Delegated Admins don't have full access

Avatar
Matthew McBride
Follow

I've got a couple of sites with delegated admins; however, they don't have access to edit the invitation email, view registered users, etc.  What else do I need to do in order to turn over administration fully?

 Thanks!

Have more questions? Submit a request

4 Comments

Date Votes
  • 0
    Avatar
    Matthew McBride

    Our application has three levels of administration...

    • Site Collection Administrators
    • Site Owners
    • Delegated Administrators

    Only a Site Administrator can use the links on the Site Settings page. This includes Manage Users in Authorization Store, Manage Roles in Authorization Store, Mail Definitions, etc... Site Owners and Delegated Administrators can only use the Manage Users page from the Site Actions menu. For a Site Owner, this page provides a list of users that have access to the site. For a Delegated Administrator, this page provides a list of users in the SQL role they have been assigned. A Delegated Administrator can see a subset of all users and is more restrictive than a Site Owner. A Site Owner is defined as any user that has the Manage Permissions permission level. This is typically provided via the 'Owners' group.

    Jeremy Luerkens
    Manager, Software Production
    SharePoint Solutions
  • 0
    Avatar
    Matthew McBride

    Jeremy,

    I have the same problem as Traci. I configured a user as a delegated administrator and have tried the user as a member of the Site Owners and Site Members groups.

    When my delegated administrator is a member of the Site Owners group he accesses the page and clicks the "Site Actions" link he is able to bring up the "Site Settings" page and see all the options a Site Owner would normally see except the options under "Delegation Management" and "Delegation Configuration".

    When my delegated administrator is a member of the contributors group he doesn't see the "Site Actions" link on the page at all.

    Any ideas, suggestions or thoughts?

    Thanks!

  • 0
    Avatar
    Matthew McBride

    Does this mean that in order to allow my delegated administrators to approve and lock out users they have to be site collection admins?  That will give them alot of access that they shouldn't have.

  • 0
    Avatar
    Matthew McBride

    Delegated Administrators can only unlock users and they cannot Approve or Deny accounts via Manage Users. However, a delegated administrator can be listed as an Account Approver in the Registration Setting which will send them an email whenever a user registers for the site and the Registration Settings are set to require approvals. This is the only way that a delegated administrator can approve accounts without elevating their permissions.

    David Fisher
    Software Engineer
    SharePoint Solutions
Please sign in to leave a comment.