I was under the impression based on my demo that delegated admins would have the ability to approve users. Am I understanding correctly that in order for a delegated admin to approve access requests they have to be a site collection admin? If so do you have any suggestions on how to work around that. I need to give several people in my organization the ability to approve users and I am certainly very uncomfortable giving them the amount of access that a site collection admin has.
Approve users
-
Matthew McBride By default a Delegated Administrator can't approval registrations. However, you can add any user (including a Delegated Administrator) to the list of approvers for a site. This can be done from Site Actions -> Delegation Settings -> Modify All Delegation Settings -> Registration Settings -> Approvers.
There are three types of users that can invite people to join a site. These users are Site Collection Administrators, Site Owners and Delegated Administrators. Typically, a Site Collection Administrator and Site Owner have move privilege then the Delegated Administrator so it may not make sense to have the Delegated Administrator approve these invitations. In addition, if a Delegated Administrator invites a user to a site it probably isn't necessary for the Delegated Administrator to approve this user.
Jeremy Luerkens
Manager, Software Production
SharePoint Solutions -
Matthew McBride Well that makes perfect sense doesn't it? Thank you!!
-
Matthew McBride Unfortunately after adding the user to the approvers on the registration settings when i log in as that user the Approve and Deny Access options are not in the drop down. Is there a web.config change for this, as there was for the password reset?
-
Matthew McBride Approvers defined on the Registration Settings page can only approve or deny users via the Approve or Deny link sent to them in the request approval e-mail after the user registers. This link will send the approver to a page which will approve/deny the user as well as send a notification to the registering user of their account status. Site Collection Administrators of course can approve or deny users through the UI but no notification message is sent to the user.
We are contemplating adding additional UI pages for Approvers in a future version so they can approve or deny users via e-mail or the UI. We have not yet set a target date for this feature. When the feature firms up we will update the product roadmap and I'll try and reply to this forum post.
Jeremy Luerkens
Manager, Software Production
SharePoint Solutions -
Darwin Gushard Hi. I'm in SharePoint 2010. When I invite users, they get the e-mail that invites them to register. They register and submit it, but then their registration is automatically approved. How can I change that so that someone has to approve their registration first? Thanks!
-
Darwin Gushard Hi, Matthew. Thanks so much for your help! I found the "Turn on Registration Approval" instructions, but only got as far as #2. I see the "Management Settings" section as in the attached picture, but not the "Registration approval settings" link. I have most every permission possible, so I'm not sure what else to do.
management_settings.jpg -
Permanently deleted user Darwin,
It appears you have a slightly old version of ExCM 2010. In your version you can setup approval by clicking the 'registration visioning settings' link and setting up content approval as you would any other SharePoint list. We have plans to publish a new version of ExCM 2010 in February which will contain number of feature additions and symptom corrections. You can monitor the 'ExCM 2010 Release Notes' forum to get notified of the release.
(ExCM 2010 Release Notes)
http://sharepointsolutions.zendesk.com/forums/125059-excm-2010-release-notes -
Darwin Gushard Oops, I realized I'm in the ExCM 2007 discussion board, even though we're running 2010!
Enabling "content approval" worked! That's what I was looking for. Now new registrants aren't automatically approved...perfect. But I remember from 2007 that I'd get an e-mail alert when new people register, and then I could review their registration and either approve or deny. I tried making a Registration Workflow, but that's not working (unless I didn't put it together right). How do I set up an alert for me or other users when new people register so they can review their registration? Thanks.
-
Permanently deleted user Darwin,
Out-of-the-box SharePoint alerts only get sent out after the item is approved. A workflow is going to be the best way to get notified by e-mail of a new registration. If you are using SharePoint Server 2010 the 'SharePoint 2010 - Approval Workflow' is a great choice for the registration approval process. If you only have SharePoint Foundation 2010 installed a SharePoint designer workflow could be created to notify and approve a workflow.
In ExCM 2010 Version 2.0.921.4 release we corrected an issue starting approval workflows during an anonymous registration. See below for the details...
(ExCM 2010 : Release Notes)
http://help.sharepointsolutions.com/products/2010/excm/ReleaseNotes.htmlIf your version is older than 2.0.914.4 you will need to upgrade to allow the workflow to be started correctly. You can find your version number by following the steps in the article below...
(ExCM 2010 : Product Info)
http://help.sharepointsolutions.com/products/2010/excm/View_Product_Information.htmlPlease let me know if you have any other questions.
-
Darwin Gushard We are running version 2.0.727.1 (see attached screen shot). Does that mean that there's no way for me to set up an approval workflow to notify someone when a new user registers? If that's so, let me know and I'll tell our network guys to get me a newer version. Thanks so much!
ExCM_version.jpg -
Darwin Gushard Jeremy,
I guess we need to upgrade! What are the steps required to do so?
11 Comments