MOSS Forum

 
Home » Forum » MOSS       Ask a questionRSS Feeds

Restrict Permissions of Site/Farm Admins

  Asked By: Kiel Chang         Date: Feb 25, 2010      Category: MOSS      Views: 375
 

In a MOSS environment, is there some way to restrict the permissions /
capabilities of the various kinds of admins so that they cannot add
individuals/users to a particular site collection? If so, how? and who
can enable/disable this "aspect"?

If not, is there some standard report that would shown whenever
permissions have been changed, users added, for a particular site
collection?

If not, where do you go to get this kind of report?

Tagged:          

 

2 Answers Found

 
Answer #1       Answered By: Renata Burt          Answered On: Feb 25, 2010       

Yes, there is away. See below:

- Go to "Site Permissions"
- Click on menu "Permission Levels" under Settings
- Click on "Add a Permission Level"
- Define new permission level with the access authorty you want to
- Then create new group(s) for your admin and you can assign different
permission levels that you have preset to the admins  group(s).

You can do this as many as you want.

 
Answer #2       Answered By: Lazaro Rutledge          Answered On: Feb 25, 2010       

This will work for any admin group EXCEPT the Site Collection Admins. Site
Collection Admins are hard coded to have Full control plus some additional Site
Collection permissions  not referenced in the normal permissions list. Also,
although Farm Admins can be restricted in this way they can always make
themselves the Site Collection Admin or give themselves permissions at the Web
Application level and counteract any permissions you set.

 
Didn't find what you were looking for? Find more on Restrict Permissions of Site/Farm Admins Or get search suggestion and latest updates.


Your Answer
  • Answer should be atleast 30 Characters.
  • Please put code inside [Code] your code [/Code].