoint deployments. Sure, you can argue that minroles are not customizable, they are what they are, and that you\u2019ll do better on your own. And if you know what you are doing, you are probably right, I\u2019ve already heard plenty of arguments pro and contra minroles. I don\u2019t want to go there, here I just want to explore the architecture under the minroles, and actually to test new Open Live Writer which appeared on the github today \ud83d\ude09<\/p>\n

<\/p>\n

So, the minroles. Each server joined to the farm can be member of one of the following minroles:<\/p>\n

(information from )<\/p>\n

Front-end<\/b>
\nService applications, services, and components that serve user requests belong on Front-end web servers. These servers are optimized for low latency.<\/p>\n

Application<\/b>
\nService applications, services, and components that serve backend requests (such as background jobs or search crawl requests) belong on Application servers. These servers are optimized for high throughput.<\/p>\n

Distributed cache<\/b>
\nService applications, services, and components that are required for a distributed cache belong on Distributed Cache servers.<\/p>\n

Search<\/b>
\nService applications, services, and components that are required for searching belong on Search servers.<\/p>\n

Custom<\/b>
\nCustom service applications, services, and components that do not integrate with MinRole belong on Custom servers. The farm administrator has full control over which service instances can run on servers assigned to the Custom role. MinRole does not control which service instances are provisioned on this role.<\/p>\n

Single-server farm<\/b>
\nService applications, services, and components required for a single machine farm belong on a Single-Server Farm. A Single-Server Farm is meant for development, testing, and very limited production use. A SharePoint farm with the Single-Server Farm role cannot have more than one SharePoint server in the farm.<\/p>\n

