Managing Users, Permissions, and Menus February 05, 2018 www.metalogix.com info@metalogix.com 202.609.9100
Copyright International GmbH., 2008-2018 All rights reserved. No part or section of the contents of this material may be reproduced or transmitted in any form or by any means without the written permission of International GmbH. is a trademark of International GmbH. Windows Services is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. Technical Support For information about Technical support visit http://metalogix.com/support. Technical support specialists can be reached by phone at +1-202-609-9100. The level of technical support provided depends upon the support package that you have purchased. Contact us to discuss your support requirements. www.metalogix.com info@metalogix.com 202.609.9100
Contents Preface... 4 Types of Users... 4 Security... 4 Managing Users and Permissions... 5 User Groups...6 Auto-Adding Users to Groups... 8 Making Available to Business Users (Site Administrators)...10 Making Accessible from within... 10 Activating Site Administration Features... 15 Configuring Menus...17 Guidelines for Creating Customized Menus for Different Groups of Users... 26 Accessing the Menu Maintenance Page... 31 Creating a Custom Menu... 32 Adding and Editing Custom Items in a Menu... 35 Managing Access to Menus...39 Default Menu Options for Users... 41 Farm-Level Default Menu Items...41 Web Application-Level Default Menu Items...46 Site Collection-Level Default Menu Items...54 Site-Level Default Menu Items...60 List-Level Default Menu Items...65 www.metalogix.com info@metalogix.com 202.609.9100
Preface This guide is intended for use by Application Administrators (that is, administrators who also have responsibilities for managing configuration and permissions). Types of Users users generally fall into one of the following categories: Application Administrator - A administrator who also has responsibilities for managing configuration and permissions. A separate guide, the Administration Guide is intended specifically for use by Application Administrators when carrying out these tasks. Administrator - A administrator (generally an IT user) who has administrative responsibilities for site collections throughout the farm, but is not necessarily either a Farm Administrator or a Application Administrator. Business Administrator (also known as a Site Administrator) - A business user responsible for administering his or her own sites. NOTE: Business Administrators have access to many, but not all features. For a complete list of menu options, including those that are not available to Business Administrators, see Default Menu Options for Users. Security By default, is security-trimmed to enforce permissions. This means that administrators only have full access to site collections through if: they have been given site collection administrator privileges in they have Full Control permissions granted to all zones in a Web application's policy. EXCEPTION: The security model for business users (also referred to as Site Administrators) is somewhat different. See Making Available to Business Users (Site Administrators). 4
For users who are farm administrators, all of the site collections for which they are not the administrator may display in the Hierarchy panel with a "disabled" icon. As farm administrators, they can give themselves permissions to those site collections via the Set Site Collection Properties action, which displays when the site collection icon is double-clicked. For users who are not farm administrators (or are farm administrators but has been configured to suppress "super user" privileges), only site collections for which they are administrator display. NOTE: The number that displays in parentheses represents the total number of site collections within the Web application, regardless of whether you have permissions for them. users can also manage sites for which they have a permission level that includes the finegrained permission ManageWebSite (which is part of the built-in permission level Full Control). Unless the user is a member of the Business Administrators group, these sites do not display in the Hierarchy unless the user is also the administrator of the site collection. Such sites would, however, be included in a operation if they are within the selected scope and can be selected via a simple, advanced, or hierarchical search. Application Administrators can, however, choose to override default security. Details can be found in the Administration Guide. Managing Users and Permissions Process Overview The following table describes the process Application Administrators use to manage users and permissions for the application. 5
Stage Description 1 Set up users and groups. See Setting Up Users and Groups. 2 Configure menus for different users and groups. See Configuring Menus. 3 Manage access to menus. See Managing Access to Menus. User Groups When is installed for the first time: the six default user groups described in the table below are automatically created, and the Service Account is added to each group. Group Description Default Site Permission(s) Application Administrators Individuals within IT responsible for the administration of the application, as well as most or all of the farm. Full Control access Administrators Individuals (generally within IT) with administrative responsibilities for most or all of the farm. Read access Business Administrators Business users responsible for managing specific sites, but not most of the farm. See also Making Read access It is imperative that the name assigned to this group match the parameter value for the BADMIN configuration setting. If you change Available to 6 NOTE: You should also place administrators in this group into the Site Collection Administrators group to enable them to manage other groups.
