Software Support Forum

I've got a couple of sites with delegated admins; however, they don't have access to edit the invitation email, view registered users, etc.  What else do I need to do in order to turn over administration fully?

 Thanks!

Our application has three levels of administration...

• Site Collection Administrators
• Site Owners
• Delegated Administrators

Only a Site Administrator can use the links on the Site Settings page. This includes Manage Users in Authorization Store, Manage Roles in Authorization Store, Mail Definitions, etc... Site Owners and Delegated Administrators can only use the Manage Users page from the Site Actions menu. For a Site Owner, this page provides a list of users that have access to the site. For a Delegated Administrator, this page provides a list of users in the SQL role they have been assigned. A Delegated Administrator can see a subset of all users and is more restrictive than a Site Owner. A Site Owner is defined as any user that has the Manage Permissions permission level. This is typically provided via the 'Owners' group.

Jeremy,

I have the same problem as Traci. I configured a user as a delegated administrator and have tried the user as a member of the Site Owners and Site Members groups.

When my delegated administrator is a member of the Site Owners group he accesses the page and clicks the "Site Actions" link he is able to bring up the "Site Settings" page and see all the options a Site Owner would normally see except the options under "Delegation Management" and "Delegation Configuration".

When my delegated administrator is a member of the contributors group he doesn't see the "Site Actions" link on the page at all.

Any ideas, suggestions or thoughts?

Thanks!

Only Site Collection Administrators can view and use the actions under Delegation Management and Delegation Configuration. This is due to the fact that modification with these pages can effect usage for all sites in the site collection. By design, the Delegated Administrator can only access the Manage Users page from the Site Actions menu.

Any Delegated Administrator should be able to view the Site Actions menu. However, there may only be one link (Manage Users) depending on the users site access. If your Delegated Administrators does not see the Manage Users link under the Site Actions menu please send you contact information to softwaresupport@sharepointsolutions.com and we will have someone take a look at your environment.

Does this mean that in order to allow my delegated administrators to approve and lock out users they have to be site collection admins?  That will give them alot of access that they shouldn't have.

Delegated Administrators can only unlock users and they cannot Approve or Deny accounts via Manage Users. However, a delegated administrator can be listed as an Account Approver in the Registration Setting which will send them an email whenever a user registers for the site and the Registration Settings are set to require approvals. This is the only way that a delegated administrator can approve accounts without elevating their permissions.