GUI Options in the Central Admin<\/h3>\n
When we deploy the farm, in Central Administration -> System Settings, in servers and services management, we can see some minrole specific options:<\/p>\n
$\"minrole1\"$ <\/a><\/p>\n
In the server management, we can see which server got assigned which minrole, and if the server is actually compliant with that role. In this case, \u201ccompliant\u201d means that the services on that server correspond to the services meant to be in that minrole. You could, after server is deployed, start some more service instances on that server, which are not in correspondence with that role. For example, starting Word Automation Services on a server with Front-End Role would bring that server in “not compliant” state. Central Admin will hereby allow you to identify, and to repair such the issues with one (or few) clicks, and to bring that server back to the compliant state.<\/p>\n
The same way, you can \u2013 on the service management page \u2013 see if the services installed on farm are compliant. That\u2019s the flip side, you would see the Word Automation Service here not being compliant, in the above mentioned case, because it runs on the server where it is not supposed to run (server with the Front-end minrole).<\/p>\n
$\"minrole2\"$ <\/a><\/p>\n
Behind GUI<\/h3>\n
So, that\u2019s GUI. I don\u2019t know how far\/deep will it go with PowerShell cmdlets, I\u2019ve seen scripts which can be used to change server minrole (basically to disconnect server from the farm, and to rejoin it with a new role), and that\u2019s already well documented in the abovementioned link, and in Bill Baer\u2019s blog post (). But, let\u2019s see what server side object model is offering us. Yes, server side \u2013 we are dealing with on-prem administrative feature here, so it\u2019s ok. Writing PowerShell is easy when we know what is in the treasure chest.<\/p>\n
First of all, we\u2019ll notice SPServerRole enum in Microsoft.SharePoint.Administration namespace:<\/p>\n
\r\n\/\/\/ <summary>Specifies the role of the server with respect to the Windows SharePoint Services deployment.<\/summary>\r\npublic enum SPServerRole\r\n{\r\n \/\/\/ <summary>Specifies that the server does not have a registered role in the configuration database.<\/summary>\r\n Invalid,\r\n \/\/\/ <summary>Specifies that the server is a front-end Web server within the Windows SharePoint Services deployment.<\/summary>\r\n WebFrontEnd,\r\n \/\/\/ <summary>Specifies that the server runs a Web application.<\/summary>\r\n Application,\r\n \/\/\/ <summary>Specifies that the server is the only server in the Windows SharePoint Services deployment.<\/summary>\r\n [System.Obsolete("Use SPServerRole.SingleServerFarm instead.")]\r\n SingleServer,\r\n SingleServerFarm,\r\n DistributedCache,\r\n Search,\r\n Custom = 8\r\n}\r\n<\/pre>\n
This enum was there in the earlier versions of SharePoint, but only with “WebFrontEnd”, “Application”, “SingleServer” and “Invalid” values (“Invalid” for the servers for which the server role could not be determined). The values “WebFrontEnd” and “Application” have been reused for the minroles with the same or similar names, and “SingleServer” has been deprecated. For the SharePoint 2016 servers with “Single Server” minrole, the value “SingleServerFarm” is now used.<\/p>\n
The values “DistributedCache”, “Search” and “Custom” have been added to this enum in SharePoint Server 2016, for new minroles with the same names.<\/p>\n
Next, we\u2019ll notice that SPService object (Microsoft.SharePoint.Administration) has got the \u201cCompliantWithMinRole\u201d boolean property, which determines if that service is compliant with the role of the server where it runs. So, basically, you can iterate services in farm, to determine if all of your services \/ servers are in the minrole compliant state:<\/p>\n
\r\n\/\/get the farm\r\nSPFarm farm = SPFarm.Local;\r\n\r\n\/\/We need to get service instances, running on each server\r\n\/\/and to see if it is compliant with the minrole that server has been assigned to\r\n\/\/of course we can ignore the custom minrole\r\nforeach (SPServer server in farm.Servers)\r\n{\r\n \/\/get a server from farm\r\n Console.WriteLine("Server name: " + server.Name);\r\n Console.WriteLine("Server role: " + server.Role.ToString());\r\n\r\n Console.WriteLine("-------------------------------");\r\n\r\n \/\/a bool variable where we will check if the server is compliant with its role\r\n bool serverCompliantWithRole = true;\r\n\r\n \/\/get all service instances provisioned on this server\r\n foreach (var instance in server.ServiceInstances)\r\n {\r\n \/\/get the parenet service for selected instance\r\n SPService service = (SPService)farm.GetObject(instance.Service.Id);\r\n\r\n \/\/determine if service is compliant with the minrole associated with this server\r\n bool isServiceCompliant = service.CompliantWithMinRole.HasValue ? service.CompliantWithMinRole.Value : true;\r\n\r\n \/\/list it in console\r\n Console.WriteLine("Compliant with " + server.Role.ToString() + " : " + isServiceCompliant.ToString());\r\n Console.WriteLine("");\r\n\r\n \/\/and it with server compliance status, it all has to be "true"\r\n serverCompliantWithRole = serverCompliantWithRole && isServiceCompliant;\r\n }\r\n\r\n Console.WriteLine("-------------------------------");\r\n\r\n \/\/output if the whole server is compliant with minrole\r\n Console.WriteLine("Is server compliant with MinRole: " + serverCompliantWithRole.ToString());\r\n}\r\n<\/pre>\n