Group this group name, you will also need to update the BADMIN parameter value. Refer to the Administration Guide for instructions. Remote Service Account Administrators Description Default Site Permission(s) Business Users (Site Administrators). The Service Account of each farm involved in multi-farm installations, and cross-farm copy or move operations. Read access Compliance Administrators If you are licensed for Compliance functionality: Individuals permitted to access Compliance functionality. Read access Quarantine Administrators If you are licensed for Compliance functionality: Individuals permitted to manage quarantined content. Read Access It is imperative that the name assigned to this group match the parameter value for the RSAADMIN configuration setting. If you change this group name, you will also need to update the RSAADMIN parameter value. Refer to the Administration Guide for instructions. You can add users to groups using either of the following methods: Use standard procedures. You can open the Configuration Site directly or access People and Groups pages through the application interface as follows: a) From the Hierarchy, expand the Web Application that hosts the Configuration site, then Configuration Root Site > Groups b) Click on the group to which you want to add users. OR Use the action Add Users to Groups. 7
Application Administrators can create additional groups at any time, configure to automatically add users to a group based on security privileges, and even create custom menus for different groups of administrators. See also Managing Users and Permissions. Auto-Adding Users to Groups The Auto Add Users to Groups action allows Application Administrators to configure to automatically add users to a group within the Configuration site if the users: are Site Collection Administrators, and/or are members of a site's Owners group, and/or have a specified permissions level. When a group reaches its maximum number of users (which is 1000 by default, although Application Administrators can change this limit), automatically creates a new group with the same permissions as the "base" group. EXAMPLE: If you want all users who are members of site Owners groups to be added to the Business Administrators group, and more than 1000 users meet that criterion: when Business Administrators group membership reaches 1000, a new group named Business Administrators_1 will be created and the next 1000 users will be added to that group. when Business Administrators_1 group membership reaches 1000, a group named Business Administrators_2 will be created, and so on. NOTE: Within a 2010 or 2013 farm you can add a Claims-authenticated user to a group; however, you cannot add an actual Claim. To configure to automatically add users to groups: 1 From the Manage panel, choose Configuration > Auto Add Users to Groups. 2 In the Selection panel, click Change Selection and select the objects you want to include in the scope of the action. NOTE: The initial default scope is always blank. 8
3 For Add users to the chosen group based on:, select the criteria that you want membership in the group to be based on. Use the information in the following table for guidance. If you want membership in a group to be based on... Then... membership in a Site Collection Administrator's group check Members of Site Collection Administrators. membership in a site's owner's group check Members of Owners Group. NOTE considers owners groups to be those that have been designated "Owners of this Site" in ; not necessarily only those that have "Owners" in the group name. a user's permission level (both direct and via groups) check Members with the following permission level, and select a permission level from the drop-down. Note that the drop-down lists all permissions levels that are valid for the selected scope. Now you can either: run the operation immediately (by clicking the [Run Now] button) OR schedule the operation to run at a later time or on a recurring basis. OR save the operation as XML Instructions that can be executed at a later time. If you chose the Run Now, option, after the operation has been processed: a confirmation message displays at the top of the page, and a Task Audit is generated for the operation and displays in the Results section. If you schedule the operation, a link to the Task Audit is included in the scheduled action notification 9
email. See also Auditing Administrator Tasks. Making Available to Business Users (Site Administrators) Application Administrators can grant access to to business users who administer their own sites. To do so: make sure they have Full Control access (or any other permission level that includes the Manage Web Site permission) to any site they will be administering, and add them to the Business Administrators group in the Configuration site. (See User Groups.) Once the Full Discovery process has run, the Hierarchy will show only Web applications and site collections that contain sites that the user has permissions to administer. NOTE: For the sake of performance, uses cached data to determine sites to which Business Administrators have management permissions. If you grant or deny permissions to a Business Administrator, the change will not be visible in the Hierarchy until after the next Discovery is run. Making Accessible from within installs three site-level features that enable users to access the application from within a site: for Site Admins Menus for Site Settings, and Permissions Management for Site Admins. NOTE: Normally, these features will only be visible to users who have Full Control permissions (or any permission level that includes the fine-grained permission ManageWeb) for the site on which they have been activated. These are hidden features which can be activated using the Manage Site Features action. 10
