dbatools

1.1.88

functions/Export-DbaServerRole.ps1

                                function Export-DbaServerRole {

    <#

    .SYNOPSIS

        Exports server roles to a T-SQL file. Export includes Role creation, object permissions and Schema ownership.

    .DESCRIPTION

        Exports Server roles to a T-SQL file. Export includes Role creation, object permissions and Role Members

        Applies mostly to SQL Server 2012 or Higher when user defined Server roles were added but can be used on earlier versions to get role members.

        This command is an extension of John Eisbrener's post "Fully Script out a MSSQL Database Role"

        Reference:  https://dbaeyes.wordpress.com/2013/04/19/fully-script-out-a-mssql-database-role/

    .PARAMETER SqlInstance

        The target SQL Server instance or instances. SQL Server 2000 and above supported.

    .PARAMETER SqlCredential

        Login to the target instance using alternative credentials. Accepts PowerShell credentials (Get-Credential).

        Windows Authentication, SQL Server Authentication, Active Directory - Password, and Active Directory - Integrated are all supported.

        For MFA support, please use Connect-DbaInstance.

    .PARAMETER InputObject

        Enables piping from Get-DbaServerRole

     .PARAMETER ScriptingOptionsObject

        An SMO Scripting Object that can be used to customize the output - see New-DbaScriptingOption

    .PARAMETER ServerRole

        Server-Level role(s) to filter results to that role only.

    .PARAMETER ExcludeServerRole

        Server-Level role(s) to exclude from results.

    .PARAMETER ExcludeFixedRole

        Filter the fixed server-level roles. As only SQL Server 2012 or higher supports creation of server-level roles will eliminate all output for earlier versions.

    .PARAMETER IncludeRoleMember

        Include scripting of role members in script

    .PARAMETER Path

        Specifies the directory where the file or files will be exported.

        Will default to Path.DbatoolsExport Configuration entry

    .PARAMETER FilePath

        Specifies the full file path of the output file. If left blank then filename based on Instance name, Database name and date is created.

        If more than one database or instance is input then this parameter should normally be blank.

    .PARAMETER Passthru

        Output script to console only

    .PARAMETER BatchSeparator

        Batch separator for scripting output. Uses the value from configuration Formatting.BatchSeparator by default. This is normally "GO"

    .PARAMETER NoClobber

        If this switch is enabled, a file already existing at the path specified by Path will not be overwritten. This takes precedence over Append switch

    .PARAMETER Append

        If this switch is enabled, content will be appended to a file already existing at the path specified by FilePath. If the file does not exist, it will be created.

    .PARAMETER NoPrefix

        Do not include a Prefix

    .PARAMETER Encoding

        Specifies the file encoding. The default is UTF8.

        Valid values are:

        -- ASCII: Uses the encoding for the ASCII (7-bit) character set.

        -- BigEndianUnicode: Encodes in UTF-16 format using the big-endian byte order.

        -- Byte: Encodes a set of characters into a sequence of bytes.

        -- String: Uses the encoding type for a string.

        -- Unicode: Encodes in UTF-16 format using the little-endian byte order.

        -- UTF7: Encodes in UTF-7 format.

        -- UTF8: Encodes in UTF-8 format.

        -- Unknown: The encoding type is unknown or invalid. The data can be treated as binary.

    .PARAMETER EnableException

        By default, when something goes wrong we try to catch it, interpret it and give you a friendly warning message.

        This avoids overwhelming you with "sea of red" exceptions, but is inconvenient because it basically disables advanced scripting.

        Using this switch turns this "nice by default" feature off and enables you to catch exceptions with your own try/catch.

    .NOTES

        Tags: Export, Role

        Author: Patrick Flynn (@sqllensman)

        Website: https://dbatools.io

        Copyright: (c) 2018 by dbatools, licensed under MIT

        License: MIT https://opensource.org/licenses/MIT

    .LINK

        https://dbatools.io/Export-DbaServerRole

    .EXAMPLE

        PS C:\> Export-DbaServerRole -SqlInstance sql2005

        Exports the Server Roles for SQL Server "sql2005" and writes them to the path defined in the ConfigValue 'Path.DbatoolsExport' using a a default name pattern of ServerName-YYYYMMDDhhmmss-serverrole. Uses BatchSeparator defined by Config 'Formatting.BatchSeparator'

