Permission Management

DeliverPoint 2010 allows a variety of users: DeliverPoint permission operators, site collection administrators, site owners, power users, and end users; to manage SharePoint permissions in Microsoft® SharePoint® Server 2010 or Microsoft® SharePoint Foundation 2010 on-premises deployments.

*If you are new to managing permissions in SharePoint 2010, then you will find some useful links in the References section at the bottom of this page.

Users can use DeliverPoint to manage permissions from:

• The Site Actions menu, which displays the DeliverPoint dashboard, where a tree view is displayed.
• DeliverPoint Ribbon tab on lists and libraries, which you can use to initiate the Discover List Permissions and discover Unique Items permissions actions.
• List Item Menu on folders, list items and files, which you can use to initiate the Discover Items Permissions action.
  

!If you are using a trial version of DeliverPoint, and your trail period has expired, then when you try to display the DeliverPoint dashboard, a message is displayed in the results pane:
Trial period for product DeliverPoint 2010 has been expired.Activate
Click Activate to display the Licensing of Product ‘DeliverPoint 2010’ page.

DeliverPoint actions are initiated by clicking a SharePoint object in the tree view and clicking on the menu that is displayed. DeliverPoint actions are divided into Account Management, Site Management, and List Management actions. You can also use this menu to display the properties of the SharePoint object.

The DeliverPoint action you choose affect all permissions for the targeted account resource in scope. For example, when you select Copy Permissions at the Managed Path level. Since all site collections within the Managed Path are part of the inheritance chain, they are said to be in scope. Site collections that exist under different Managed Paths would not be in scope because they are not part of the first Managed Path’s inheritance chain.

It is important to know which objects are in scope for every operation you execute using DeliverPoint. For example, if you select to Delete Permissions at the Farm level, then all Web Applications, Managed Paths, site collections, sites (webs), lists, list items and folders are in scope for this action. Be sure to target the execution of permissions at the intended level of inheritance so you don’t change permissions for a user on the wrong or unintended objects.

*Note DeliverPoint is security trimmed so that those using it can only see information and perform DeliverPoint operations within their native scope of authority that is defined within SharePoint. That being said, it is still important to be certain that you target the desired scope in which to perform a DeliverPoint action so that unwanted changes do not occur. The Copy, Delete, and Transfer Permissions actions are effective on the following objects:

* Farm
* Web Application
* Managed paths
* Site collections
* Sites (webs)
* Lists
* List items and folders.

References

• Basics: What are permissions?
• Introduction: Control user access with permissions
• Security planning for sites and content
• Plan your permissions strategy
• SharePoint Server 2010 groups and permissions reference chart
• Governance: Permission Management

• Security Trimming →