for Site Admins When the for Site Admins feature is activated, users who are also users can choose Launch for Site Admins from the Site s menu or Site Settings Page. 11
is launched in a separate browser window, with a simplified left navigation pane and the site from which was launched used as the default scope. (Users can, however, modify the scope to include other sites for which they have management privileges using the procedure for Changing Your Selection.) Application Administrators can customize the menu options that display in the left navigation pane using the procedure for Customizing Menus. Menus for Site Settings When the Menus for Site Settings feature is activated, the Site Settings page includes links to individual actions and analyses. Users can: select one of the s or a to open in a separate browser window with the same simplified user interface employed by the for Site Admins feature. 12
access the standard interface by choosing Launch from the Site s menu or Site Settings page. 13
Permissions Management for Site Admins When Permissions Management for Site Admins is activated, the Site Settings page includes links to the a stand-alone, tabbed interface that enables users to perform a variety of permissions actions and analyses outside of the traditional application interface. 14
Refer to the Permissions Management for Site Admins User's Guide for complete details about this feature. Activating Site Administration Features Menus for Site Settings, for Site Admins, and/or Permissions Management for Site Admins features can be activated for some or all sites in the farm via the Manage Site Features action. NOTE: Because both are hidden features, they cannot be activated via the user interface. To activate Site Administration Features: 1 From the Hierarchy, select the objects(s) for which you want to activate site administration features. 15
2 Choose Configuration > Manage Site Features. 3 Select Activate Selected and click the Show Hidden box. 4 Click the Name header to sort the list of features alphabetically. 5 Select the feature(s) you want to activate: for Site Admins, customizable, and/or Menus for Site Settings, and/or 16
6 Permissions Management for Site Admins Click [Run Now]. Configuring Menus menus are stored as xml documents in the Menus document library. Included with each installation is a set of "original" menus provided by. By default, the original menus are accessible by anyone with at least read access to the site (by default, all members of the Application Administrators and Administrators groups). Because Menus is a document library, permissions are inherited from the Configuration site collection, but you can break inheritance and edit the permissions for each menu file individually. You can also create customized menus for different users and groups. To display the menu list: 1 Navigate to the Menus document library using one of the following options: From the Configuration Site home page, choose Documents, then Menus. From the Manage panel, choose Configuration > Menu List. From the Menu Maintenance page, click the Go to Menu List link. 17
Note that there are three versions of each menu, localized for English, French (.fr) and German (.de). NOTE: Original menus are not designed to be modified and any changes to original menus will be overwritten whenever a repair or update installation is performed. If you want to add items to a menu, you can do so by first creating a custom version of the menu. If you want to remove items, it is best to selectively restrict permissions to the original menu files and create custom menu files that include the appropriate items. See Guidelines for Creating Customized Menus for Different Groups of Users. Original menus contain all of the available items at various levels of the left navigation pane, as illustrated below. 18
FARMs This menu contains all of the available items at the farm level See also Farm-Level Default Menu Items in the User's Guide. 19
LISTs This menu contains all of the available items at the list level. See also List-Level Default Menu Items in the User's Guide. 20
ManageCP This menu contains all of the available items for managing the application as well as other hierarchy-independent functionality. See also Manage Default Menu Items in the User's Guide. 21
SITEs This menu contains all of the available items at the site collection level. See also Site Collection-Level Default Menu Items in the User Guide. 22
WAPs This menu contains all of the available items at the Web application level. See also Web Application-Level Default Menu Items in the User's Guide. 23
WEBs This menu contains all of the available items at the site level. See also Site-Level Default Menu Items in the User's Guide. 24
SiteAdmins This menu contains all of the items that display in the s and panel of the left navigation pane when a operation is initiated or For Site Admins is launched from within a site. NOTE: For to be accessible from within a site, Menus for Site Settings and/or for Site Admins must be activated, using the procedure(s) for Making Accessible from within. See also Site Admin Default Menu Items in the User's Guide. 25