But, how does the property SPService.CompliantWithMinRole know if the service on that server is minrole compliant? If we reflect that property, it will very soon take us to the classes \u201cSPServerRoleManager\u201d and “SPServerRoleConversionUtil”, which offer all those beautiful things like configuring servers for a specific minrole, checking server states, repairing server states, bringing server back to the compliant mode, etc. The only problem with those classes is \u2013 they are internal, and they are sealed. Now, whoever thought that Microsoft might not be sandboxing SharePoint after all, there is the answer. They are.<\/p>\n
$\"minrole3\"$ <\/a><\/p>\n
Anyway, reflecting these classes gives us some valuable insights in how minroles actually work. One of the interesting things is, there is no \u201cdatabase\u201d or \u201cdefinite list\u201d, which would state which services are compliant with which minrole. More the less, each service instance<\/b> has \u201cShouldProvision()\u201d method, which accepts the minrole as the only parameter, and outputs a boolean value which gives that information. That is what SPService.CompliantWithMinRole property is invoking.<\/p>\n
So, if you really want to know which services belong to which minrole, you should iterate service instances (yes, instances) on a vanilla deployment, which includes all roles, and then take a look what is there:<\/p>\n
\r\n\/\/first get all possible minroles\r\nArray minRoleValues = Enum.GetValues(typeof(SPServerRole));\r\n\r\n\/\/now initialize a dictionary, which will contain roles as keys, and all services belonging to a role as a list of string values\r\nDictionary<SPServerRole, List<string>> servicesInRole = new Dictionary<SPServerRole, List<string>>();\r\nforeach (SPServerRole minrole in minRoleValues)\r\n{\r\n servicesInRole.Add(minrole, new List<string>());\r\n}\r\n\r\n\/\/now iterate all service instances - \r\n\/\/this is where the information if service belongs to a minrole is stored - \r\n\/\/and check to which service it belongs\r\n\r\n\/\/get services in farm\r\nforeach (SPService service in farm.Services)\r\n{\r\n \/\/get instances of the service\r\n foreach (var instance in service.Instances)\r\n {\r\n \/\/check in which minrole can an instance live\r\n \/\/iterate through all of the minroles\r\n foreach (SPServerRole minrole in minRoleValues)\r\n {\r\n \/\/check for a specific minrole\r\n if (instance.ShouldProvision(minrole))\r\n {\r\n \/\/add it if there, and if not already added\r\n if (!servicesInRole[minrole].Contains(service.TypeName))\r\n {\r\n servicesInRole[minrole].Add(service.TypeName);\r\n }\r\n }\r\n }\r\n }\r\n}\r\n\r\n\/\/list it in console\r\nforeach(SPServerRole role in servicesInRole.Keys)\r\n{\r\n Console.WriteLine(role.ToString());\r\n \r\n foreach (string serviceTypeName in servicesInRole[role])\r\n {\r\n Console.WriteLine(serviceTypeName);\r\n }\r\n Console.WriteLine("");\r\n}\r\n<\/pre>\n
Conclusion<\/h3>\n
It is noteworthy to mention that the minroles are sealed concept. You cannot change or create your own minroles or change anything about comliant\/not compliant definition. And, as we\u2019ve seen it, the \u201cjuicy\u201d APIs are concealed, and only the basic functionality is exposed. It is as it is – if you would like it to be changed, vote at SharePoint UserVoice here – <\/p>\n
Appendix \u2013 Services \/ Minroles compliancy list<\/h3>\n
At the moment of writing this article, the following services are compliant with the following roles:<\/p>\n
WebFrontEnd<\/strong><\/p>\n
\n
Access Services<\/li>\n
Access Services 2010<\/li>\n
App Management Service<\/li>\n
Business Data Connectivity Service<\/li>\n
Claims to Windows Token Service<\/li>\n
Information Management Policy Configuration Service<\/li>\n
Machine Translation Service<\/li>\n
Managed Metadata Web Service<\/li>\n
Microsoft Project Server Calculation Service<\/li>\n
Microsoft Project Server Events Service<\/li>\n
Microsoft Project Server Queuing Service<\/li>\n
Microsoft SharePoint Foundation Administration<\/li>\n
Microsoft SharePoint Foundation Database<\/li>\n
Microsoft SharePoint Foundation Sandboxed Code Service<\/li>\n
Microsoft SharePoint Foundation Subscription Settings Service<\/li>\n
