Chat now with support
Chat with Support

ControlPoint 8.7 - Administration Guide

Preface Configuring the Environment in Which ControlPoint Will Run The ControlPoint Configuration Site Managing Your Farm List Managing Your ControlPoint License Granting ControlPoint Access to Web Applications and Content Databases Configuring ControlPoint Services Using Discovery to Collect Information for the ControlPoint Database Cache Using Sensitive Content Manager Services Setting Sensitive Content Manager EndPoints and Managing Scanning Preferences Managing ControlPoint Configuration and Permissions Modifying ControlPoint Configuration Settings
Changing Default Settings for Actions and Analyses Changing Default Settings to Improve Application Performance Audit Log Configuration Settings Changing Settings for Anomalous Activity Detection Restricting Functionality for Members of the Business Administrators Group Changing Default Settings for ControlPoint User Groups Changing Settings to Improve Discovery Performance Changing Settings to Accommodate Special Environmental Factors Changing Default Settings for Navigation Managing Site Provisioning Settings Specifying Global Settings for ControlPoint Policies Setting Preferences for the ControlPoint Scheduler Miscellaneous and Custom Configuration Settings Special-Purpose Configuration Settings
Changing Trace Switch Logging Levels Archiving SharePoint Audit Log Data Troubleshooting
ControlPoint Log Files Troubleshooting Configuration Errors Troubleshooting the ControlPoint Application Interface Troubleshooting Discovery Troubleshooting SharePoint Users and Permissions Troubleshooting Site Provisioning Troubleshooting ControlPoint Operations

Configuring the Site Provisioning Workflow Settings (SharePoint Server)

As an alternative to approving site provisioning requests manually, via the Manage Site Provisioning Requests interface, you can use a workflow—either a SharePoint "out or the box" approval workflow or one that was created or customized using SharePoint Designer—to manage the Site Provisioning approval process.

If you are using a workflow, the following ControlPoint Settings must be configured:

·WorkflowName

·Workflow Account

·WorkflowApprovedValue

·WorkflowRejectedValue

In addition, if you want to be able to have workflows auto-start, extra configuration may be required.

NOTE:  SharePoint Approval workflows are not available for SharePoint Foundation.

Before configuring Site Provisioning workflow settings:

Add and configure the approval workflow you want to use on the ControlPoint Configuration Site - Site Creation Requests list following standard SharePoint practices.

SP Approval Workflow

Specifying the Name of the Workflow Used for Site Provisioning Requests

To identify the workflow that should be used for the Site Provisioning approval process, enter the name of the workflow as the Value of the ControlPoint Setting Name of Workflow Used for Site Provisioning Requests.

Note that having a Value for this setting enables display of the workflow column in the Manage Provision Requests grid.

Config Setting WorkflowName

Specifying the Account for Starting the Provisioning Approval Workflow

Most ControlPoint operations are performed by the ControlPoint Service Account on behalf of the logged in user.  However, because SharePoint does not allow a system account to start a workflow, you must specify a different account to use for this purpose.  The account that you specify for Account for Starting the Provisioning Approval Workflow must have permissions to start a workflow on the ControlPoint Configuration Site - Site Creation Requests list.

NOTE:  For the Value, be sure to enter the full user login name.

Config Setting WorkflowName

Specifying Provisioning Request Approval Value(s) for the Workflow

Any status that indicates an approval in the SharePoint workflow used for the Site Provisioning approval process must be synchronized with the "Approved" status in ControlPoint.  This will allow a "custom" status—and will even allow more than one possible status—to be used to indicate approval of a Site Provisioning request.

To do this, enter the Approved status (or statuses) associated with the workflow as the Value of the ControlPoint Setting Provisioning Request Approval Value for Workflow.

NOTE: Enter multiple values as a comma-separated list (for example, Approved,OK).

ControlPoint Setting WorkflowApprovedValue

Specifying Provisioning Request Rejected Value(s) for the Workflow

Any status that indicates a rejection in the SharePoint workflow used for the Site Provisioning approval process must be synchronized it  the "Rejected" status in ControlPoint.  This will allow a "custom" status—and will even allow more than one possible status—to be used to indicate rejection of a Site Provisioning request.

To do this, enter the Rejected status (or statuses) associated with the workflow as the Value of the ControlPoint Setting Provisioning Request Rejected Value for Workflow.

NOTE: Enter multiple values as a comma-separated list (for example, Rejected,No).

ControlPoint Setting WorkflowRejectedValue

 

Specifying Global Settings for ControlPoint Policies

These configuration settings display in the ControlPoint Settings list under the category ControlPoint Policies.

 

Users to Exclude from All ControlPoint Policies (CPPOLICYSUPERUSERS)

By default, when you apply a ControlPoint policy to users, all users included in the User Selection will be included in the policy.  ControlPoint Application Administrators can, however, exclude specified users from all ControlPoint policies by entering one or more user names (in the format domain\user) in the Value field of the ControlPoint Configuration Setting Users to Exclude from All ControlPoint Policies.  Enter multiple names as a comma-separated list.

Config Setting CPPOLICYSUPERUSERS

For example, you may want to exclude from all policies:

·the ControlPoint Service Account, to allow administrators to perform actions such as Delete Site and Copy/Move actions in ControlPoint.  (Remember, ControlPoint actions are actually carried out by the ControlPoint Service Account rather than the logged in user).  

·all accounts operating as the System Account (sharepoint\system), which may include, but not be limited to, the ControlPoint Service Account.

·farm administrators.

NOTE:  You must exclude users based on full account names (sometimes known as pre-Windows 2000account names in Active Directory), not display names.  For example, you cannot exclude system accounts by entering the display name System Account.

Users specified in this setting will always be excluded from all policies, including any policies to which they have been explicitly added.

 

Content Creation Policy url (POLICYSERVICEURL)

When a ControlPoint policy is created that uses a content creation rule, a custom Web service must be set up which runs whenever content is added to a site within the scope of the policy.  For example, you may want to be notified whenever a document is posted that contains "flagged" content.

If such a policy is to be implemented, the full service url to the location of the Web service must be the Value for the ControlPoint Configuration Setting Content Creation Policy url.

Config Setting POLICYSERVICEURL

NOTE:  In order to simulate the environment in which it will be used, it is recommended that the functionality be tested on the Web front-end server on which ControlPoint is installed while logged in as the ControlPoint Service account.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating