Chat now with support
Chat with Support

Metalogix ControlPoint 8.2 - User Guide

Preface Getting Started with ControlPoint Using Discovery to Collect Information for the ControlPoint Database Cache Searching for SharePoint Sites Managing SharePoint Objects
Accessing SharePoint Pages Viewing Properties of an Object within the SharePoint Hierarchy Creating Dashboards for Monitoring Statistics within Your SharePoint Farm Setting Object Properties Managing Site Collection and Site Features Managing Audit Settings Creating and Managing SharePoint Alerts Setting ControlPoint Alerts Managing Metadata Copying and Moving SharePoint Objects (Version 8.0 and Earlier) Moving a Site Collection to Another Content Database Deleting Sites Deleting Lists Archiving Audit Log Data Before Moving or Deleting a Site Collection Duplicating a Workflow Definition from one List or Site to Others Removing a Workflow from One or More Lists (or Sites)
Using ControlPoint Policies to Control Your SharePoint Environment Managing SharePoint User Permissions Data Analysis and Reporting
Specifying Parameters for Your Analysis Analysis Results Display Generating a SharePoint Summary Report Analyzing Activity Analyzing Object Properties Analyzing Storage Analyzing Content Generating a SharePoint Hierarchy Report Analyzing Trends Auditing Activities and Changes in Your SharePoint Environment Analyzing SharePoint Alerts Analyzing ControlPoint Policies Analyzing Users and Permissions The ControlPoint Task Audit Viewing Logged Errors
Scheduling a ControlPoint Operation Saving, Modifying and Executing Instructions for a ControlPoint Operation Using the ControlPoint Governance Policy Manager (SharePoint 2010 and Later) Using Sensitive Content Manager to Analyze SharePoint Content for Compliance Using ControlPoint Sentinel to Detect Anomalous Activity Default Menu Options for ControlPoint Users About Us

Setting SharePoint Group Permissions

The Set SharePoint Group Permissions action lets you assign a permissions level to one or more SharePoint groups within a single site collection or site.

By default, only groups that have existing permissions within the site collection can be selected.  In that case, the action adds to the existing permissions (it does not replace them).  ControlPoint Application Administrators can, however, choose to display―and allow the selection of―groups that exist in the site collection but do not have permissions to the object.  See the ControlPoint Administration Guide for details on changing the ControlPoint Setting “Show SharePoint Groups with No Permissions in Hierarchy.”

In a multi-farm environment, SharePoint group permissions can be set on a single farm; either the home farm or a remote farm.

To set SharePoint Group Permissions

1Select the site collection or site whose SharePoint group permissions you want to set.

2Choose Users and Security > Set SharePoint Group Permissions.

Set SP Group Permissions

3Select the group(s) to which you want to add permissions as follows:

a)From the Available Items list, select the group(s) to which you want to set permissions and move them to the Selected Items list.

Note that all groups defined for the entire site collection that have at least one associated permissions level display beneath the root site.  Groups with unique permissions also display beneath the site granting those permissions.  Any group that does not have at least one associated permissions level for the site collection or site will not display in the list.

TIP:  If your Available Items list is particularly long, you may find it useful to narrow the scope by searching based on Group name, site Name, and/or site URL) and searching for the group.  For example, if you want to narrow your scope to all group owners, enter "owner" in the Group field.

b)Click [Apply].

4From the Permission Level drop-down, select the permissions level you want to add to the group.

REMINDER:  This action will add to, but will not replace, an existing permissions level.

Set SP Group Permissions

NOTE:  All custom permissions levels that are currently assigned to at least one user within the scope of your selection display in the drop-down.  (In a multi-farm environment, this list is populated from the permissions of the home farm.)  If you want to assign a custom permissions level that has been defined for a site collection but either is not currently in use or exists only on a remote farm, you can type it into the drop-down.

5If your selection includes one or more sites and you want the permissions to be applied to all lists within the site(s) that have unique permissions, check the Propagate to All Lists with Unique Permissions box.

6If you have checked the Propagate to All Lists with Unique Permissions box and want the permissions to be applied to all items within the list(s) that have unique permissions, check the Propagate to List Items box.

NOTE:  The "Propagate" options do not apply to lists that you selected explicitly.  If you want to include items within explicitly-selected lists, use the Include Children or Choose option in the Selection panel.  See also Selecting List Items on Which to Perform a ControlPoint Operation.

Now you can either:

·run the operation immediately (by clicking the [Run Now] button)

OR

·complete the Enforce Policy section and schedule the operation to run at a later time.

OR

·save the operation as XML Instructions that can be executed at a later time.

 

Deleting SharePoint Group Permissions

The Delete SharePoint Group Permissions lets you delete the permissions of one or more SharePoint groups from a single site collection or site without removing its members or deleting the group itself.

NOTE:  This action deletes all permissions currently assigned to a group.  Once permissions have been removed from a SharePoint group, the group will display in the SharePoint Group Analysis.  Whether or not the group continues to display in the SharePoint Hierarchy or any ControlPoint group pickers depends on the Value of the ControlPoint Configuration Setting ShowNoPermSPGroup.

To delete SharePoint Group Permissions:

1Select the site collection or site whose group permissions you want to delete.

2Choose Users and Security > Delete SharePoint Group Permissions.

DeleteSP Group Permissions

3Select the group(s) whose permissions you want to delete as follows:

a)From the Available Items list, select the group(s) to which you want to add users and move them to the Selected Items list.

Note that all groups defined for the entire site collection that have at least one associated permissions level display beneath the root site.  Groups with unique permissions also display beneath the site granting those permissions.  Any group that does not have at least one associated permissions level for the site collection or site will not display in the list.

