SharePoint Saturday KC 2015 - Security and Search.pptx

SharePoint Saturday St. Louis

SharePoint Security and SearchLou Farho, Design ArchitectAlexander Open Systems

1

Thank you SPSKC15 sponsors!

About MeLou Farho [email protected] SharePoint Design Architect20+ years in IT10+ years working with Portals7+ years working with SharePointhttp://www.linkedin.com/in/loufarho/Wrote my first program in FORTRAN using a card punch machineBachelors in Physics (University of Nebraska-Lincoln)Master in Computer Science (University of Nebraska-Omaha)

# | SharePoint Saturday St. Louis 2014

3

AOS SharePoint Portal PracticeMicrosoft Gold PartnerPortals and Collaboration Communications Messaging Server PlatformTop Talent 4 Microsoft SharePoint vTSPs16 Architects and DevelopersAverage of 7 years of SharePoint ExperienceOver 50 migrations from SharePoint 2007/2010 to 2013

Customers Win 99.68% of customer respondents would refer AOS to their peers!


4

AgendaDiscuss SharePoint SecurityDiscuss SearchDemo


5

SharePoint SecurityActive Directory Security GroupsSharePoint GroupsDirect PermissionsPermission Levels When you start looking at security, chances are good that you start with the basics: who is allowed to access SharePoint resources, what resources are they allowed to see, what resources are they allowed to use, and how are they allowed to use them.


Active Directory Security GroupsThis is the backbone to provisioning end user access into you Web Applications, Site Collections and Sub-Sites

This allows easy transitions of user access by memberships to AD groups.Copy another users access by looking at their AD membershipsCan delete a User from the User Information List without harming their access into the site collection


7

SharePoint GroupsUse SP Groups to encapsulate the Permission LevelsOwnersMembersVisitorsCustom LevelsAdd AD Security GroupsAdd Users


Direct PermissionsBad, Very BadHard to determine who has what accessNeed to leverage third-party to find outBetter to use a SharePoint Group


Permission LevelsPermissions are rights to do something; to view, create, delete, or edit something.

User Permissions are broken down into three categoriesList PermissionsSite PermissionsPersonal Permissions


List Permissions

PermissionDescriptionManage ListsCreate and delete lists, add or remove columns in a list, and add or remove public views of a list.Override List BehaviorsDiscard or check in a document that is checked out to another user, and change or override settings that allow users to read/edit only their own items.Add ItemsAdd items to lists, and add documents to document libraries.Edit ItemsEdit items in lists, edit documents in document libraries, and customize Web Part pages in document libraries.Delete ItemsDelete items from a list, and documents from a document library.View ItemsView items in lists, and documents in document libraries.Approve ItemsApprove a minor version of list items or document.Open ItemsView the source of documents with server-side file handlers.View VersionsView past versions of a list item or document.Delete VersionsDelete past versions of list items or documents.Create AlertsCreate alerts.View Application PagesView forms, views, and application pages. Enumerate lists.


Site Permissions

PermissionDescriptionManage PermissionsCreate and change permission levels on the web site and assign permissions to users and groups.View Usage DataView reports on website usage.Create SubsitesCreate subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.Manage Web SiteGrants the ability to perform all administration tasks for the web site, as well as manage content.Add and Customize PagesAdd, change, or delete HTML pages or Web Part pages, and edit the website.Apply Themes and BordersApply a theme or borders to the whole website.Apply Style SheetsApply a style sheet (.css file) to the website.Create GroupsCreate a group of users that can be used anywhere within the site collection.Browse DirectoriesEnumerate files and folders in a website by using SharePoint Designer 2013 and Web DAV interfaces.Use Self-Service Site CreationCreate a website using Self-Service Site Creation.View PagesView pages in a website.Enumerate PermissionsEnumerate permissions on the website, list, folder, document, or list item.Browse User InformationView information about users of the website.Manage AlertsManage alerts for all users of the website.Use Remote InterfacesUse SOAP, Web DAV, the Client Object Model, or SharePoint Designer 2013 interfaces to access the website.Use Client Integration FeaturesUse features that launch client applications. Without this permission, users must work on documents locally and then upload their changes.OpenEnables users to open a website, list, or folder to access items inside that container.Edit Personal User InformationEnables users to change their own user information, such as adding a picture.


Personal Permissions

PermissionDescriptionManage Personal ViewsCreate, change, and delete personal views of lists.Add/Remove Personal Web PartsAdd or remove personal Web Parts on a Web Part page.Update Personal Web PartsUpdate Web Parts to display personalized information.


Impact on SearchWhen Permissions change, SharePoint must recalculate and update the index for the scope impacted by the security change.


DemoSearch Service ApplicationCrawl Health ReportAdd UserRun an Incremental CrawlInspect ReportModify an AD Security GroupRepeat 4&5


SummaryImpact to incremental crawls using security groups vs SharePoint GroupsSharePoint Farm Size determines overall impactThere will be other factors that impact the incremental crawl. Documents!Governance for Security and use of Security GroupsSecurity Group Sprawl


Resourceshttp://technet.microsoft.com/en-us/library/cc721640.aspx http://msdn.microsoft.com/en-us/library/dd728295(v=office.12).aspxhttps://www.nothingbutsharepoint.com/sites/eusp/pages/active-directory-groups-vs--sharepoint-groups-for-user-management-a-dilemma.aspx http://www.sharepointnutsandbolts.com/2010/09/set-object-caching-user-accounts-with.html


Thank you SPSKC15 sponsors!

Date post:	04-Oct-2015
Category:	Documents
Upload:	sumanayana
View:	220 times
Download:	4 times