One awesome thing about Service Apps in SharePoint 2010 is not only
that you can have more than one of them for a particular service (for
example HR and Marketing having their own Managed Metadata Service) but
you can give users permissions to manage these Service Applications in
Central Administration without giving them access to the whole kit and
kaboodle.
This is the concept of a ‘Delegated Administrator’. A user who we
want to manage a particular service application but we don’t want them
to be able to see anything else. Obviously this is really useful to the
SharePoint administrator because it means less work for us
So lets assume that we have a Managed Metadata Service Application
that we want our non admin user, John Smith, to be able to manage. This
way we can let John be an administrator just for the Managed Metadata
Service without needing to expose all the other functionality.
So firstly we need to get to the Manage Service Applications screen
by click on the ‘Manage Service Applications’ link from the home page of
Central Admin
Then click to the right of whichever Service Application you want to
create an Administrator for and select the Administrator button ( Don’t
actually click on the text, but just highlight the row):
Add in our username, give them full permissions and click ok.
Now if we log in as John we can see that we are within Central
Administration but a whole lot is missing, in fact the only thing that
we can see is the Service Application that we have access to.
One more thing to remember is that if you remove a user from
administering a Service Application they will still have access to
Central Administration, all be it with nothing to see. If you want to
completly remove all access for a user you will have to remove them from
the delegated administrators group as well.
So there you go a quick and easy way to allow your users to manage the
Service Application that they need to without necessarily giving them
access to the rest of Central Administration.
Reference:
http://www.sharepointanalysthq.com/2010/10/creating-a-delegated-administrator-for-a-service-application/
