MOSS Forum

Ask Question   UnAnswered
Home » Forum » MOSS       RSS Feeds

Restrict Permissions of Site/Farm Admins

  Asked By: Kiel    Date: Feb 25    Category: MOSS    Views: 1616

In a MOSS environment, is there some way to restrict the permissions /
capabilities of the various kinds of admins so that they cannot add
individuals/users to a particular site collection? If so, how? and who
can enable/disable this "aspect"?

If not, is there some standard report that would shown whenever
permissions have been changed, users added, for a particular site

If not, where do you go to get this kind of report?



2 Answers Found

Answer #1    Answered By: Renata Burt     Answered On: Feb 25

Yes, there is away. See below:

- Go to "Site Permissions"
- Click on menu "Permission Levels" under Settings
- Click on "Add a Permission Level"
- Define new permission level with the access authorty you want to
- Then create new group(s) for your admin and you can assign different
permission levels that you have preset to the admins  group(s).

You can do this as many as you want.

Answer #2    Answered By: Lazaro Rutledge     Answered On: Feb 25

This will work for any admin group EXCEPT the Site Collection Admins. Site
Collection Admins are hard coded to have Full control plus some additional Site
Collection permissions  not referenced in the normal permissions list. Also,
although Farm Admins can be restricted in this way they can always make
themselves the Site Collection Admin or give themselves permissions at the Web
Application level and counteract any permissions you set.

Didn't find what you were looking for? Find more on Restrict Permissions of Site/Farm Admins Or get search suggestion and latest updates.