There should be a corresponding administration group in place for most of the levels of the server site with regards to the hierarchy. The administrative groups have administrative permissions at different levels.
There should be a corresponding administration group in place for most of the levels of the server site with regards to the hierarchy. The administrative groups have administrative permissions at different levels. The Farm Administrators Group members have Full Control permissions and responsibility for all servers in the server farm. The members can perform all of the administrative tasks in Central Administration for the server or server farm. They can also assign administrators to manage service applications that are part of shared services. They don’t have access to individual sites or their content. The Windows Administrators Group can perform all farm administrator actions. They can perform additional tasks including the installation of new products or applications. They can also deploy web parts and new features to the cache so that new web applications and new internet information services can be crated. They don’t have access to site content due to the way the default is set up. Both Farm Administrators and members of the Administrators group can take ownership of specific collection sites if they need to. If a site administrator leaves the organization and a new one must be added for example, then they can take ownership so that the changes can be implemented. They can add themselves as the site collection administrator on the Application Management page. Service Application Administrators are selected by the farm administrator and they have the ability to configure settings for a specific service application in the farm. They aren’t able to create service applications or access any other service applications within the farm. They also can’t perform any of the farm level operations including topology changes. Feature Administrators are in regards to a specific feature within a service application. The administrators are able to manage a subset of service application settings but they can’t do so with the entire service application. At the Web Application Level there is no unique administrator group. Instead it falls under the umbrella of the farm administrators. These members have the authority to define a policy and then to grant individuals user permission for a Web Application level. Site Collection Administrators have the Full Control permission level on all websites. They also have Full Control to all site content that the site collects, but they don’t need to have explicit permissions on that given site. They can audit site content too and get any messages for administration. The primary and secondary site collection administrator can be identified when you create a site collection. Site Owners default results in the members of the Owners group to have Full Control permission on that given site. They can perform the various administrative tasks on that site and on lists or libraries of that site. They have the ability to receive e-mail notices for various events including those for site access and for the pending automatic deletion of inactive sites.