Solved

let somebody see everything on all sharepoint sites, but not change anything

Posted on 2011-09-20
5
194 Views
Last Modified: 2012-05-12
I need to add a user to Sharepoint 3.0 that can see down into all the sites, regardless of if the sites have locked down permissions that aren't passed down from up above.

We do not want them to be Site Collection Administrators, because we don't them to change something on accident, but because they are exec, we want them to be able to see all the sites; into them.
0
Comment
Question by:BryceRichert
  • 2
  • 2
5 Comments
 
LVL 50

Expert Comment

by:Ingeborg Hawighorst
ID: 36570504
Hello,

>> regardless of if the sites have locked down permissions that aren't passed down from up above.

that won't fly. If you have broken the permission inheritance, then these sites will not inherit any new groups or permission levels that you set up in the parent site.

You may have to add the new user manually as a viewer to each site/list/library with unique permissions.

cheers, teylyn

0
 

Author Comment

by:BryceRichert
ID: 36570535
What about Use Policy for Web Application in Central Admin? and grant Full Read permissions there?
0
 
LVL 16

Expert Comment

by:jessc7
ID: 36570734
BryceRichert is right. Create a read policy and assign the user at the web application level.

Manage permissions through policy (Windows SharePoint Services)
http://technet.microsoft.com/en-us/library/cc287853(office.12).aspx
0
 
LVL 16

Accepted Solution

by:
jessc7 earned 500 total points
ID: 36570757
Oh - BryceRichert is the original poster - ha!

Yes, you are on the right track. Use a Web App Policy to assign read only rights. It will override the permissions at the site and list/library so they can view all information,
0
 

Author Closing Comment

by:BryceRichert
ID: 36570855
This worked, we didn't want to do it until verified. Thanks.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Server 2010 do not offer the option to configure the location of the SharePoint diagnostic trace log files during installation.  This can, however, be configured through Central Administr…
The vision: A MegaMenu for a SharePoint portal home page The mission: Make it easy to maintain. Allow rich content and sub headers as well as standard links. Factor in frequent changes without involving developers or a lengthy Dev/Test/Prod rel…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now