Give a user access to the SSP
This can be slightly more daunting and confusing to a SharePoint rookie than it should be. So I thought I would drill through the process and see if I can help someone out. The story usually goes something like this.
You are the IT guy. You got a request to install this MOSS thing so people could make web sites or something like that. Ok. After a couple of tries no problem. You got the darn thing installed for them. You create them a site collection and set them on their marry little way. No problems. Then the following week you get another call. "We need to configure search and import some profiles. We need to access the Shared Service Provider to do this. Can you let us in?" OK. Now what?
You could do it the lazy way and cross your fingers they don't break anything by granting access to the whole web application. That was detailed in my post Become Administrator of the Entire Web Application. But even if you do this you will find they still can't manage profiles , audiences, permissions, or usage analytics. Bummer. So what should you do?
- Start off by logging into the SSP admin site.
- Now you need to add the user just like you would to any other site. Click Site Actions > Site Settings
- Under Users and Permissions click Advanced permissions
- Click New > Add Users
- Enter your user and put them in a group. Normally I just place them in the Viewers group and hit OK
Now your user can log into the SSP and manage search settings, the Excel Service Settings, and can view the various links list. So how do you give them more permissions? Well in order to do that you need to give them some more access.
- Under User Profiles and My Sites click Personalization services permissions.
- Click Add Users/Groups
- Enter your users name select which permissions you would like to bestow upon them and click Save.
What are all of these different permissions? I am glad you asked. J
- Create personal site gives the user the capability to create and use a My Site. Going deep here will have to be saved for another day but if you want to make that My Site link disappear take away this right from the users. But you didn't give it to them. Why do they have it? Go back to the manage permission screen. All authenticated users were given this right by default.
- Use personal features is another topic for another day. Essentially though this provides the My Links functionality and allows users to manage their Colleagues.
- Manage user profiles this allows your user to do just that. Get in there and modify the profiles for this SSP. Give them this right and now they can access the links: User profiles and properties, Profile services policies, and My Site Settings.
- Manage audiences you guessed it but now you can click that handy little Audiences link. Once you are there you can set the schedule or define the rules for building those global audiences.
- Manage permissions this will let that user modify Personalization services permissions (the stuff we are doing right now).
- Manage usage analytics this gives the user access to make changes to Usage reporting. Small bug here but if the user doesn't have this right they can still open up the screen. Then if they make a change and hit ok they get a 403 forbidden error. Reminds you of SPS 2003 doesn't it. J
So now if you have given the user all of those permissions they should be a happy camper? Depends. If you have MOSS Enterprise then probably not because they still can't manage the BDC. Yikes! More to do.
- Click Business Data Catalog permissions from the main screen of the SSP
- Click Add Users/Groups
- Enter your user, select their permissions and click Save
Since I will not even claim to understand the BDC I will leave you to use the included explanations on the screen to figure out what to give your users.
Anyway, hopefully this will help you out.
Shane – SharePoint Help