Choose administrators and owners for the administration hierarchy (Windows SharePoint Services)
Applies To: Windows SharePoint Services 3.0
Topic Last Modified: 2009-04-14
In this article:
Levels of administration
Worksheet
Administration of Windows SharePoint Services 3.0 occurs at many levels, such as on the server farm as a whole, on shared services, and on individual sites. Many people can be involved in managing Windows SharePoint Services 3.0.
Levels of administration
Most levels of the server and site hierarchy have a corresponding administration group. Although the Web application level does not have a unique administrator group, farm administrators and service administrators have control over the Web applications within their scope. Members of the Farm Administrators group and members of the Administrators group on the local server can define a policy to grant individual users permissions at the Web application level. For more information about policy, see "Policy for Web applications" in the Logical architecture components (Windows SharePoint Services) article.
The groups of users who have administrative permissions at different levels are described in the following list:
Server or server farm level
Farm Administrators group Members of the Farm Administrators group have permissions to and responsibility for all servers in the server farm. Members can perform all administrative tasks in Central Administration for the server or server farm. Members of this group can also perform command-line operations. This group does not have access to individual sites or their content. However, members can take ownership of a specific site collection if need be (for example, if the administrator of a site leaves the organization and a new administrator must be added).
Administrators group Members of the Administrators group on the local server can perform all farm administrator actions and more, including installing new products or applications, deploying Web Parts and new features to the global assembly cache, creating new Web applications and new Internet Information Services (IIS) Web sites, and starting services. Like farm administrators, members of this group on the local server have no access to site content, by default.
Note
Farm administrators and administrators can also take ownership of specific site collections, if needed. To take ownership, they can add themselves as the site collection administrator by using the Site Collection Administrators page in Central Administration.
Site level
Site collection administrators Have the Full Control permission level on all Web sites within a site collection. This means that they have access to content in all sites in that site collection, even if they do not have explicit permissions on that site.
Site owners By default, members of the Owners group for a site have the Full Control permission level on that site. They can perform administration tasks for the site, and for any list or library within that site.
| Worksheet action |
|---|
Use the Administrators and owners worksheet (https://go.microsoft.com/fwlink/?LinkId=73128&clcid=0x409) to record which administrators to assign to each level. Refer to your site hierarchy diagram to be sure you assign owners for each site collection, top-level Web site, and subsite that you are planning. |
Worksheet
Use the following worksheet to choose administrators and owners for the administration hierarchy:
Download this book
This topic is included in the following downloadable book for easier reading and printing:
See the full list of available books at Downloadable books for Windows SharePoint Services.