You configure a SharePoint Server 2013 Service Pack1 (SP1) farm. You need to ensure that a user named
User1 is able to manage only the features within anapplication.
What should you do.?
A.
Add User1 explicitly as a Search administrator within the farm.
B.
Add a service application administrator at the specific service level.
C.
Assign local administrative rights to User1 to manage the farm environment.
D.
Deploy multiple instances of the same service in a farm and assign unique names to the resulting service
applications.
E.
Add a new Active Directory group to farm administrators.
F.
Seperate the service applications throughout the farm.
G.
Create a search scope for each web application and add User1 to the scope.
H.
Configure User1 within the Secure Store Server asan administrator
I.
Add User1 as a Feature Administrator within the particular site collections that require management by non-farm administrators.
Explanation:
Assign administration of User Profile service features (SharePoint Server 2013)
1 out of 1 rated this helpful – Rate this topic
Published: May 12, 2013
Farm administrators can delegate administration of either a User Profile service application or selected
features of a User Profile service application to aservice application administrator. A service application
administrator can delegate administration of a feature or features of a User Profile application service to
another user, who is known as a feature administrator. A feature administrator can perform all administrative
tasks that are related to the delegated feature or features, but a feature administrator cannot manageother
features, service applications, or settings that are contained in Central Administration. For more information,
see User Profile service application overview (SharePoint Server 2013).
Any of the following features of a User Profile service application can be delegated to a feature administrator:
Manage Profiles
Manage Audiences
Manage Permissions
Retrieve People Data for Search Crawlers
Manage Social Data
Before you perform this procedure, confirm the following:
A User Profile service application is running in the farm.
An instance of the Managed Metadata service exists.For more information, see Create, update, publish,or
delete a managed metadata service application (SharePoint Server 2013).
The user or group you want to administer the User Profile service feature is stored in the profile database.
In this article:
Delegate administration of User Profile service features by using Central Administration
Delegate administration of User Profile service features by using Windows PowerShell
Delegate administration of User Profile service features by using Central Administration
You typically use the Central Administration Web site to delegate administration of User Profile service features
in a stand-alone deployment.
To delegate administration of User Profile service features by using Central Administration
Verify that you have the following administrative credentials:
To delegate administration of User Profile service features, the user account that is performing this procedure
must be either a member of the Farm Administrators group or must have been delegated permission to
administer the User Profile service application that is running in the farm. For more information, seeAssign
administration of a User Profile service application (SharePoint Server 2013).
On the Central Administration Web site, in the Application Management section, click Manage service
applications.
In the list of service applications, click User Profile Service Application.
On the Service Applications tab, in the Operations group, click Administrators.
On the Administrators for User Profile Service Application page, type or select a user or group account, and
then click Add.
In the Permissions for Administrator: box, check the feature or features for which you want to delegate
administration, and then click OK.
Delegate administration of User Profile service features by using Windows PowerShell
You typically use Windows PowerShell to delegate administration of User Profile service features when you
want to automate the task, which is common in enterprises.
To delegate administration of User Profile service features by using Windows PowerShell
Verify that you meet the following minimum requirements:
See Add-SPShellAdmin.
On the Start menu, click Administrative Tools.
Click SharePoint 2013 Management Shell.
From the Windows PowerShell command prompt (that is, PS C:\>), type the following commands:
To display a list of all service applications and their GUIDs, type the following command:
Get-SPServiceApplication
To create a variable that contains the GUID for theUser Profile service for which you want to delegate Full
Control, type the following command:
$serviceapp = Get-SPServiceApplication <guid>
Where <guid> is the GUID for the User Profile service for which you want to delegate Manage Social Data
permissions.
To create a variable that contains the list of administrators for the service application, type the following
command:
$security = Get-SPServiceApplicationSecurity $serviceapp -Admin
To create a variable that contains the claims principal for a user account, type the following command:
$principalUser1 = New-SPClaimsPrincipal -Identity “<domain\user>” -IdentityType WindowsSamAccountName
Where <domain\user> is the user to whom you want todelegate Manage Social Data permissions.
To give Manage Social Data permissions to the claims principal you just created, type the following command:
Grant-SPObjectSecurity $security -Principal $principalUser1 -Rights “Manage Social Data”
To apply the changes to the User Profile service application, type the following command:
Set-SPServiceApplicationSecurity $serviceapp -ObjectSecurity $security -Admin
http://technet.microsoft.com/en-us/library/ee721065.aspx “OR”
http://technet.microsoft.com/en-us/library/ee806866.aspx#section1