Update all Folders to Read Only with current UAC Membership

The PowerShell help is relatively clear about how to use the MemberType and Name parameters.  As for the  userlist and group aspects of your security, the following cmdlets may help:

Update-PWFolderSecurityByGroupSwapWithWorkflow  

Update-PWFolderSecurityByUserListSwap             

Update-PWFolderSecurityByUserListSwapWithWorkflow                                                     

The idea would be to swap current groups and user lists with those that have the more restrictive access.

Mark Weisman | Bentley Systems 

Hey Mark, Thanks for the reply.

I'm more looking to change the current groups access from whatever permissions they currently have, to read only. So essentially change the check boxes within the access control but keep the memberships the same.

As I'm not changing any memberships, i was hoping there would be a relatively straight forward.  but thought id ask before trying to write a script.

Am i on the right track with my thinking here? Again essentially what i'm trying to do is change all of the current Userlists / users / Groups to read only, essentially changing the checkbox items to Folder Read, File Read but leaving the groups themselves unchanged.

New-PWLogin -BentleyIMS

$PWfolders = Get-PWFolders -FolderPath '\Archives\' -slow -Verbose 

foreach($folder in $PWfolders){
    $UAC = Get-PWFolderSecurity -InputFolder $folder
    
    #loop through each item in the UAC and reset to Folder Read and File Read
    foreach($items in $UAC){
        Update-PWFolderSecurity -InputFolder $folder 
    }   
}

Something like the following should work. There is no need to use the -Slow switch parameter when getting the folders. Hope this helps.

$FolderPath = 'Archives'
$PWfolders = Get-PWFolders -FolderPath $FolderPath -Verbose

$ProjectAccessString  = '----r------'
$DocumentAccessString = '----r--R---'

foreach($folder in $PWfolders){ # break
    $UAC = Get-PWFolderSecurity -InputFolder $folder
    
    #loop through each item in the UAC and reset to Folder Read and File Read
    foreach($item in $UAC){ # break
      $Splat_Update = @{
        InputFolder = $folder
        MemberType = $item.Type
        MemberName = $item.Name
      }
      if($item.SecurityType -eq 'Document'){
        $Splat_Update.DocumentSecurity = $true
        $Splat_Update.MemberAccessString = $DocumentAccessString
      } else {
        $Splat_Update.FolderSecurity = $true
        $Splat_Update.MemberAccessString = $ProjectAccessString
      }

      Update-PWFolderSecurity @Splat_Update -Verbose
    }   
}

Does this break inheritance on every folder?