    .EXAMPLE

        PS C:\> Export-DbaServerRole -SqlInstance sql2005 -Path C:\temp

        Exports the Server Roles for SQL Server "sql2005" and writes them to the path "C:\temp" using a a default name pattern of ServerName-YYYYMMDDhhmmss-serverrole. Uses BatchSeparator defined by Config 'Formatting.BatchSeparator'

    .EXAMPLE

        PS C:\> Export-DbaServerRole -SqlInstance sqlserver2014a -FilePath C:\temp\ServerRoles.sql

        Exports the Server Roles for SQL Server sqlserver2014a to the file  C:\temp\ServerRoles.sql. Overwrites file if exists

    .EXAMPLE

        PS C:\> Export-DbaServerRole -SqlInstance sqlserver2014a -ServerRole SchemaReader -Passthru

        Exports ONLY ServerRole SchemaReader FROM sqlserver2014a and writes script to console

    .EXAMPLE

        PS C:\> Export-DbaServerRole -SqlInstance sqlserver2008 -ExcludeFixedRole -ExcludeServerRole Public -IncludeRoleMember -FilePath C:\temp\ServerRoles.sql -Append -BatchSeparator ''

        Exports server roles from sqlserver2008, excludes all roles marked as as FixedRole and Public role. Includes RoleMembers and writes to file C:\temp\ServerRoles.sql, appending to file if it exits. Does not include a BatchSeparator

    .EXAMPLE

        PS C:\> Get-DbaServerRole -SqlInstance sqlserver2012, sqlserver2014  | Export-DbaServerRole

        Exports server roles from sqlserver2012, sqlserver2014 and writes them to the path defined in the ConfigValue 'Path.DbatoolsExport' using a a default name pattern of ServerName-YYYYMMDDhhmmss-serverrole

    .EXAMPLE

        PS C:\> Get-DbaServerRole -SqlInstance sqlserver2016 -ExcludeFixedRole -ExcludeServerRole Public | Export-DbaServerRole -IncludeRoleMember

        Exports server roles from sqlserver2016, excludes all roles marked as as FixedRole and Public role. Includes RoleMembers

    #>

    [CmdletBinding()]

    param (

        [parameter()]

        [DbaInstanceParameter[]]$SqlInstance,

        [PSCredential]$SqlCredential,

        [Parameter(ValueFromPipeline)]

        [object[]]$InputObject,

        [Microsoft.SqlServer.Management.Smo.ScriptingOptions]$ScriptingOptionsObject,

        [string[]]$ServerRole,

        [string[]]$ExcludeServerRole,

        [switch]$ExcludeFixedRole,

        [switch]$IncludeRoleMember,

        [string]$Path = (Get-DbatoolsConfigValue -FullName 'Path.DbatoolsExport'),

        [Alias("OutFile", "FileName")]

        [string]$FilePath,

        [switch]$Passthru,

        [string]$BatchSeparator = (Get-DbatoolsConfigValue -FullName 'Formatting.BatchSeparator'),

        [switch]$NoClobber,

        [switch]$Append,

        [switch]$NoPrefix,

        [ValidateSet('ASCII', 'BigEndianUnicode', 'Byte', 'String', 'Unicode', 'UTF7', 'UTF8', 'Unknown')]

        [string]$Encoding = 'UTF8',

        [switch]$EnableException

    )

    begin {

        $null = Test-ExportDirectory -Path $Path

        $outsql = @()

        $outputFileArray = @()

        $roleCollection = New-Object System.Collections.ArrayList

        if ($IsLinux -or $IsMacOs) {

            $executingUser = $env:USER

        } else {

            $executingUser = [Security.Principal.WindowsIdentity]::GetCurrent().Name

        }

        $commandName = $MyInvocation.MyCommand.Name

        $roleSQL = "SELECT

                    CASE SPerm.state

                        WHEN 'D' THEN 'DENY'

                        WHEN 'G' THEN 'GRANT'

                        WHEN 'R' THEN 'REVOKE'

                        WHEN 'W' THEN 'GRANT'

                    END as GrantState,

                    sPerm.permission_name as Permission,

                    Case

                        WHEN SPerm.class = 100 THEN ''

                        WHEN SPerm.class = 101 AND sp2.type = 'S' THEN 'ON LOGIN::' + QuoteName(sp2.name)

                        WHEN SPerm.class = 101 AND sp2.type = 'R' THEN 'ON SERVER ROLE::' + QuoteName(sp2.name)

                        WHEN SPerm.class = 101 AND sp2.type = 'U' THEN 'ON LOGIN::' + QuoteName(sp2.name)

