SharePoint Review Center

Everything about SharePoint – Architecture, Design, Development, Configuration, Administration, Issues, and Fixes

Understanding Access to SSP and related configurations

Posted by Anthony Odole on August 19, 2008

Granting access to SSP remains very confusing to most SharePoint admin and developers alike. Based on the questions I’ve seen asked on most SharePoint newsgroup, SSP remains, other than Business Data Catalogue, an area that is confusing not only to administrators, but also developers. This is a very brief write up to help anyone trying to understand some of the configuration options in SSP.

Be aware that unlike in SharePoint 2003, MOSS 2007 does not give server administrators full control of web applications. To grant full control over web application, you must explicitly grant this permission. To do this, follow the steps below:

  1. Go to SharePoint Central Administration
  2. Go to Application Management tab
  3. Go to Application Security
  4. Go to Policy for Web Application
  5. Add users
  6. Specify individual user or a group
  7. Grant full control
  8. Then click finish.

Now, the user or group you added has full control of the web application.

Even though you have granted this full control, you will notice that the user still is unable to manage audiences, profiles, permissions, or usage analytics. To grant permission for this specific area, you need to follow the steps below:

  1. Log into SSP Administration Site.
  2. Go to Site Actions, then site settings
  3. Go to Users and Permissions
  4. Click on Advanced permissions
  5. Add individual Users or group
  6. This will allow users to login to the SSP administration site

At this point, the user or group will be able to login to SSP, manage Excel Service and search settings. To give the user or group more permission for personalization, you need to

  1. Go to User Profiles and My Sites
  2. Go to Personalization services permissions.
  3. Add Users/Groups
  4. Select which permissions you would like to grant.
  5. Click Save.

In MOSS Enterprise, you need explicitly grant access to Business Data Catalog. This is in addition to the steps above.

Below is a quick overview of what each permission allow a user to do

  • Create personal site: This give a user the user the capability to create My Site. The link to my site appears by default on the main page because of this permission. this is granted to all authenticated users by default. If you go to manage permission screen and remove all authenticated users, MySite will be removed.
  • Manage permissions: This enable user to change personalization permissions
  • Manage user profiles: This enable user to manage User profiles and properties, Profile services policies, and My Site Settings.
  • Use personal features: This enable users to use all the My Links functionality; users can also manage colleagues on their homepage.
  • Manage usage analytics this enable a user to modify usage reporting. Note that you can open the page using he available link but you will get a forbidden error if you try to save your changes. I usually call this a bug.
  • Manage audiences: This enables a user to click on the Audiences link on SSP page, where user can set schedule or define rules for building global audiences.

** About the Author: Anthony Odole is a Senior Solution Architect with IBM Global Services. He is a SharePoint Subject Matter Expert. You can reach him at


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: