One awesome thing about Service Apps in SharePoint 2010 is not only
that you can have more than one of them for a particular service (for
example HR and Marketing having their own Managed Metadata Service) but
you can give users permissions to manage these Service Applications in
Central Administration without giving them access to the whole kit and
kaboodle.
This is the concept of a ‘Delegated Administrator’. A user who we want to manage a particular service application but we don’t want them to be able to see anything else. Obviously this is really useful to the SharePoint administrator because it means less work for us
So lets assume that we have a Managed Metadata Service Application that we want our non admin user, John Smith, to be able to manage. This way we can let John be an administrator just for the Managed Metadata Service without needing to expose all the other functionality.
So firstly we need to get to the Manage Service Applications screen by click on the ‘Manage Service Applications’ link from the home page of Central Admin
Then click to the right of whichever Service Application you want to create an Administrator for and select the Administrator button ( Don’t actually click on the text, but just highlight the row):
Add in our username, give them full permissions and click ok.
Now if we log in as John we can see that we are within Central Administration but a whole lot is missing, in fact the only thing that we can see is the Service Application that we have access to.
One more thing to remember is that if you remove a user from administering a Service Application they will still have access to Central Administration, all be it with nothing to see. If you want to completly remove all access for a user you will have to remove them from the delegated administrators group as well.
So there you go a quick and easy way to allow your users to manage the Service Application that they need to without necessarily giving them access to the rest of Central Administration.
Reference:
http://www.sharepointanalysthq.com/2010/10/creating-a-delegated-administrator-for-a-service-application/
This is the concept of a ‘Delegated Administrator’. A user who we want to manage a particular service application but we don’t want them to be able to see anything else. Obviously this is really useful to the SharePoint administrator because it means less work for us
So lets assume that we have a Managed Metadata Service Application that we want our non admin user, John Smith, to be able to manage. This way we can let John be an administrator just for the Managed Metadata Service without needing to expose all the other functionality.
So firstly we need to get to the Manage Service Applications screen by click on the ‘Manage Service Applications’ link from the home page of Central Admin
Then click to the right of whichever Service Application you want to create an Administrator for and select the Administrator button ( Don’t actually click on the text, but just highlight the row):
Add in our username, give them full permissions and click ok.
Now if we log in as John we can see that we are within Central Administration but a whole lot is missing, in fact the only thing that we can see is the Service Application that we have access to.
One more thing to remember is that if you remove a user from administering a Service Application they will still have access to Central Administration, all be it with nothing to see. If you want to completly remove all access for a user you will have to remove them from the delegated administrators group as well.
So there you go a quick and easy way to allow your users to manage the Service Application that they need to without necessarily giving them access to the rest of Central Administration.
Reference:
http://www.sharepointanalysthq.com/2010/10/creating-a-delegated-administrator-for-a-service-application/
No comments:
Post a Comment