As you may all know, running Get-SPOUser does not work unless your admin account is added as a site admin to a Sharepoint site collection.
To overcome this, we will need to run the following to all site collections which is adding the Sharepoint Service admin as a site admin to the site collection and giving my own admin account a Sharepoint Service Admin role.
Set-SPOUser -site https://tenant.sharepoint.com/sites/sitename -LoginName c:0t.c|tenant|<sharepoint_service_admin_guid> -IsSiteCollectionAdmin $True
The funny thing is after I run it and when I did a Get-SPOUser, I noticed that the admin account which I used to run Set-SPOUser was also added a member to the site collection.
Is this normal? As I do not really want my admin account to appear as a member in the site collection.
Any help will be greatly appreciated!
Related
I am reading several articles that tell me to 'log into Central Administration as Admin' but I do not know how to do that. I am a Farm Admin but when I logout of Central Admin it just wants to close the window so I cant switch accounts. I have the main account for this dev SP.
Our Administrator changed my account and I was then able to solve my core issue was not being able to create a new BDC.
He added me to Local Admin Account
I'm going to do a project with SharePoint for an organization. This organization has a full account of Office365 and SharePoint 2013. My current user has insufficient privileges for creating and maintaining Web sites on that server. What level of user privileges should supply me to make applications and have total control over them?
Inform the organization that you need a Developer Site so that you have a location for your "work in progress". The developer site is one for which you would have Admin rights.
Source: https://msdn.microsoft.com/EN-US/library/office/jj692554.aspx
If you’re not an admin, contact an admin in your company and have
them do one of the following:
Grant you admin rights, so you can create the Developer Site yourself.
Create the Developer Site for you, and specify you as an admin for the site collection.
I have installed SharePoint 2013 Foundation in a 2 server farm topography. I am trying to create a sub-site for normal authenticated users and keep the Central Administration root site for only the SP admins. When I create a sub-site I think I am adding a user group and users to that site, for access to only that site, but users in that group can still see the Central Administration site. I need to assign separate permissions on each site. Is there a tutorial or something out there that can help a beginner do this?
Sort out Central Administration permission
Go to your user permissions in Central Administration site, should be something like
http://sharepointsite.domain:12345/_layouts/15/user.aspx
Make sure that only you Farm admin groups are listed here. I manually add only the Farm admin accounts to make sure nobody who should not be there find there way in.
If you have a Farm Administrators account, expand it and see what other groups might have permission.
You might find something like "BUILTIN\Administrators".. and there might be a global user group that is included in that account.
A good start is to delete all the accounts you are unsure about, then re-add them while checking each one.
And of course you can use the magic button that will show you permissions get granted to the site.
Please help.
Am newbie and have hit a snag with TFS and Sharepoint combo. Come from old school where in IIS you right click and set permissions of Web Site, and now I can't find the sharepoint sites in IIS 7 to actually give myself permissions.
When opening the localhost/ sites/ project in IE, i get an Error: Access Denied.
This is the sharepoint site that was set up by TFS when I added a project in Visual Studio 2010 to my TFS ProjectCollection.
How do I get access to the web site?
Regards
Permission is not give to the SP sites directly from IIS.
If you are or you know the SP Site collection administrator, ask them to give you the appropriate access to the SP site you are requesting. Otherwise, if there are no site collection administrators then go a level higher to the SP farm administrator, ask the farm admin to grant make you the site collection administrator for the SP Site collection you are trying to access. The team project site is located under a site collection.
From there you can give other users access to the appropriate SP resources using Site Actions > Site Permissions.
You should be given the permissions inside SharePoint by site collection administrator.
Site collection admin should navigate to localhost/sites/{tfscollection}/{tfsproject}, click Site settings and then People and groups link.
From there, you need to be added to the site and given the appropriate permissions.
There's a really nice utility that makes it easy to view/edit permissions on TFS, SharePoint and Report Server at the same time.
http://tfsadmin.codeplex.com/
I created a SharePoint sub-site, and accidently deleted all permissions groups except for the Members (which included me) and now I'm stuck looking at the site I've created but I'm not able to edit or delete it and create a new one.
Any idea of what I could do to get myself out of this situation?
Thanks,
Ash
Normally you can still sign-in with the system account.
If not try adding the system account to the Site Collection Administrators. (In the settings of the root site of the site collection. )
You'll need to use an account that's in the Site Collection Administrators.
If you're not able to view the Site Collection Administrators (in Site Settings), you'll need to contact the admins of the site and ask them to re-assign you Full Control permissions to your site so you can begin rebuilding your site permissions.