ControlPoint 8.6 - Administration Guide

Setting Up ControlPoint Users and Groups

As part of the initial ControlPoint installation, four default user groups are created.  

After the initial configuration, the site collection administrator—or any user who has been given direct rights to manage groups—can manage ControlPoint users and groups via the ControlPoint Configuration site.  You can, for example, create additional groups with different sets of permissions, including access to different sets of ControlPoint menu items.

In addition to managing permissions to the ControlPoint application itself, this site is also used to manage access to individual ControlPoint menus.

Auto-Adding Users to ControlPoint Groups

The Auto Add Users to ControlPoint Groups action allows ControlPoint Application Administrators to configure ControlPoint to automatically add SharePoint users to a group within the ControlPoint Configuration site if the users:

·are Site Collection Administrators, and/or

·are members of a site's Owners group, and/or

·have a specified permissions level.

When a ControlPoint group reaches its maximum number of users (which is 1000 by default, although ControlPoint Application Administrators can change this limit), ControlPoint automatically creates a new group with the same permissions as the "base" group.  

EXAMPLE:

If you want all users who are members of site Owners groups to be added to the ControlPoint Business Administrators group, and more than 1000 users meet that criterion:

·when Business Administrators group membership reaches 1000, a new group named Business Administrators_1 will be created and the next 1000 users will be added to that group.  

·when Business Administrators_1 group membership reaches 1000, a group named Business Administrators_2 will be created, and so on.

NOTE:  You  can add a Claims-authenticated user to a ControlPoint group; however, you cannot add an actual Claim.

To configure ControlPoint to automatically add SharePoint users to ControlPoint groups:

1From the Manage panel, choose ControlPoint Configuration > Auto Add Users to ControlPoint Groups.

2In the Selection panel, click Change Selection and select the objects you want to include in the scope of the action.

NOTE:  The initial default scope is always blank.

3For Add users to the chosen group based on:, select the criteria that you want membership in the ControlPoint group to be based on.  Use the information in the following table for guidance.

Now you can:

·run the operation immediately (by clicking the [Run Now] button)

OR

·schedule the operation to run at a later time or on a recurring basis.

OR

·save the operation as XML Instructions that can be run at a later time.

If you chose the Run Now, option, after the operation has been processed:

·a confirmation message displays at the top of the page, and

·a ControlPoint Task Audit is generated for the operation and displays in the Results section.

If you schedule the operation, a link to the Task Audit is included in the scheduled action notification email.

See also The ControlPoint Task Audit.

Making ControlPoint Accessible from within SharePoint

ControlPoint installs three site-level features that enable ControlPoint users to access the ControlPoint application from within a SharePoint site:

·ControlPoint for Site Admins

·ControlPoint Menus for Site Settings, and

·ControlPoint Permissions Management for Site Admins.  

NOTE:  Normally, these ControlPoint features will only be visible to users who have Full Control permissions (or any permission level that includes the fine-grained permission ManageWeb) for the site on which they have been activated.

These are hidden features which can be activated using the ControlPoint Manage Site Features action.

ControlPoint for Site Admins

When the ControlPoint for Site Admins feature is activated, SharePoint users who are also ControlPoint users can choose Launch ControlPoint for Site Admins from the SharePoint Site Actions menu or Site Settings Page.

ControlPoint is launched in a separate browser window, with a simplified left navigation pane and the site from which ControlPoint was launched used as the default scope.  (Users can, however, modify the scope to include other sites for which they have management privileges using the procedure for Changing Your Selection.)

ControlPoint Application Administrators can customize the menu options that display in the left navigation pane using the procedure for Customizing ControlPoint Menus.

ControlPoint Menus for Site Settings

When the ControlPoint Menus for Site Settings feature is activated, the SharePoint Site Settings page includes links to individual ControlPoint actions and analyses.  Users can:

·select one of the ControlPoint Actions or a ControlPoint Analysis to open ControlPoint in a separate browser window with the same simplified user interface employed by the ControlPoint for Site Admins feature.

·access the standard ControlPoint interface by choosing Launch ControlPoint from the SharePoint Site Actions menu or Site Settings page.

ControlPoint Permissions Management for Site Admins

When ControlPoint Permissions Management for Site Admins is activated, the SharePoint Site Settings page includes links to the a stand-alone, tabbed interface that enables users to perform a variety of ControlPoint permissions actions and analyses outside of the traditional ControlPoint application interface.

Refer to the ControlPoint Permissions Management for Site Admins User's Guide for complete details about this feature.

Activating ControlPoint Site Administration Features

ControlPoint Menus for Site Settings, ControlPoint for Site Admins, and/or Permissions Management for Site Admins features can be activated for some or all sites in the farm via the ControlPoint Manage Site Features action.

NOTE:  Because both are hidden features, they cannot be activated via the SharePoint user interface.

To activate Site Administration Features:

1From the SharePoint Hierarchy, select the objects(s) for which you want to activate site administration features.

2Choose Configuration > Manage Site Features.

3Select Activate Selected and click the Show Hidden box.

4Click the Name header to sort the list of features alphabetically.

5Select the feature(s) you want to activate:

§ControlPoint for Site Admins, customizable, and/or

§ControlPoint Menus for Site Settings, and/or

§ControlPoint Permissions Management for Site Admins

6Click [Run Now].