UserACTIONS This menu contains all of the right-click items at the user level. See also User-Level Default Menu Items. Guidelines for Creating Customized Menus for Different Groups of Users If there are groups of users that should have similar rights to and functions, the Application Administrator should first define groups for these users from within the Configuration site. See Setting Up Users and Groups. When setting up users and groups and granting access to the application, Application Administrators should consider the roles of various groups of users in the organization to determine the features to which they should have access. 26
Example 1: Adding Frequently-Used Items to a Menu If there is a function that is used often by administrators in your organization, you can add that item to a custom menu. For example, if you frequently need to check a timer job status, you can add an item to a farm-level custom menu which links directly to the appropriate Central Administration page. 27
Example 2: Restricting Access to Advanced Functionality The items for managing Sensitive Content and Anomalous Activity Detection are on the original" Manage menu provided by (that is, ManageCP.xml). In the left navigation pane, these items display in the Manage panel. 28
If you do not want the majority of administrators to have access to Sentinel functionality for aomalous activity detection,, you may want to create a customized Manage menu from which these privileges have been removed, and then restrict their access to the original -ManageCP menu. You could then use this menu as the "default" menu on which additional customized menus are based. 29
Example 3: Groups with Access to a Subset of Features If there is a group of users in your organization primarily responsible for monitoring storage utilization, you may want to create a group for these users. You can then create a customized menu that contains only items they need (in this example, Summary Report, Storage tools, and Trend ), while eliminating items that they might not need (such as Activity tools and additional Content tools) and/or should not have access to (such as tools for managing Configuration and Users and Security), by restricting their access to the original menu files. You can also customize menus in this manner for the Business Administrators group if you want to "override" the security trimming imposed by original menus. (That is, you can create menus that give Business Users either more or less functionality than is provided by default.) Additional Factors to Consider By default, all custom menus inherit users and permissions from the Menus document library, which in turn inherits from the Configuration site collection. However, you can break this inheritance and assign unique permissions to individual menu files (that is, to restrict access to the original menus). Additionally, if a user has permissions for more than one menu with the same target location (for example Hierarchy- farm level), the menus are "merged" for display in the left navigation pane, with items unique to each menu preserved and duplicate items eliminated. You should keep these factors in mind when planning and deploying customized menu. Use the information in the following table for guidance with some common scenarios. If you want to... Then... include one or more additional items to which all users should have access Create a custom menu file at the appropriate level. Add the item(s). Ensure that all users have read access to the menu file. 30
If you want to... Then... restrict access by any group to either a original menu or a custom menu create a custom menu to which only some users should have access Break the inheritance of the appropriate menu file(s) from the permissions of the site collection. Remove the group's permissions to the file(s). Create a custom menu file. Set unique permissions for that file so that only certain users/groups have read access. Accessing the Menu Maintenance Page To access the Menu Maintenance page: From the Manage tree, choose Configuration > Menu Maintenance. 31
Note that, if custom menus have already been created, they will display in the Saved Menus grid. Creating a Custom Menu To create a custom menu: 1 At the top of the Menu Maintenance page, click Create Custom Menu. 2 Complete the Menu Details with a Menu Name and Description. Note that the Menu Name cannot contain spaces or special characters. 32
3 Select a Target Menu (that is the area of the left navigation pane that you want to customize). Use the information in the following table for guidance. NOTE: The choice of target menu will determine which operations are available for selection and where they will display in the application interface. If you want to customize the... Select... farm level right-click menu FARMs. Web application level right-click menu WAPs. site collection level right-click menu SITEs. site or subsite level right-click menu WEBs. list level right-click menu Lists. s and menu items (if used as an alternative to the Manage panel) Tools. site admin menu (primarily for use by business administrators who are accessing from within a site) SiteAdmins. user-level right-click menu USERs. Manage menu items ManageCP. IMPORTANT: Once you have saved a new menu, the Target Menu cannot be changed. 4 Click [Update]. 33
To add menu items to a custom menu: NOTE: If you want to add links to pages or custom items that do not currently exist in a menu (such as internal or external web sites or web-based applications), follow the procedure for Adding and Updating Custom Items in a Menu. 1 From the Copy From drop-down, select the menu from which you want to copy items. Note that this drop-down includes both the "original" menu provided by and any custom menus that have been created for that target. 2 In the list that displays in the left column, select each item that you want to add. Use the information in the following table for guidance. If you want to... Then... select multiple items individually hold down the [Ctrl] or [Shift] key and highlight each item you want to add. immediately add an item and all of its children to the Selected Items column highlight the item, then right-click and choose Add Item and All Children. select an item and its immediate children (for example, a site collection and its root site only) highlight the item, then right-click and choose Highlight Immediate Children. (If objects are grouped into a folder, you must first expand the folder.) 34
If you want to... Then... TIP: You can use this option as a time-saver if you want to add most, but not all of the selected child items. After highlighting the item you can then individually de-select those that you want to exclude. 3 To add the highlighted item(s) to the selection list, either: drag and drop the item(s) onto the item below which you want to nest it. OR highlight the item below which you want to nest the new item(s) then click the [Add] button. To change the placement of items: 1 If you want to move multiple items at once, hold down the [Ctrl] or [Shift] key and highlight each item you want to move. 2 Drag and drop the item(s) onto the item below which you want to nest it. To remove items: 1 In the right pane, highlight the item(s) you want to remove. (To select multiple items, hold down the [Ctrl] or [Shift] key. 2 Do one of the following: 3 drag and drop the item(s) to the left pane. OR click the [Remove] button. To remove all items in the right pane, click the Clear All link. To save the custom menu: When you have finished adding items to the menu, click [Save Menu]. IMPORTANT: If you do not click [Save Menu] and receive a confirmation dialog, any changes you made will be lost when you navigate away from the page. Now you can manage access to the customized menu. Adding and Editing Custom Items in a Menu From the Menu Maintenance or Favorites Maintenance page you can add and update custom items, such as frequently-accessed pages, internal or external Web sites, or web-based applications, to a menu. 35
The procedure for adding an item to a menu is used by: Application Administrators who want to add custom items to a custom menu via the Menu Maintenance page, and any administrator who wants to add custom items to his/her Favorites list via the Favorites Maintenance page. NOTE: The procedure below uses Favorites menu maintenance for illustration purposes. However, the procedural steps for application menu maintenance are identical. To add custom item to a menu: 1 Highlight the item below which you want to place the new item. NOTE: Custom actions can be placed below the top node of the menu or below a folder. Custom folders can be placed below the top node of the menu only. 2 Click [Add Custom Item].. 36
3 From the Item Type drop-down, select the option that best characterizes your custom item. CAUTION: Once a custom item has been saved the Item Type cannot be changed. 4 Enter the Item Name and, unless the item is a folder, the URL. 37
5 Click [Update]. To edit an existing custom item: 1 Highlight the item you want to edit. 2 Click [Edit Custom Item]. 3 Modify the Item Name and/or URL as appropriate. NOTE: For existing items, the Item Type drop-down is disabled. 4 Click [Update] 38
Managing Access to Menus From the Configuration Site, Application Administrators can manage access to menus (that is, determine which menus will be visible to specific administrators or groups of administrators). To access the Configuration Site Menus list: Use the information in the following table to determine the appropriate action to take. If you are starting from... Then... the left navigation pane from the Manage panel, choose Configuration > Menu List. within the Configuration site navigate to the Axceler Menus document library. the Menu Maintenance page click the Go to the Menu List link Note that, if you are using the 2007 user interface, the Original Menus view is selected by default. You can, however, select a different view, including Custom Menus (to display only the menus customized for the farm), or 39
All Documents (to display both original and custom menus). Remember that, by default, all menus inherit users and permissions from the menu document library, which in turn inherits from the Configuration site collection. However, you can assign unique permissions to individual menus. Consult your documentation for details on managing user permissions. REMINDER: If an administrator has permissions for more than one menu with the same target location (for example Hierarchy menu - farm level), the menus are "merged" for display in the left navigation pane, with items unique to each menu preserved and duplicate items eliminated. Remember 40
to restrict access to any menus (including -provided original menus) that contain items that you do not want certain users/groups to see. Default Menu Options for Users The following tables identify default menu items at all levels of the Hierarchy as well as the Manage panel. The following terms are used to describe menu item behavior in a Multi-farm installation: - The operation can be performed on the home farm only. Home or Remote - The operation can be performed on a single farm; either home or remote - The operation can be performed on multiple farms. Farm-Independent - The operation is not farm-specific. Farm-Level Default Menu Items Farm-Level Item Type Multi-Farm Central Administration SharePoi nt Home or Remote Advanced Search Search Home or Remote Search Hierarchy Search Home only Summary Home only Refresh Hierarchy Home or Remote Properties Home or Remote Execute Saved Instructions Home only Farm-Independent Not available to members of the Business Administrators group. Not available to members of the Business Administrators group. Not available to members of the Business Administrators group. Refresh with Ribbon On/Off Activity folder: 41
Farm-Level Item Type Most/Least Activity Multi-Farm Home only Site Collection Activity Site Activity Home only Home only Checked Out Documents Blog Post Activity Home only Home only Home only Not available for WSS-only farms. Not available for WSS-only farms. Trend for Activity Not available for WSS-only farms. Activity by Profile Property Available for 2010 and later Server farms. Activity by User Not available for WSS-only farms. Activity by Document Not available for WSS-only farms. Available for 2010 and later farms. Inactive Users Not available for WSS-only farms. Social Activity Available for Server 2010 farms. 42
Farm-Level Item Type Multi-Farm Audits and Alerts folder: Manage Audit Settings Alerts Home only Create Alerts Home only Manage Alerts Home only Audit Log Change Log Alerts by Site Alerts by User Create Policy Home only Manage Policies Home only Governance Policy Manager Home only Home only Home only Home or Remote Automation folder: Available for 2010 and later farms. Not available to members of the Business Administrators group. Set Metadata Value Available for Server 2010 and later farms. Create Managed Metadata Available for Server 2010 and later farms. Manage Groups 43
Farm-Level Item Type Policies Multi-Farm Home only Content Types Web Parts by Part Web Parts by Site Workflow Change Management folder: Compliance folder (separately-licensed functionality): Available for 2010 and later farms. Not available to members of the Business Administrators group. Analyze Content Home only Managing Quarantine Documents Home only Compliance Summary Home only Sensitive Content Activity Home only Set Site Collection Properties Set Site Properties Set List Properties Manage Site Collection Features Manage Site Features Hierarchy Site Collection Properties Configuration folder: 44
Farm-Level Item Type Multi-Farm Site Properties List Properties Trend for Site Count Home only Broken Links Solution Summary Site Collection Storage Site Storage Content Database Storage Trend for Storage Home only Duplicate Files Home only Storage by File Type Home only Recycle Bins Content folder: Managed Metadata Usage Available for Server 2010 and later farms. Not available to members of the Business Administrators group. Storage folder: Most/Least Storage Not available for WSS-only farms. 45
Farm-Level Item Type Multi-Farm Users and Security folder: Set User Direct Permissions Delete User Permissions Duplicate User Permissions Add User to Group Home or Remote Delete Groups Home only Backup Permissions Home only Manage Permissions Backups Home only Manage Permissions Inheritance Migrate Users Home or Remote Orphaned Domain Users Site Permission Comprehensive Permissions Comprehensive User Home only Group Web Application-Level Default Menu Items Web Application-Level Item Type Multi-Farm Advanced Search Search Home or Remote Search Hierarchy Search Add to Selection (Depends on operation) 46
Web Application-Level Item Type Multi-Farm Properties Home or Remote Site Collection Activity Site Activity Checked Out Documents Inactive Users Activity folder: Most/Least Activity Not available for WSS-only farms. Not available for WSS-only farms. Trend for Activity Not available for WSS-only farms. Activity by Profile Property Available for 2010 and later Server farms. Activity by User Not available for WSS-only farms. Activity by Document Not available for WSS-only farms. Not available for WSS-only farms. Blog Post Activity Available for 2010 and later farms. 47
Web Application-Level Item Type Multi-Farm Manage Audit Settings Alerts Create Alerts Manage Alerts Audit Log Change Log Alerts by Site Alerts by User Create Policy Manage Policies Set Metadata Value Manage Groups Home or Remote Policies Social Activity Available for Server 2010 farms. Audits and Alerts folder: Automation folder: Available for Server 2010 and later farms. Create Managed Metadata Available for Server 2010 and later farms. 48
Web Application-Level Item Type Multi-Farm Content Types Web Parts by Part Web Parts by Site Workflow Change Management folder: Not available to members of the Business Administrators group. Compliance folder (separately-licensed functionality): Available for 2010 and later farms. Not available to members of the Business Administrators group. Analyze Content Manage Quarantine Documents Compliance Summary Sensitive Content Activity Set Site Collection Properties Set Site Properties Set List Properties Manage Site Collection Features Manage Site Features Alternate Access Mappings Home or Remote Configuration folder: 49
