Five operations master roles, each owned by just one DC: per forest, the schema master and domain naming master; per domain, the RID master, PDC emulator and infrastructure master.
Also called flexible single master operations, operations master roles.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains FSMO in context, with comparison tables and the common traps.
Terms in this definition
- Forest
The highest-level AD container and security boundary. Its domain trees, one or more, all use one schema, configuration and global catalog.
- Schema
The middle part of a Unity Catalog name (
catalog.schema.table), grouping tables, views, volumes, functions and models inside a catalog. A grant on it covers everything in it now and later, and nothing inside can be reached withoutUSE SCHEMA. - Domain
A way of grouping workspaces by area of the business, in support of a data mesh approach. Items take on their workspace's domain, letting you filter the OneLake catalog by it, and certain tenant settings can be passed to domain admins; domains have no effect on access permissions.
- RID
The relative identifier: the final, unique portion of a SID. Each domain controller issues RIDs from a block allocated to it by the RID master.
- PDC emulator
Handles account lockouts, gets new passwords ahead of other domain controllers, and in the forest root domain serves as the authoritative clock. It is one of the domain operations master roles.
Related terms
- Standby operations master
A domain controller picked ahead of time, with a good connection to an operations master, ready to assume that master's FSMO roles should it fail.