SharePoint Review Center

Everything about SharePoint – Architecture, Design, Development, Configuration, Administration, Issues, and Fixes

Archive for August, 2008

Understanding Access to SSP and related configurations

Posted by Anthony Odole on August 19, 2008

Granting access to SSP remains very confusing to most SharePoint admin and developers alike. Based on the questions I’ve seen asked on most SharePoint newsgroup, SSP remains, other than Business Data Catalogue, an area that is confusing not only to administrators, but also developers. This is a very brief write up to help anyone trying to understand some of the configuration options in SSP.

Be aware that unlike in SharePoint 2003, MOSS 2007 does not give server administrators full control of web applications. To grant full control over web application, you must explicitly grant this permission. To do this, follow the steps below:

  1. Go to SharePoint Central Administration
  2. Go to Application Management tab
  3. Go to Application Security
  4. Go to Policy for Web Application
  5. Add users
  6. Specify individual user or a group
  7. Grant full control
  8. Then click finish.

Now, the user or group you added has full control of the web application.

Even though you have granted this full control, you will notice that the user still is unable to manage audiences, profiles, permissions, or usage analytics. To grant permission for this specific area, you need to follow the steps below:

  1. Log into SSP Administration Site.
  2. Go to Site Actions, then site settings
  3. Go to Users and Permissions
  4. Click on Advanced permissions
  5. Add individual Users or group
  6. This will allow users to login to the SSP administration site

At this point, the user or group will be able to login to SSP, manage Excel Service and search settings. To give the user or group more permission for personalization, you need to

  1. Go to User Profiles and My Sites
  2. Go to Personalization services permissions.
  3. Add Users/Groups
  4. Select which permissions you would like to grant.
  5. Click Save.

In MOSS Enterprise, you need explicitly grant access to Business Data Catalog. This is in addition to the steps above.

Below is a quick overview of what each permission allow a user to do

  • Create personal site: This give a user the user the capability to create My Site. The link to my site appears by default on the main page because of this permission. this is granted to all authenticated users by default. If you go to manage permission screen and remove all authenticated users, MySite will be removed.
  • Manage permissions: This enable user to change personalization permissions
  • Manage user profiles: This enable user to manage User profiles and properties, Profile services policies, and My Site Settings.
  • Use personal features: This enable users to use all the My Links functionality; users can also manage colleagues on their homepage.
  • Manage usage analytics this enable a user to modify usage reporting. Note that you can open the page using he available link but you will get a forbidden error if you try to save your changes. I usually call this a bug.
  • Manage audiences: This enables a user to click on the Audiences link on SSP page, where user can set schedule or define rules for building global audiences.

** About the Author: Anthony Odole is a Senior Solution Architect with IBM Global Services. He is a SharePoint Subject Matter Expert. You can reach him at


Posted in Uncategorized | Tagged: , , , , | Leave a Comment »

Why Blog?

Posted by Anthony Odole on August 1, 2008

Now that I’ve worked on so many projects deploying and developing on the SharePoint Platform, it is time  share what I know and what I’ve learnt; time to highlight the strengths and weaknesses of SharePoint Platform. In the hand of a developer who understands the intricacies and complexities of this product, SharePoint is a very powerful tool to rapidly deploy cutting edge solutions — like we have never seen in a very long time. Having said that,  understanding sharepoint is another issue entirely. One project after the other,  there are days when you wonder why the product is not working as expected, why one access or permission issue is giving you such a headache, or  worse still, why is one or the other custom list not functioning as expected; Well, it alls boils down to one thing — the more you become comfortable with SharePoint, the more you appreciate this next generation tool as a complete paradigm shift of how applications will be developed in the future. In this blog, I will be discuss very serious topics, provide quick insights, and address how I solve an issue or error — only if it gives me more than five minutes of headache. In addition to documenting these issues so that I can reuse these in the future, I hope will help on their project.

Posted in Uncategorized | Leave a Comment »