Web Application-Level Item Type Multi-Farm Home or Remote Home or Remote Home or Remote Home or Remote Home or Remote Home or Remote Home or Remote Home or Remote Not available to members of the Business Administrators group. Configure Document Conversions Not available to members of the Business Administrators group. Define Managed Paths Not available to members of the Business Administrators group. Delete Web Application Not available to members of the Business Administrators group. Extend Web Application to Another IIS Website Not available to members of the Business Administrators group. Information Management Policy Usage Reports Not available for WSS-only farms or to members of the Business Administrators group. Manage Content Databases Not available to members of the Business Administrators group. Manage Web Application Features Not available to members of the Business Administrators group. Remove from IIS Web Site 50
Web Application-Level Item Type Multi-Farm Home or Remote Home or Remote Hierarchy Site Collection Properties Site Properties List Properties Trend for Site Count Broken Links Solution Summary Home or Remote Not available to members of the Business Administrators group. Web Application General Settings Not available to members of the Business Administrators group. Web Application Outgoing E-Mail Settings Not available to members of the Business Administrators group. Content folder: Managed Metadata Usage Available for Server 2010 and later farms. Not available to members of the Business Administrators group. Site Management folder: Create Site Collection 51
Web Application-Level Item Type Multi-Farm Home or Remote Site Collection Storage Site Storage Content Database Storage Trend for Storage Duplicate Files Storage by File Type Recycle Bins Set User Direct Permissions Delete User Permissions Duplicate User Permissions Add User to Group Home or Remote Delete Groups Not available to members of the Business Administrators group. Site Use Confirmation and Deletion Not available to members of the Business Administrators group. Storage folder: Most/Least Storage Not available in a WSS-only farm. Users and Security folder: 52
Web Application-Level Item Type Multi-Farm Backup Permissions Manage Permissions Backups Manage Permissions Inheritance Authentication Providers Home or Remote Home or Remote Home or Remote Home or Remote Home or Remote Orphaned Domain Users Site Permissions Comprehensive Permissions Comprehensive User Not available to members of the Business Administrators group. Policy for Web Application Not available to members of the Business Administrators group. Self-Service Site Management Not available to members of the Business Administrators group. Security for Web Part Pages Not available to members of the Business Administrators group. User Permissions for Web Applications Not available to members of the Business Administrators group. 53
Web Application-Level Item Group Type Multi-Farm Site Collection-Level Default Menu Items Site Collection-Level Menu Item Type Multi Farm Settings Home or Remote Advanced Search Search Home or Remote Search Hierarchy Search Add to Selection (Depends on operation) Properties Home or Remote Site Collection Activity Site Activity Activity folder: Most/Least Activity Not available for WSS-only farms. Not available for WSS-only farms. Trend for Activity Not available for WSS-only farms. Activity by User Not available for WSS-only farms. Activity by Profile Property 54
Site Collection-Level Menu Item Type Multi Farm Checked Out Documents Blog Post Activity Manage Audit Settings Alerts Create Alerts Manage Alerts Audit Log Change Log Alerts by Site Alerts by User Available for 2010 and later Server farms. Activity by Document Not available for WSS-only farms. Available for 2010 and later Server farms. Inactive Users Not available for WSS-only farms. Social Activity Available for Server 2010 farms. Audits and Alerts folder: Automation folder: 55
Site Collection-Level Menu Item Type Multi Farm Create Policy Manage Policies Set Metadata Value Clean-Up User Permissions Policies Report User to Group Content Types Web Parts by Part Web Parts by Site Workflow Available for Server 2010 and later farms. Create Managed Metadata Available for Server 2010 and later farms. Change Management folder: Compliance folder (separately-licensed functionality): Available for 2010 and later farms. Not available to members of the Business Administrators group. Analyze Content Manage Quarantine Documents Compliance Summary 56
Site Collection-Level Menu Item Type Multi Farm Set Site Collection Properties Set Site Properties Set List Properties Manage Site Collection Features Manage Site Features Navigation Settings Home or Remote Home or Remote Home or Remote Site Collection Administrators Home or Remote Site Collection Quotas and Locks Home or Remote Hierarchy Site Collection Properties Site Properties List Properties Sensitive Document Activity Configuration folder: Not available for WSS-only or Foundation farms. Search Settings Not available for WSS-only or Foundation farms. Search Scopes Not available for WSS-only or Foundation farms. 57
