Chat now with support
Chat with Support

ControlPoint 8.7 - Administration Guide

Preface Configuring the Environment in Which ControlPoint Will Run The ControlPoint Configuration Site Managing Your Farm List Managing Your ControlPoint License Granting ControlPoint Access to Web Applications and Content Databases Configuring ControlPoint Services Using Discovery to Collect Information for the ControlPoint Database Cache Using Sensitive Content Manager Services Setting Sensitive Content Manager EndPoints and Managing Scanning Preferences Managing ControlPoint Configuration and Permissions Modifying ControlPoint Configuration Settings
Changing Default Settings for Actions and Analyses Changing Default Settings to Improve Application Performance Audit Log Configuration Settings Changing Settings for Anomalous Activity Detection Restricting Functionality for Members of the Business Administrators Group Changing Default Settings for ControlPoint User Groups Changing Settings to Improve Discovery Performance Changing Settings to Accommodate Special Environmental Factors Changing Default Settings for Navigation Managing Site Provisioning Settings Specifying Global Settings for ControlPoint Policies Setting Preferences for the ControlPoint Scheduler Miscellaneous and Custom Configuration Settings Special-Purpose Configuration Settings
Changing Trace Switch Logging Levels Archiving SharePoint Audit Log Data Troubleshooting
ControlPoint Log Files Troubleshooting Configuration Errors Troubleshooting the ControlPoint Application Interface Troubleshooting Discovery Troubleshooting SharePoint Users and Permissions Troubleshooting Site Provisioning Troubleshooting ControlPoint Operations

Restricting Functionality for Members of the Business Administrators Group

These configuration settings display in the ControlPoint Settings list under the category Business Administrators Functionality.

 

Prevent Business Admins from Deleting Orphaned users (BAPreventDelete)

By default, Orphaned Domain User analysis results allow users to access the ControlPoint Delete Users action via hyperlinked user names and a Delete All orphans link in the results header.  

Orphan Domain User LINKS.

ControlPoint Application Administrators can, however, hide the Delete All link and disable user hyperlinks for members of the Business Administrators group by changing the Value of the ControlPoint Configuration Setting Prevent Business Admins from Deleting Orphaned Users from false to true.

NOTE:  This is an Advanced Setting.

Config Setting BaPreventDelete

 

Prevent Business Admins from Running Cacheable Reports in Real Time (BAPreventRealTime)

By default, all ControlPoint users have the choice of running the ControlPoint Site Collection Storage analysis and many ControlPoint permissions analyses using either real-time data or data from the ControlPoint cache.

To help free up server resources and improve performance, especially in environments that include a large number of Business Administrators, the ControlPoint Application Administrator can prevent members of the Business Administrators group from choosing real-time data by changing the Value of the ControlPoint Configuration Setting Prevent Business Admins from Running Cacheable Reports in Real Time from False to True.

Config Setting BAPreventRealTime

Note that, when BaPreventRealTime=true:

·the Use Cached Data parameter in permissions analyses will be checked and disabled.

·the real-time option will be missing from the Site Collection Storage Analysis View Storage for: drop-down.

If the option to use real-time data is disabled, members of the Business Administrators group will also be unable to Expand Active Directory Groups or select users based on a SharePoint User Profile Property.

 

Preventing Members of the Business Administrators Group from Emailing Scheduled Analyses (BAPreventScheduledEmail)

By default, all ControlPoint users have the option of emailing results of scheduled analyses to the recipients of their choice.

BAPreventScheduleEmailFALSE

ControlPoint Application Administrators can, however, hide this option from members of the Business Administrators group (for example, to limit the number of extremely large files that need to be handled by the email server) by changing the Value of the ControlPoint Configuration Setting BAPreventScheduleEmail from False to True.

BAPreventScheduleEmailFALSE

BAPreventScheduleEmailTRUE

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating