I have installed SharePoint 2013 Foundation in a 2 server farm topography. I am trying to create a sub-site for normal authenticated users and keep the Central Administration root site for only the SP admins. When I create a sub-site I think I am adding a user group and users to that site, for access to only that site, but users in that group can still see the Central Administration site. I need to assign separate permissions on each site. Is there a tutorial or something out there that can help a beginner do this?
Sort out Central Administration permission
Go to your user permissions in Central Administration site, should be something like
http://sharepointsite.domain:12345/_layouts/15/user.aspx
Make sure that only you Farm admin groups are listed here. I manually add only the Farm admin accounts to make sure nobody who should not be there find there way in.
If you have a Farm Administrators account, expand it and see what other groups might have permission.
You might find something like "BUILTIN\Administrators".. and there might be a global user group that is included in that account.
A good start is to delete all the accounts you are unsure about, then re-add them while checking each one.
And of course you can use the magic button that will show you permissions get granted to the site.
Related
I'm going to do a project with SharePoint for an organization. This organization has a full account of Office365 and SharePoint 2013. My current user has insufficient privileges for creating and maintaining Web sites on that server. What level of user privileges should supply me to make applications and have total control over them?
Inform the organization that you need a Developer Site so that you have a location for your "work in progress". The developer site is one for which you would have Admin rights.
Source: https://msdn.microsoft.com/EN-US/library/office/jj692554.aspx
If you’re not an admin, contact an admin in your company and have
them do one of the following:
Grant you admin rights, so you can create the Developer Site yourself.
Create the Developer Site for you, and specify you as an admin for the site collection.
Please help.
Am newbie and have hit a snag with TFS and Sharepoint combo. Come from old school where in IIS you right click and set permissions of Web Site, and now I can't find the sharepoint sites in IIS 7 to actually give myself permissions.
When opening the localhost/ sites/ project in IE, i get an Error: Access Denied.
This is the sharepoint site that was set up by TFS when I added a project in Visual Studio 2010 to my TFS ProjectCollection.
How do I get access to the web site?
Regards
Permission is not give to the SP sites directly from IIS.
If you are or you know the SP Site collection administrator, ask them to give you the appropriate access to the SP site you are requesting. Otherwise, if there are no site collection administrators then go a level higher to the SP farm administrator, ask the farm admin to grant make you the site collection administrator for the SP Site collection you are trying to access. The team project site is located under a site collection.
From there you can give other users access to the appropriate SP resources using Site Actions > Site Permissions.
You should be given the permissions inside SharePoint by site collection administrator.
Site collection admin should navigate to localhost/sites/{tfscollection}/{tfsproject}, click Site settings and then People and groups link.
From there, you need to be added to the site and given the appropriate permissions.
There's a really nice utility that makes it easy to view/edit permissions on TFS, SharePoint and Report Server at the same time.
http://tfsadmin.codeplex.com/
I have a sub-site (http://mysite/documentcenter). My user is in Site Collection Administrators, so I can see and click the move button in site content and structure of sub-site.
But the other users, who has contribute access to all documents, can't see the Move button - it completely disappeared, it's not greyed out.
How can I make the move button display for the other users?
I know this question is a bit old but, you need to have the following Permission Level enabled or Move is not available.
Manage Web Site - Grants the ability to perform all administration tasks for the Web site as well as manage content.
I would be very careful assigning this permission though as it adds a whole slew of additional access for the user(s).
Make sure Add and Customize Pages permissions is present. There could be a Deny mask coming in from User Policy from central admin, which can overwrite Site Collection admin permissions.
We have a teamsite site collection with a number of subsites.
In the sub-sites. We usually break the inheritance and assign specific groups.
Now, our company director needs access to the all teamsites. We have over 100 teamsites. And it is difficult to assign him to each group for each teamsite. furthermore, we would have to remember to add him as a member to the teamsite each time.
Is there a way to add a specific Active directory user or group so that they can access all subsites (thereby overriding any break in the inheritance)
Any help would be greately appreciated.
Thanks,
Joseph
You need to add a web application policy.
If you head into SharePoint Central Administration --> Application Management --> Policy for Web Applications you should be able to set him up with the requisite permissions that will work across the sites within that web app.
For more information, have a look here
(I've voted to have this moved to the SharePoint StackExchange site as it's not really Dev related)
I created a SharePoint sub-site, and accidently deleted all permissions groups except for the Members (which included me) and now I'm stuck looking at the site I've created but I'm not able to edit or delete it and create a new one.
Any idea of what I could do to get myself out of this situation?
Thanks,
Ash
Normally you can still sign-in with the system account.
If not try adding the system account to the Site Collection Administrators. (In the settings of the root site of the site collection. )
You'll need to use an account that's in the Site Collection Administrators.
If you're not able to view the Site Collection Administrators (in Site Settings), you'll need to contact the admins of the site and ask them to re-assign you Full Control permissions to your site so you can begin rebuilding your site permissions.