TIP:  If your Available Items list is particularly long, you may find it useful to narrow the scope by searching based on Group name, site Name, and/or site URL) and searching for the group.  For example, if you want to narrow your scope to all group owners, enter "owner" in the Group field.

b)Click [Apply].

4If your selection includes one or more sites and you want the permissions to be deleted from all lists within the site(s) that have unique permissions, check the Propagate to All Lists with Unique Permissions box.

5If you have checked the Propagate to All Lists with Unique Permissions box and want the permissions to be deleted from all items within the list(s) that have unique permissions, check the Propagate to List Items box.

NOTE:  The "Propagate" options do not apply to lists that you selected explicitly.  If you want to include items within explicitly-selected lists, use the Include Children or Choose option in the Selection panel.  See also Selecting List Items on Which to Perform a ControlPoint Operation.

Now you can either:

·run the operation immediately (by clicking the [Run Now] button)

OR

·complete the Enforce Policy section and schedule the operation to run at a later time.

OR

·save the operation as XML Instructions that can be executed at a later time.

If you chose the Run Now, option, after the operation has been processed:

·a confirmation message displays at the top of the page, and

·a ControlPoint Task Audit is generated for the operation and displays in the Results section.

If you schedule the operation, a link to the Task Audit is included in the scheduled action notification email.

See also Auditing ControlPoint Administrator Tasks.

Deleting SharePoint Groups

Use the Delete SharePoint Groups action to delete SharePoint groups from one or more site collections/sites in the farm.

To delete one or more SharePoint groups:

1Select the object(s) from which you want to delete SharePoint groups.

2Choose Users and Security > Delete SharePoint Groups.

3Select the SharePoint group(s) you want to delete as follows:

a)Select the group(s) from the Available Items list and move them to the Selected Items list.

Note that all groups defined for the entire site collection display beneath the root site.  Groups with unique permissions also display beneath the site granting those permissions.  

TIP:  If your Available Items list is particularly long, you may find it useful to narrow the scope by searching based on Group name, site Name, and/or site URL) and searching for the group.

Delete SP Groups CUSTOMIZE

CAUTION:  Because SharePoint groups are defined at the site collection level and may be used anywhere in the site collection, if you are performing the action on one or more individual sites that includes groups that are used elsewhere in the site collection, the groups will be deleted from unselected sites within the collection as well.

b)When you have finished adding groups to the Selected Items list, click [Apply].

Now you can either:

·run the operation immediately (by clicking the [Run Now] button)

OR

·complete the Enforce Policy section and schedule the operation to run at a later time.

OR

·save the operation as XML Instructions that can be executed at a later time.

If you chose the Run Now, option, after the operation has been processed:

·a confirmation message displays at the top of the page, and

·a ControlPoint Task Audit is generated for the operation and displays in the Results section.

If you schedule the operation, a link to the Task Audit is included in the scheduled action notification email.

See also Auditing ControlPoint Administrator Tasks.

 

Managing Permissions Inheritance

The ControlPoint Manage Permissions Inheritance action lets you break or restore permissions inheritance of sites, subsites, lists, folders, and items across your SharePoint farm.

In a multi-farm environment, permissions inheritance can be managed across multiple farms.

SharePoint Objects Included in the Operation by Default

The following table identifies the SharePoint objects that are included in the Break/Restore Inheritance operation by default.

Operation

Scope

Objects Included by Default

Restore Inheritance

 

·Farm

·Web Application, or

·Site Collection

All sites, subsites, lists, folders and items within the selected scope.

NOTE:  You can use the Change Selection option if you want to exclude individual sites, lists, folders, and items.

Site

The site itself and all lists, folders and items within the site.

NOTE:  If you have checked the Include Children box in the Selection pane (that is, you want to include child sites of the selected site), you can also choose to exclude the selected site itself (so that child sites will inherit from it).

List

The list itself.

NOTE:  By default folders and items are not acted upon.  You can, however, use the Change Selection option to explicitly select any folders, and items you want to include.

Break Inheritance

 

·Farm

·Web Application, or

·Site Collection

All sites and subsites within the selected scope.

NOTE:  By default, lists, folders, and items are not acted upon.  You can, however, use the Change Selection option to explicitly select any lists, folders, and items you want to include.

Site

The site itself and all subsites.

NOTES:

· By default, lists, folders, and items are not acted upon.  You can, however, use the Change Selection option to explicitly select any lists, folders, and items you want to include.

· If you have checked the Include Children box in the Selection pane (that is, you want to include child sites of the selected site), you can also choose to exclude the selected site itself (so that child sites will no longer inherit from it).

List

The list itself.

NOTE:  By default, folders and items are not acted upon.  You can, however, use theChange Selection optionto explicitly select any folders, and items you want to include.

To manage permissions inheritance:

1Select the object(s) for which you want to break or restore inheritance.

2Choose Users and Security > Manage Permissions Inheritance.

3Use the information in the following table to determine the appropriate action to take.

If you want to ...

Then ...

restore permissions inheritance

select the Restore Inheritance radio button.

Restore Inheritance

break permissions inheritance

a.Select the Break Inheritance radio button.

b.Select whether you want to:

·Copy Permissions from Parent

OR

·Leave Permissions Empty.

4If you initiated the action at the site level and want to act only on child site(s), check the Include Children only (exclude selected sites) box.

NOTE:  This option is valid only if one or more sites (other than root sites) were explicitly selected.

Now you can either:

·run the operation immediately (by clicking the [Run Now] button)

OR

·complete the Enforce Policy section and schedule the operation to run at a later time.

OR

·save the operation as XML Instructions that can be executed at a later time.

Snippet Task Audit

Related Documents