                        WHEN SPerm.class = 105 THEN 'ON ENDPOINT::' + QuoteName(ep.name)

                        WHEN SPerm.class = 108 THEN 'ON AVAILABILITY GROUP::' + QUOTENAME(ag.name)

                        ELSE ''

                    END as OnClause,

                    QuoteName(SP.name) as RoleName,

                    Case

                        WHEN SPerm.state = 'W' THEN 'WITH GRANT OPTION AS ' + QUOTENAME(gsp.Name)

                        ELSE ''

                    END as GrantOption

                FROM sys.server_permissions SPerm

                INNER JOIN sys.server_principals SP

                    ON SP.principal_id = SPerm.grantee_principal_id

                INNER JOIN sys.server_principals gsp

                    ON gsp.principal_id = SPerm.grantor_principal_id

                LEFT JOIN sys.endpoints ep

                    ON ep.endpoint_id = SPerm.major_id

                    AND SPerm.class = 105

                LEFT JOIN sys.server_principals sp2

                    ON sp2.principal_id = SPerm.major_id

                    AND SPerm.class = 101

                LEFT JOIN

                (

                    Select

                        ar.replica_metadata_id,

                        ag.name

                    from sys.availability_groups ag

                    INNER JOIN sys.availability_replicas ar

                        ON ag.group_id = ar.group_id

                ) ag

                    ON ag.replica_metadata_id = SPerm.major_id

                    AND SPerm.class = 108

                where sp.type='R'

                and sp.name=N'/*RoleName*/'"

        if (Test-Bound -Not -ParameterName ScriptingOptionsObject) {

            $ScriptingOptionsObject = New-DbaScriptingOption

            $ScriptingOptionsObject.AllowSystemObjects = $false

            $ScriptingOptionsObject.ContinueScriptingOnError = $false

            $ScriptingOptionsObject.IncludeDatabaseContext = $true

            $ScriptingOptionsObject.IncludeIfNotExists = $true

            $ScriptingOptionsObject.ScriptOwner = $true

        }

        if ($ScriptingOptionsObject.NoCommandTerminator) {

            $commandTerminator = ''

        } else {

            $commandTerminator = ';'

        }

        $outsql = @()

    }

    process {

        if (Test-FunctionInterrupt) {

            return

        }

        if (-not $InputObject -and -not $SqlInstance) {

            Stop-Function -Message "You must pipe in a ServerRole or server or specify a SqlInstance"

            return

        }

        if ($SqlInstance) {

            $InputObject = $SqlInstance

        }

        foreach ($input in $InputObject) {

            $inputType = $input.GetType().FullName

            switch ($inputType) {

                'Sqlcollaborative.Dbatools.Parameter.DbaInstanceParameter' {

                    Write-Message -Level Verbose -Message "Processing DbaInstanceParameter through InputObject"

                    $serverRoles = Get-DbaServerRole -SqlInstance $input -SqlCredential $SqlCredential  -ServerRole $ServerRole -ExcludeServerRole $ExcludeServerRole -ExcludeFixedRole:$ExcludeFixedRole

                }

                'Microsoft.SqlServer.Management.Smo.Server' {

                    Write-Message -Level Verbose -Message "Processing Server through InputObject"

                    $serverRoles = Get-DbaServerRole -SqlInstance $input -SqlCredential $SqlCredential -ServerRole $ServerRole -ExcludeServerRole $ExcludeServerRole -ExcludeFixedRole:$ExcludeFixedRole

                }

                'Microsoft.SqlServer.Management.Smo.ServerRole' {

                    Write-Message -Level Verbose -Message "Processing ServerRole through InputObject"

                    $serverRoles = $input

                }

                default {

                    Stop-Function -Message "InputObject is not a server or serverrole."

                    return

                }

            }

            foreach ($role in $serverRoles) {

                $server = $role.Parent

                if ($server.ServerType -eq 'SqlAzureDatabase') {

                    Stop-Function -Message "The SqlAzureDatabase - $server is not supported." -Continue

                }

                try {

                    # Get user defined Server roles

                    if ($server.VersionMajor -ge 11) {

                        $outsql += $role.Script($ScriptingOptionsObject)

                        $query = $roleSQL.Replace('/*RoleName*/', "$($role.Name)")

                        $rolePermissions = $server.Query($query)