Microsoft SharePoint Foundation Timer<\/li>\n
Microsoft SharePoint Foundation Tracing<\/li>\n
Microsoft SharePoint Foundation Usage<\/li>\n
Microsoft SharePoint Foundation Web Application<\/li>\n
Microsoft SharePoint Insights<\/li>\n
PerformancePoint Service<\/li>\n
Portal Service<\/li>\n
Project Server Application Service<\/li>\n
Request Management<\/li>\n
Secure Store Service<\/li>\n
Security Token Service<\/li>\n
SharePoint Server Search<\/li>\n
SSP Job Control Service<\/li>\n
User Profile Service<\/li>\n
Visio Graphics Service<\/li>\n<\/ul>\n
Application<\/strong><\/p>\n
\n
App Management Service<\/li>\n
Application Discovery and Load Balancer Service<\/li>\n
Business Data Connectivity Service<\/li>\n
Claims to Windows Token Service<\/li>\n
Information Management Policy Configuration Service<\/li>\n
Machine Translation Service<\/li>\n
Managed Metadata Web Service<\/li>\n
Microsoft Project Server Calculation Service<\/li>\n
Microsoft Project Server Events Service<\/li>\n
Microsoft Project Server Queuing Service<\/li>\n
Microsoft SharePoint Foundation Administration<\/li>\n
Microsoft SharePoint Foundation Database<\/li>\n
Microsoft SharePoint Foundation Incoming E-Mail<\/li>\n
Microsoft SharePoint Foundation Subscription Settings Service<\/li>\n
Microsoft SharePoint Foundation Timer<\/li>\n
Microsoft SharePoint Foundation Tracing<\/li>\n
Microsoft SharePoint Foundation Usage<\/li>\n
Microsoft SharePoint Foundation Web Application<\/li>\n
Microsoft SharePoint Foundation Workflow Timer Service<\/li>\n
Microsoft SharePoint Insights<\/li>\n
Portal Service<\/li>\n
PowerPoint Conversion Service<\/li>\n
Project Server Application Service<\/li>\n
Request Management<\/li>\n
Secure Store Service<\/li>\n
Security Token Service<\/li>\n
SSP Job Control Service<\/li>\n
User Profile Service<\/li>\n
Word Automation Services<\/li>\n<\/ul>\n
SingleServerFarm<\/strong><\/p>\n
\n
Access Services<\/li>\n
Access Services 2010<\/li>\n
App Management Service<\/li>\n
Application Discovery and Load Balancer Service<\/li>\n
Business Data Connectivity Service<\/li>\n
Claims to Windows Token Service<\/li>\n
Distributed Cache<\/li>\n
Information Management Policy Configuration Service<\/li>\n
Lotus Notes Connector<\/li>\n
Machine Translation Service<\/li>\n
Managed Metadata Web Service<\/li>\n
Microsoft Project Server Calculation Service<\/li>\n
Microsoft Project Server Events Service<\/li>\n
Microsoft Project Server Queuing Service<\/li>\n
Microsoft SharePoint Foundation Administration<\/li>\n
Microsoft SharePoint Foundation Database<\/li>\n
Microsoft SharePoint Foundation Incoming E-Mail<\/li>\n
Microsoft SharePoint Foundation Sandboxed Code Service<\/li>\n
Microsoft SharePoint Foundation Subscription Settings Service<\/li>\n
Microsoft SharePoint Foundation Timer<\/li>\n
Microsoft SharePoint Foundation Tracing<\/li>\n
Microsoft SharePoint Foundation Usage<\/li>\n
Microsoft SharePoint Foundation Web Application<\/li>\n
Microsoft SharePoint Foundation Workflow Timer Service<\/li>\n
Microsoft SharePoint Insights<\/li>\n
PerformancePoint Service<\/li>\n
Portal Service<\/li>\n
PowerPoint Conversion Service<\/li>\n
Project Server Application Service<\/li>\n
Request Management<\/li>\n
Search Administration Web Service<\/li>\n
Search Host Controller Service<\/li>\n
Search Query and Site Settings Service<\/li>\n
Secure Store Service<\/li>\n
Security Token Service<\/li>\n
SharePoint Server Search<\/li>\n
SSP Job Control Service<\/li>\n
User Profile Service<\/li>\n
Visio Graphics Service<\/li>\n
Word Automation Services<\/li>\n<\/ul>\n
DistributedCache<\/strong><\/p>\n
\n
Claims to Windows Token Service<\/li>\n
Distributed Cache<\/li>\n
Microsoft SharePoint Foundation Administration<\/li>\n
Microsoft SharePoint Foundation Database<\/li>\n
Microsoft SharePoint Foundation Timer<\/li>\n
Microsoft SharePoint Foundation Tracing<\/li>\n
Microsoft SharePoint Foundation Usage<\/li>\n
Microsoft SharePoint Foundation Web Application<\/li>\n
Microsoft SharePoint Insights<\/li>\n
Portal Service<\/li>\n
Request Management<\/li>\n
Security Token Service<\/li>\n
SSP Job Control Service<\/li>\n<\/ul>\n
Search<\/strong><\/p>\n
\n
Application Discovery and Load Balancer Service<\/li>\n
Claims to Windows Token Service<\/li>\n
Microsoft SharePoint Foundation Administration<\/li>\n
Microsoft SharePoint Foundation Database<\/li>\n
Microsoft SharePoint Foundation Timer<\/li>\n
Microsoft SharePoint Foundation Tracing<\/li>\n
Microsoft SharePoint Foundation Usage<\/li>\n
Microsoft SharePoint Insights<\/li>\n
Portal Service<\/li>\n
Search Administration Web Service<\/li>\n
Search Host Controller Service<\/li>\n
Search Query and Site Settings Service<\/li>\n
Security Token Service<\/li>\n
SharePoint Server Search<\/li>\n
SSP Job Control Service<\/li>\n<\/ul>\n
\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t