Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

let somebody see everything on all sharepoint sites, but not change anything

Posted on 2011-09-20
5
Medium Priority
?
227 Views
Last Modified: 2012-05-12
I need to add a user to Sharepoint 3.0 that can see down into all the sites, regardless of if the sites have locked down permissions that aren't passed down from up above.

We do not want them to be Site Collection Administrators, because we don't them to change something on accident, but because they are exec, we want them to be able to see all the sites; into them.
0
Comment
Question by:BryceRichert
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 50
ID: 36570504
Hello,

>> regardless of if the sites have locked down permissions that aren't passed down from up above.

that won't fly. If you have broken the permission inheritance, then these sites will not inherit any new groups or permission levels that you set up in the parent site.

You may have to add the new user manually as a viewer to each site/list/library with unique permissions.

cheers, teylyn

0
 

Author Comment

by:BryceRichert
ID: 36570535
What about Use Policy for Web Application in Central Admin? and grant Full Read permissions there?
0
 
LVL 16

Expert Comment

by:jessc7
ID: 36570734
BryceRichert is right. Create a read policy and assign the user at the web application level.

Manage permissions through policy (Windows SharePoint Services)
http://technet.microsoft.com/en-us/library/cc287853(office.12).aspx
0
 
LVL 16

Accepted Solution

by:
jessc7 earned 2000 total points
ID: 36570757
Oh - BryceRichert is the original poster - ha!

Yes, you are on the right track. Use a Web App Policy to assign read only rights. It will override the permissions at the site and list/library so they can view all information,
0
 

Author Closing Comment

by:BryceRichert
ID: 36570855
This worked, we didn't want to do it until verified. Thanks.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Server 2010 do not offer the option to configure the location of the SharePoint diagnostic trace log files during installation.  This can, however, be configured through Central Administr…
Pimping Sharepoint 2007 without Server-Side Code Part 1 One of my biggest frustrations with Sharepoint 2007 in the corporate world is that while good-intentioned managers lock down the more interesting capabilities of Sharepoint programming in…
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question