                        foreach ($rolePermission in $rolePermissions) {

                            $script = $rolePermission.GrantState + " " + $rolePermission.Permission

                            if ($rolePermission.OnClause) {

                                $script += " " + $rolePermission.OnClause

                            }

                            if ($rolePermission.RoleName) {

                                $script += " TO " + $rolePermission.RoleName

                            }

                            if ($rolePermission.GrantOption) {

                                $script += " " + $rolePermission.GrantOption + $commandTerminator

                            } else {

                                $script += $commandTerminator

                            }

                            $outsql += "$script"

                        }

                    }

                    if ($IncludeRoleMember) {

                        foreach ($roleUser in $role.Login) {

                            $script = 'ALTER SERVER ROLE [' + $role.Role + "] ADD MEMBER [" + $roleUser + "]" + $commandTerminator

                            $outsql += "$script"

                        }

                    }

                    if ($outsql) {

                        $roleObject = [PSCustomObject]@{

                            Name     = $role.Name

                            Instance = $role.SqlInstance

                            Sql      = $outsql

                        }

                    }

                    $roleCollection.Add($roleObject) | Out-Null

                    $outsql = @()

                } catch {

                    $outsql = @()

                    Stop-Function -Message "Error occurred processing role $Role" -Category ConnectionError -ErrorRecord $_ -Target $role.SqlInstance -Continue

                }

            }

        }

    }

    end {

        if (Test-FunctionInterrupt) { return }

        $eol = [System.Environment]::NewLine

        $timeNow = $(Get-Date -Format (Get-DbatoolsConfigValue -FullName 'Formatting.DateTime'))

        foreach ($role in $roleCollection) {

            $instanceName = $role.Instance

            if ($NoPrefix) {

                $prefix = $null

            } else {

                $prefix = "/*$eol`tCreated by $executingUser using dbatools $commandName for objects on $instanceName.$databaseName at $timeNow$eol`tSee https://dbatools.io/$commandName for more information$eol*/"

            }

            if ($BatchSeparator) {

                $sql = $role.SQL -join "$eol$BatchSeparator$eol"

                #add the final GO

                $sql += "$eol$BatchSeparator"

            } else {

                $sql = $role.SQL

            }

            if ($Passthru) {

                if ($null -ne $prefix) {

                    $sql = "$prefix$eol$sql"

                }

                $sql

            } elseif ($Path -Or $FilePath) {

                $outputFileName = $instanceName.Replace('\', '$')

                if ($outputFileArray -notcontains $outputFileName) {

                    Write-Message -Level Verbose -Message "New File $outputFileName "

                    if ($null -ne $prefix) {

                        $sql = "$prefix$eol$sql"

                    }

                    $scriptPath = Get-ExportFilePath -Path $PSBoundParameters.Path -FilePath $PSBoundParameters.FilePath -Type sql -ServerName $outputFileName

                    $sql | Out-File -Encoding $Encoding -LiteralPath $scriptPath -Append:$Append -NoClobber:$NoClobber

                    $outputFileArray += $outputFileName

                    Get-ChildItem $scriptPath

                } else {

                    Write-Message -Level Verbose -Message "Adding to $outputFileName "

