tcpreime

I have given Administrator Site Group Membership access at the portal to a Universal Security Group. I expected users in that group would be able to administer Windows Sharepoint Sites and subsites under that portal but they are not able to. I had to assign access at each site under the portal for the Universal Security Group before users in that group could administer the sites.

Also, the only way users in the Universal Security Group mentioned above can delete a site or subsite is if they are specified as a Site Collection Administrator. Is that required to allow a site deletion

How can I give access at the portal and have that propagate to all the sites and subsites under that portal so users in the Universal Security Group I assigned can manage information only at the one portal I assigned them to administer

Any suggestions.


Thanks

Tim




Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

Curtis Ruppe (MicroStaff IT)

Which version SharePoint are you using (SPS 2003 / MOSS 2007) I assume you are creating the WSS sites under the Sites directory [Area]. Site collections are security boundaries, so you would need to assign your unique group (Universal Security Group) those permissions as appropriate. They don't need to be a site collection administrator to delete subsites, but they do need to have the "Manage Subsites" permission. This can be done with custom Site Groups (SPS 2003), or custom Permission Levels (MOSS 2007).





Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

tcpreime

We are using SPS 2003 with WSS 3.0.

Let me ask this way. If I am a user who is in an administrative site group at the Portal but not in the Local Adminstrator group on the server or not in the SPS Adminstrator group should I still be able to manage WSS sites under the portal without having the need to set them up Should not the Administrative Site Group be inherited to down stream sites and subsites

Thanks again,

Tim






Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

tcpreime

Also, If I gave Administrative Site Group access at the portal shouldn't that group have automatic administrative access to any new site created under that portal Users in the Administrative Site Group at the portal cannot access newly created WSS sites under it.




Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

Curtis Ruppe (MicroStaff IT)

SPS 2003 & WSS 3.0 do not mix. Verify you are using SPS 2003 / WSS 2.0 or MOSS 2007 / WSS 3.0



Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

tcpreime

Oops! We are using WSS 2.0.




Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

Curtis Ruppe (MicroStaff IT)

tcpreime wrote:
Oops! We are using WSS 2.0.

In that case, consider this. A portal admin doesn't necessarily have access to site collections built via the Sites directory. Only box administrators (those users added to the local SharePoint's group "Administrators") and SharePoint Administrators (those users with membership to the group specified as the "SharePoint Administrative Group" have access to those site collections by default. Every site collection created is a securtiy boundary, and thus is the reason your Administrators of the Portal site don't necessarily have access to them.





Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

tcpreime

I sure appreciate your reply.

In our environment we have about 17 portals named by business group. Each business group is responsible for administering the information at their portal and the WSS sites below. It would appear to be that I'd have to give each business group administrator access at the box level (those users added to the local SharePoint's group "Administrators") and SharePoint Administrators (those users with membership to the group specified as the "SharePoint Administrative Group" if they would need to administer their portal. That would be giving the business group administrators keys to the kingdom which cannot happen.

So, if I give Administrator Site Group Membership access at the portal to a Universal Security Group, would they need to request access to any site or subsite below that portal from the adminstrator of that site

Or is there some other solution that might better fit

Thanks again

Tim






Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

Curtis Ruppe (MicroStaff IT)

Unfortunately with SPS 2003 that is your best option.

Alternatively, you can join us and use MOSS 2007 where you have more flexible options.





Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

tcpreime

Curtis, thank you for taking the time to address my inquiries. You have been most helpful.

We're getting ready for MOSS 2007.

Thanks

Tim






Re: SharePoint - Setup, Upgrade, Administration and Operation Admin can't delete sites under portal.

Curtis Ruppe (MicroStaff IT)

When you do use MOSS 2007 / WSS 3.0 you get the option to create Web Application policies that resolve your specific issue.