This is the final post in a six-part series on SharePoint 2007 administrative commands. So far I’ve covered:
- Part I: Overview
- Part II: Farm administration
- Part III: web application administration
- Part IV: Shared Service Provider (SSP) administration
- Part V: Site Collection administration
In this post I will review Site-scoped administrative functions. I should note that this content was written before SP2 was launched and that revision has yet to occur.
SharePoint groups contain users or groups (Active Directory or SharePoint groups). Permission Levels are often confused with groups, as the names of Permission Levels are often nearly synonymous with a SharePoint group. For instance, the default SharePoint group Hierarchy Managers has the Manage Hierarchy and Limited Access permission levels. The Viewers SharePoint group has the View Only permission level. There is no fixed relationship between these groups and permission levels, but it is desirable to maintain this fixed relationship unless there is a compelling reason to change it
New permission levels can be created for new or existing groups, or existing permissions within a default permission level can be fine-tuned. This is a full list of configurable permissions:
- Manage Lists – Create and delete lists, add or remove columns in a list, and add or remove public views of a list.
- Override Check Out – Discard or check in a document which is checked out to another user.
- Add Items – Add items to lists, add documents to document libraries, and add Web discussion comments.
- Edit Items – Edit items in lists, edit documents in document libraries, edit Web discussion comments in documents, and customize Web Part Pages in document libraries.
- Delete Items – Delete items from a list, documents from a document library, and Web discussion comments in documents.
- View Items – View items in lists, documents in document libraries, and view Web discussion comments.
- Approve Items – Approve a minor version of a list item or document.
- Open Items – View the source of documents with server-side file handlers.
- View Versions – View past versions of a list item or document.
- Delete Versions – Delete past versions of a list item or document.
- Create Alerts – Create e-mail alerts.
- View Application Pages – View forms, views, and application pages. Enumerate lists.
- Manage Permissions – Create and change permission levels on the Web site and assign permissions to users and groups.
- View Usage Data – View reports on Web site usage.
- Create Subsites – Create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.
- Manage Web Site – Grants the ability to perform all administration tasks for the Web site as well as manage content.
- Add and Customize Pages – Add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a Windows SharePoint Services-compatible editor.
- Apply Themes and Borders – Apply a theme or borders to the entire Web site.
- Apply Style Sheets – Apply a style sheet (.CSS file) to the Web site.
- Create Groups – Create a group of users that can be used anywhere within the site collection.
- Browse Directories – Enumerate files and folders in a Web site using SharePoint Designer and Web DAV interfaces.
- Use Self-Service Site Creation – Create a Web site using Self-Service Site Creation.
- View Pages – View pages in a Web site.
- Enumerate Permissions – Enumerate permissions on the Web site, list, folder, document, or list item.
- Browse User Information – View information about users of the Web site.
- Manage Alerts – Manage alerts for all users of the Web site.
- Use Remote Interfaces – Use SOAP, Web DAV, or SharePoint Designer interfaces to access the Web site.
- Use Client Integration Features – Use features which launch client applications. Without this permission, users will have to work on documents locally and upload their changes.
- Open – Allows users to open a Web site, list, or folder in order to access items inside that container.
- Edit Personal User Information – Allows a user to change his or her own user information, such as adding a picture.
- Manage Personal Views – Create, change, and delete personal views of lists.
- Add/Remove Personal Web Parts – Add or remove personal Web Parts on a Web Part Page.
One of the key tasks in taxonomy design is to determine how adequately the default permission levels fit, to define new permission levels if necessary and to identify where the application of distinct permission levels is required. The corollary task is to identify what custom groupings of users are required for default and custom permission levels and to identify where permission inheritance may need to be broken within the taxonomy
People and Groups
Create SharePoint groups and assign users to them
- Configure permission levels (as opposed to assigning users or groups a level of permission)
- Manage Access Requests
- Specify the visibility of content to anonymous users if anonymous access is enabled within the application
Look and Feel
Specify Site and/or System Master Pages and alternate CSS
Title, description, and icon
Specify title, description and icon
- Manage navigation to sub-sites and pages
- Manage sorting
- Manage global (usually top) and current (usually side) navigation
- Hide pages and sub-sites from navigation
Page layouts and site templates
Specify sub-site, page template and layout inheritance. Also reset sub-sites and pages to inherit from this screen
Specify a page to be loaded at the site root
Manages display of Quick Launch and/or Tree View in the left-hand navigation
Specifies a default font and colour scheme for the site, without affecting the site layout or pages that have been themed individually
Reset to site definition
From the page description:
If you want to remove all customizations from a page (such as changes to Web Part zones or text added to the page) you can use this feature to reset to the version of the page included with the site definition.
You can reset a single page within your site to use the version of the page included in the site definition, or you can reset all pages.
Caution: When you reset to the site definition version, you will lose all customizations made to the current version of the page. No backup copy of the page will be made before the page is updated, and no new version is created.
MOSS-only. Specify columns to be excluded from search. Also known as NoCrawl Columns
Site content types
Create and Manage Content Types created here and inherited from parents
Create and Manage Site Columns created here and inherited from parents
Master pages and page layouts
Upload and Manage Master Pages and Page Layouts available to the site and its children
Site Administration Settings
Specify locale, sort order, time zone, calendar type, alternate calendar, work week days and times, time format and inheritance of these settings to sub-sites
Site libraries and lists
A quick link to the list and library settings pages within the site
Site usage reports
View site metrics, top pages, top users, top referring pages, top referring hosts and top destination sites
Manage alerts created within the site for all users
Allow/disallow RSS feeds within the site. Specify site-wide, “channel elements”, such as copyright, managing editor, webmaster and TTL
Include this site in search results, “yes”, or, “no”, and specify inclusion/exclusion of .aspx page content in the index
Sites and workspaces
A security-trimmed list of all sub-sites and workspaces within the site
Activate/deactivate features for the site
Delete this site
Permanently destroy all site content
Related Links scope settings
MOSS-only. Add/Remove sites to/from the, “This and Related Sites”, search scope
Site output cache
MOSS-only. Inherit settings or specify a page output cache profile. Define inheritance to children
Content and structure
MOSS-only. Reveals the current position within the site collection hierarchically, with expanding navigation to reveal parents, children and parallel items
Content and structure logs
MOSS-only. View Site Content and Structure logs and delete individual or multiple log events