                    $sql | Out-File -Encoding $Encoding -LiteralPath $scriptPath -Append

                }

            } else {

                $sql

            }

        }

    }

}

# SIG # Begin signature block

# MIIdsAYJKoZIhvcNAQcCoIIdoTCCHZ0CAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQU4VO4Z10kCsWnRiL/91zHV63g

# clqgghfOMIIFGjCCBAKgAwIBAgIQAwW7hiGwoWNfv96uEgTnbTANBgkqhkiG9w0B

# AQsFADByMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD

# VQQLExB3d3cuZGlnaWNlcnQuY29tMTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFz

# c3VyZWQgSUQgQ29kZSBTaWduaW5nIENBMB4XDTIwMDUxMjAwMDAwMFoXDTIzMDYw

# ODEyMDAwMFowVzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlhMQ8wDQYD

# VQQHEwZWaWVubmExETAPBgNVBAoTCGRiYXRvb2xzMREwDwYDVQQDEwhkYmF0b29s

# czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALy/Y3ur47++CAG2mOa1

# 6h8WjXjSTvcldDmw4PpAvOOCKNr6xyhg/FOYVIiaeq2N9kVaa5wBawOIxVWuj/rI

# aOxeYklQDugPkGUx0Ap+6KrjnnxgE6ONzQGnc1tjlka6N0KazD2WodEBWKXo/Vmk

# C/cP9PJVWroCMOwlj7GtEv2IxzxikPm2ICP5KxFK5PmrA+5bzcHJEeqRonlgMn9H

# zZkqHr0AU1egnfEIlH4/v6lry1t1KBF/bnDhl9g/L0icS+ychFVkx4OOO4a+qvT8

# xqvvdQjv3PQ1hbzTI3/tXOWu9XxGeeIdZjaJv16FmWKCnloSp1Xb9cVU9XhIpomz

# xH0CAwEAAaOCAcUwggHBMB8GA1UdIwQYMBaAFFrEuXsqCqOl6nEDwGD5LfZldQ5Y

# MB0GA1UdDgQWBBTwwKD7tgOAQ077Cdfd33qxy+OeIjAOBgNVHQ8BAf8EBAMCB4Aw

# EwYDVR0lBAwwCgYIKwYBBQUHAwMwdwYDVR0fBHAwbjA1oDOgMYYvaHR0cDovL2Ny

# bDMuZGlnaWNlcnQuY29tL3NoYTItYXNzdXJlZC1jcy1nMS5jcmwwNaAzoDGGL2h0

# dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtY3MtZzEuY3JsMEwG

# A1UdIARFMEMwNwYJYIZIAYb9bAMBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3

# LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQQBMIGEBggrBgEFBQcBAQR4MHYwJAYI

# KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBOBggrBgEFBQcwAoZC

# aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJ

# RENvZGVTaWduaW5nQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQAD

# ggEBAI/N+XCVDB/WNqQSrKY85zScHGJjsXgXByYvsitMuG5vo+ODhlh+ILv0CTPl

# o2Wo75MnSSqCWR+c6xyN8pDPMPBxm2EtVmXzeKDMIudYyjxmT8PZ3hktj16wXCo8

# 2+65UOse+CHsfoMn/M9WbkQ4rSyWNPRRDodATC2i4flLyeuoIZnyMoz/4N4mWb6s

# IAYZ/tNXzm6qwCfkmoMSf9tcTUCXIbVDliJcUZLlJ/SpLg2KzDu9GtnpBzg3AG3L

# hwBiPMM8OLGitYjz4VU5RYox0vu1XyLf3f9fKTCxxwKy0EKntWdJk37i+DOMQlCq

# Xm5B/KyNxb2utv+qLGlyw9MphEcwggUwMIIEGKADAgECAhAECRgbX9W7ZnVTQ7Vv

# lVAIMA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdp

# Q2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0Rp

# Z2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0xMzEwMjIxMjAwMDBaFw0yODEw

# MjIxMjAwMDBaMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMx

# GTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERpZ2lDZXJ0IFNI

# QTIgQXNzdXJlZCBJRCBDb2RlIFNpZ25pbmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUA

# A4IBDwAwggEKAoIBAQD407Mcfw4Rr2d3B9MLMUkZz9D7RZmxOttE9X/lqJ3bMtdx

# 6nadBS63j/qSQ8Cl+YnUNxnXtqrwnIal2CWsDnkoOn7p0WfTxvspJ8fTeyOU5JEj

# lpB3gvmhhCNmElQzUHSxKCa7JGnCwlLyFGeKiUXULaGj6YgsIJWuHEqHCN8M9eJN

# YBi+qsSyrnAxZjNxPqxwoqvOf+l8y5Kh5TsxHM/q8grkV7tKtel05iv+bMt+dDk2

# DZDv5LVOpKnqagqrhPOsZ061xPeM0SAlI+sIZD5SlsHyDxL0xY4PwaLoLFH3c7y9

# hbFig3NBggfkOItqcyDQD2RzPJ6fpjOp/RnfJZPRAgMBAAGjggHNMIIByTASBgNV

# HRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEF

# BQcDAzB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp

# Z2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQu

# Y29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDCBgQYDVR0fBHoweDA6oDig

# NoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9v

# dENBLmNybDA6oDigNoY0aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0

# QXNzdXJlZElEUm9vdENBLmNybDBPBgNVHSAESDBGMDgGCmCGSAGG/WwAAgQwKjAo

# BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAKBghghkgB

# hv1sAzAdBgNVHQ4EFgQUWsS5eyoKo6XqcQPAYPkt9mV1DlgwHwYDVR0jBBgwFoAU

# Reuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcNAQELBQADggEBAD7sDVoks/Mi

# 0RXILHwlKXaoHV0cLToaxO8wYdd+C2D9wz0PxK+L/e8q3yBVN7Dh9tGSdQ9RtG6l

# jlriXiSBThCk7j9xjmMOE0ut119EefM2FAaK95xGTlz/kLEbBw6RFfu6r7VRwo0k

# riTGxycqoSkoGjpxKAI8LpGjwCUR4pwUR6F6aGivm6dcIFzZcbEMj7uo+MUSaJ/P

# QMtARKUT8OZkDCUIQjKyNookAv4vcn4c10lFluhZHen6dGRrsutmQ9qzsIzV6Q3d

# 9gEgzpkxYz0IGhizgZtPxpMQBvwHgfqL2vmCSfdibqFT+hKUGIUukpHqaGxEMrJm

# oecYpJpkUe8wggauMIIElqADAgECAhAHNje3JFR82Ees/ShmKl5bMA0GCSqGSIb3

# DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAX

# BgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0

# ZWQgUm9vdCBHNDAeFw0yMjAzMjMwMDAwMDBaFw0zNzAzMjIyMzU5NTlaMGMxCzAJ

# BgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMyRGln

# aUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1NiBUaW1lU3RhbXBpbmcgQ0Ew

# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGhjUGSbPBPXJJUVXHJQPE

# 8pE3qZdRodbSg9GeTKJtoLDMg/la9hGhRBVCX6SI82j6ffOciQt/nR+eDzMfUBML

# JnOWbfhXqAJ9/UO0hNoR8XOxs+4rgISKIhjf69o9xBd/qxkrPkLcZ47qUT3w1lbU

# 5ygt69OxtXXnHwZljZQp09nsad/ZkIdGAHvbREGJ3HxqV3rwN3mfXazL6IRktFLy

# dkf3YYMZ3V+0VAshaG43IbtArF+y3kp9zvU5EmfvDqVjbOSmxR3NNg1c1eYbqMFk

# dECnwHLFuk4fsbVYTXn+149zk6wsOeKlSNbwsDETqVcplicu9Yemj052FVUmcJgm

# f6AaRyBD40NjgHt1biclkJg6OBGz9vae5jtb7IHeIhTZgirHkr+g3uM+onP65x9a

# bJTyUpURK1h0QCirc0PO30qhHGs4xSnzyqqWc0Jon7ZGs506o9UD4L/wojzKQtwY

# SH8UNM/STKvvmz3+DrhkKvp1KCRB7UK/BZxmSVJQ9FHzNklNiyDSLFc1eSuo80Vg

# vCONWPfcYd6T/jnA+bIwpUzX6ZhKWD7TA4j+s4/TXkt2ElGTyYwMO1uKIqjBJgj5

# FBASA31fI7tk42PgpuE+9sJ0sj8eCXbsq11GdeJgo1gJASgADoRU7s7pXcheMBK9

# Rp6103a50g5rmQzSM7TNsQIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIB

# ADAdBgNVHQ4EFgQUuhbZbU2FL3MpdpovdYxqII+eyG8wHwYDVR0jBBgwFoAU7Nfj

# gtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsG

# AQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au

# ZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2Vy

# dC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0

# hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0

# LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcN

# AQELBQADggIBAH1ZjsCTtm+YqUQiAX5m1tghQuGwGC4QTRPPMFPOvxj7x1Bd4ksp

# +3CKDaopafxpwc8dB+k+YMjYC+VcW9dth/qEICU0MWfNthKWb8RQTGIdDAiCqBa9

# qVbPFXONASIlzpVpP0d3+3J0FNf/q0+KLHqrhc1DX+1gtqpPkWaeLJ7giqzl/Yy8

# ZCaHbJK9nXzQcAp876i8dU+6WvepELJd6f8oVInw1YpxdmXazPByoyP6wCeCRK6Z

# JxurJB4mwbfeKuv2nrF5mYGjVoarCkXJ38SNoOeY+/umnXKvxMfBwWpx2cYTgAnE

# tp/Nh4cku0+jSbl3ZpHxcpzpSwJSpzd+k1OsOx0ISQ+UzTl63f8lY5knLD0/a6fx

# ZsNBzU+2QJshIUDQtxMkzdwdeDrknq3lNHGS1yZr5Dhzq6YBT70/O3itTK37xJV7

# 7QpfMzmHQXh6OOmc4d0j/R0o08f56PGYX/sr2H7yRp11LB4nLCbbbxV7HhmLNriT

# 1ObyF5lZynDwN7+YAN8gFk8n+2BnFqFmut1VwDophrCYoCvtlUG3OtUVmDG0YgkP

# Cr2B2RP+v6TR81fZvAT6gt4y3wSJ8ADNXcL50CN/AAvkdgIm2fBldkKmKYcJRyvm

# fxqkhQ/8mJb2VVQrH4D6wPIOK+XW+6kvRBVK5xMOHds3OBqhK/bt1nz8MIIGxjCC

# BK6gAwIBAgIQCnpKiJ7JmUKQBmM4TYaXnTANBgkqhkiG9w0BAQsFADBjMQswCQYD

# VQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lD

# ZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0YW1waW5nIENBMB4X

# DTIyMDMyOTAwMDAwMFoXDTMzMDMxNDIzNTk1OVowTDELMAkGA1UEBhMCVVMxFzAV

# BgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMSQwIgYDVQQDExtEaWdpQ2VydCBUaW1lc3Rh

# bXAgMjAyMiAtIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC5KpYj

# ply8X9ZJ8BWCGPQz7sxcbOPgJS7SMeQ8QK77q8TjeF1+XDbq9SWNQ6OB6zhj+TyI

# ad480jBRDTEHukZu6aNLSOiJQX8Nstb5hPGYPgu/CoQScWyhYiYB087DbP2sO37c

# KhypvTDGFtjavOuy8YPRn80JxblBakVCI0Fa+GDTZSw+fl69lqfw/LH09CjPQnkf

# O8eTB2ho5UQ0Ul8PUN7UWSxEdMAyRxlb4pguj9DKP//GZ888k5VOhOl2GJiZERTF

# KwygM9tNJIXogpThLwPuf4UCyYbh1RgUtwRF8+A4vaK9enGY7BXn/S7s0psAiqwd

# jTuAaP7QWZgmzuDtrn8oLsKe4AtLyAjRMruD+iM82f/SjLv3QyPf58NaBWJ+cCzl

# K7I9Y+rIroEga0OJyH5fsBrdGb2fdEEKr7mOCdN0oS+wVHbBkE+U7IZh/9sRL5ID

# MM4wt4sPXUSzQx0jUM2R1y+d+/zNscGnxA7E70A+GToC1DGpaaBJ+XXhm+ho5GoM

# j+vksSF7hmdYfn8f6CvkFLIW1oGhytowkGvub3XAsDYmsgg7/72+f2wTGN/GbaR5

# Sa2Lf2GHBWj31HDjQpXonrubS7LitkE956+nGijJrWGwoEEYGU7tR5thle0+C2Fa

# 6j56mJJRzT/JROeAiylCcvd5st2E6ifu/n16awIDAQABo4IBizCCAYcwDgYDVR0P

# AQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw

# IAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMB8GA1UdIwQYMBaAFLoW

# 2W1NhS9zKXaaL3WMaiCPnshvMB0GA1UdDgQWBBSNZLeJIf5WWESEYafqbxw2j92v

# DTBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln

# aUNlcnRUcnVzdGVkRzRSU0E0MDk2U0hBMjU2VGltZVN0YW1waW5nQ0EuY3JsMIGQ

# BggrBgEFBQcBAQSBgzCBgDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl

# cnQuY29tMFgGCCsGAQUFBzAChkxodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v

# RGlnaUNlcnRUcnVzdGVkRzRSU0E0MDk2U0hBMjU2VGltZVN0YW1waW5nQ0EuY3J0