Site Collection-Level Menu Item Type Multi Farm Copy Site Move Site Move to Another Content DB Create New Site Home or Remote Delete Site Collection Home or Remote Content and Structure Home or Remote Trend for Site Count Broken Links Solution Summary Site Collection Storage Site Storage Content folder: Not available for WSS-only or Foundation farms. Managed Metadata Usage Available for Server 2010 and later farms. Not available at the site collection level for 2007 farms. Storage folder Most/Least Storage Not available for WSS-only farms. 58
Site Collection-Level Menu Item Type Multi Farm Content Database Storage Trend for Storage Duplicate Files Storage by File Type Recycle Bins Set User Direct Permissions Delete User Permissions Duplicate User Permissions Set Group Permissions Home or Remote Delete Group Permissions Home or Remote Add User to Group Delete Groups Duplicate Permission Levels Backup Permissions Manage Permissions Backups Manage Permissions Inheritance Orphaned Domain Users Site Permissions Comprehensive Permissions Users and Security Folder 59
Site Collection-Level Menu Item Type Multi Farm Comprehensive User Group Site-Level Default Menu Items Site-Level Menu Item Type Multi-Farm Settings Home or Remote Open Site Home or Remote Add to Selection (Depends on operation) Properties Home or Remote Activity folder: Most/Least Activity Not available for WSS-only farms. Site Activity Not available for WSS-only farms. Inactive Users Not available for WSS-only farms. Activity by User Not available for WSS-only farms. Activity by Document 60
Site-Level Menu Item Type Multi-Farm Checked Out Documents Blog Post Activity Manage Audit Settings Create Alerts Manage Alerts Audit Log Change Log Alerts by Site Alerts by User Create Policy Manage Policies Set Metadata Value Not available for WSS-only farms. Available for 2010 and later farms. Social Activity Available for Server 2010 farms. Audits and Alerts folder: Automation folder: Available for Server 2010 and later farms. Create Managed Metadata 61
Site-Level Menu Item Type Multi-Farm Duplicate a Workflow Definition Content Types Web Parts by Part Web Parts by Site Workflow Available for Server 2010 and later farms. Policies Change Management folder: Compliance folder (separately-licensed functionality): Available for 2010 and later farms. Not available to members of the Business Administrators group. Analyze Content Manage Quarantine Documents Compliance Summary Sensitive Document Activity Set Site Properties Duplicate Site Properties Set List Properties Manage Site Features Configuration folder: 62
Site-Level Menu Item Type Multi-Farm Hierarchy Site Properties List Properties Copy Site Move Site Delete Site Create Home or Remote Create SubSite Home or Remote Content and Structure Home or Remote Libraries and Lists Home or Remote Sites and Workspaces Home or Remote View All Site Content Home or Remote Managed Metadata Usage Navigation Settings Not available for WSS-only or Foundation farms. Content folder: Not available for WSS-only or Foundation farms. Available for Server 2010 later farms. Content Types 63
Site-Level Menu Item Type Multi-Farm Web Parts by Part Web Parts by Site Workflow Broken Links Most/Least Storage Site Storage Site Lists and Libraries Storage Duplicate Files Storage by File Type Set User Direct Permissions Delete User Permissions Duplicate User Permissions Set Group Permissions Home or Remote Delete Group Permissions Home or Remote Add User to Group Delete Groups Duplicate Permission Levels Storage folder Users and Security Folder 64
Site-Level Menu Item Type Multi-Farm Duplicate Site Security Home or Remote Backup Permissions Manage Permissions Backups Manage Permissions Inheritance All People Home or Remote New Group Home or Remote Site Permissions Home or Remote Orphan Domain Users Site Permissions Site List Permissions Comprehensive Permissions Permissions Changes by Site Permissions Changes by User Comprehensive User Group List-Level Default Menu Items List-Level Menu Item Type Multi Farm Open Home or Remote Settings Home or Remote 65
List-Level Menu Item Type Multi Farm Add to Selection (Depends on operation) Checked Out Documents Social Activity Manage Audit Settings Create Alerts Manage Alerts Audit Log Alerts by Site/List Alerts by User Create Policy Manage Policies Activity folder: Activity by User Not available for WSS-only farms. Activity by Document Not available for WSS-only farms. Available for Server 2010 farms. Audit and Alerts folder: Automation folder: 66
List-Level Menu Item Type Multi Farm Duplicate a Workflow Definition Workflow Set Metadata Value Available for Server 2010 and later farms. Create Managed Metadata Available for Server 2010 and later farms. Change Management folder: Compliance folder (separately-licensed functionality): Available for 2010 and later farms. Not available to members of the Business Administrators group. Analyze Content Manage Quarantine Documents Compliance Summary Sensitive Document Activity Set List Properties Duplicate List Properties List Properties Configuration folder: Content folder: Copy List 67
List-Level Menu Item Type Multi Farm Move List Delete List Copy List Item(s) Move List Item(s) Set Column Metadata Set User Direct Permissions Delete User Permissions Duplicate User Permissions Set Group Permissions Home or Remote Delete Group Permissions Home or Remote Manage Permissions Inheritance Permissions by List Item Group Available for Server 2010 and later farms. Managed Metadata Usage Available for Server 2010 and later farms. Workflow Users and Security folder: 68