# MA0GCSqGSIb3DQEBCwUAA4ICAQANLSN0ptH1+OpLmT8B5PYM5K8WndmzjJeCKZxD

# bwEtqzi1cBG/hBmLP13lhk++kzreKjlaOU7YhFmlvBuYquhs79FIaRk4W8+JOR1w

# cNlO3yMibNXf9lnLocLqTHbKodyhK5a4m1WpGmt90fUCCU+C1qVziMSYgN/uSZW3

# s8zFp+4O4e8eOIqf7xHJMUpYtt84fMv6XPfkU79uCnx+196Y1SlliQ+inMBl9AEi

# ZcfqXnSmWzWSUHz0F6aHZE8+RokWYyBry/J70DXjSnBIqbbnHWC9BCIVJXAGcqlE

# O2lHEdPu6cegPk8QuTA25POqaQmoi35komWUEftuMvH1uzitzcCTEdUyeEpLNypM

# 81zctoXAu3AwVXjWmP5UbX9xqUgaeN1Gdy4besAzivhKKIwSqHPPLfnTI/KeGeAN

# lCig69saUaCVgo4oa6TOnXbeqXOqSGpZQ65f6vgPBkKd3wZolv4qoHRbY2beayy4

# eKpNcG3wLPEHFX41tOa1DKKZpdcVazUOhdbgLMzgDCS4fFILHpl878jIxYxYaa+r

# PeHPzH0VrhS/inHfypex2EfqHIXgRU4SHBQpWMxv03/LvsEOSm8gnK7ZczJZCOct

# kqEaEf4ymKZdK5fgi9OczG21Da5HYzhHF1tvE9pqEG4fSbdEW7QICodaWQR2EaGn

# dwITHDGCBUwwggVIAgEBMIGGMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdp

# Q2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERp

# Z2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDb2RlIFNpZ25pbmcgQ0ECEAMFu4YhsKFj

# X7/erhIE520wCQYFKw4DAhoFAKB4MBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAw

# GQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisG

# AQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFKwGHvp8Kb8CpSOokcbdxwhDtlqnMA0G

# CSqGSIb3DQEBAQUABIIBAERd/TZHo4B7i6wPutze5nFL1++OToihbkfaaTkRIyfo

# Rj1fmKoxRzTb4v1f/3eC8cPvt5sw/u4K5ZaxkEN4xB8Jz6cGx/WFQImmG0HmJZpz

# LCAp4y3k7StucVYRvOW1GW4tY4a2tiorp5Qgoafc4KCaascNi1dbdRD8Oux7uYqC

# xOh382guZSQhopeh+Ml4exMTjNoQPjAQhhAu55nrOnKNC0+G8eB2YnO8YVevARTR

# 0B+1G+H2vN53fwGByRsQumu1zU+ljqvAfo+s28yYGIve6Kv+CKBB7ST648qDrMoQ

# 3QG77AdV8A351BQwpujKoT6IBSDQHlsXj27BEgix0B6hggMgMIIDHAYJKoZIhvcN

# AQkGMYIDDTCCAwkCAQEwdzBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNl

# cnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBT

# SEEyNTYgVGltZVN0YW1waW5nIENBAhAKekqInsmZQpAGYzhNhpedMA0GCWCGSAFl

# AwQCAQUAoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx

# DxcNMjIwNDA4MDYyODM5WjAvBgkqhkiG9w0BCQQxIgQgIOJYyb4qtloEwpkQNZth

# M7l/Z2xtJtI3oSz+CHnuKQUwDQYJKoZIhvcNAQEBBQAEggIAjriEG/rEHiPpL7dH

# pWIO1tXh37Le5LSEVAgZ3xDQkz0eEFazyFvYWjDfpCTJKyg1Ov7WFzXVdf+PcwOv

# EUOhQGzuEjWfemnC2TPvJaQfl9nQYrtduSFtxfvR501RX63PDNnvESE6OqI8T1CU

# gFuzjFt7JYLZcx4PVo9TpJ0xHwzzFx6KViJtlN8K1umLQJTMow1KafcaEss8lol+

# bd9X8b0+L9s8NSVl9ywKAJ2wj81mezsC/OHw2zzBzeuIo51Y0U9/9AyLCkAq56ux

# oVW7ZM45hksqlRXVcuZf5F4Vhc29/h6AP5aJIKdqBCWDOeRuNYBHye/mLu1J+tn4

# z/9dQnwbUp015JdVnSHfLAeWN6kSpzvHI+0Vzc0CSZB0Sy5W1U4up5lHWGC8W/Md

# A07ytXOtojUIw+YVvtqackT406xsUm2GU/i3njMwstuxc2rSHj6E1XN0RjTN+Ewx

# Ppc5BVawd2Hhf2qnLMGnU0s3s95U3bCVJPHx2evhyfcMk9AP3aDEYfNzDDQPCvlZ

# NFIQcNdJHXOQi0upD1x4mWhhPpFtpZSBYXOrdfMUfYhK+lWM9A/BLlj0wZYYdHeD

# JsB21fMi8X8xLVkn7Gqf743MFCRAmSkL60bWkw5PTj8yz0lVL+wyQjgV4JPy4bKq

# ELxq3YXyKNZjQCNmfgTWU2oUNww=

# SIG # End signature block