none
Need to provide the following three users the minimum access required to deploy SharePoint solution

    Question

  • We configure a SharePoint Server 2010 Service Pack 1 (SP1) server farm that has several web
    applications.
    We need to provide the following three users the minimum access required to deploy SharePoint solution
    packages:

    -------------------------------------------------------------------------------------------------------------

    A.User1 must be able to deploy solutions to any web application in the farm.
    B. User2 must be able to deploy solutions only to the http://www.crop.com web application.
    C. User3 must be able to deploy solutions only to the Crop site collection at the root of the http://www.
    crop.com web application.
    To which group or groups should each user belong?

    ------------------------------------------------------------------------------------------------------------

    1. crop Owners
    2. crop Members
    3. crop Site Collection Administrators
    4. Farm Administrators

    Please help me to find the combination of user role.

    -----------------------------------------------------------------------------------------------------------

    Sunday, August 04, 2013 6:23 AM

Answers

  • To deploy a solution for a whole web app would still require that it be a Farm Solution instead of a Sandbox solution.  Farm Solutions can only be deployed by Farm Administrators.  If User 2 can deploy a solution to http://www.crop.com web application then they can deploy a solution to any web application.  That is by design.  You can't restrict deployment to a single web application by permissions.  Certain Farm solutions can be targeted at the web application level, but they still need to be deployed by a farm administrator who decides which web apps to deploy them to.


    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

    Monday, August 05, 2013 8:45 PM

All replies

  • Unless some of the solutions are Sandbox solutions you need Farm Administrator access to deploy a Farm solution.  Whether you are going to use it on the whole farm, a single web app, or a single site collection it still deploys at the level of the farm. 

    A solution specifically written to be a Sandbox solution could be deployed/activated by a Site Collection admin for Case C. 


    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

    Sunday, August 04, 2013 10:31 AM
  • Hi Paul,

    Thanks for your reply...

    But for option B. (User2 must be able to deploy solutions only to the http://www.crop.com web application.) if we go for 1. crop Owners will it be better choice?

    Looking for your help and support ...

    Sunday, August 04, 2013 12:09 PM
  • To deploy a solution for a whole web app would still require that it be a Farm Solution instead of a Sandbox solution.  Farm Solutions can only be deployed by Farm Administrators.  If User 2 can deploy a solution to http://www.crop.com web application then they can deploy a solution to any web application.  That is by design.  You can't restrict deployment to a single web application by permissions.  Certain Farm solutions can be targeted at the web application level, but they still need to be deployed by a farm administrator who decides which web apps to deploy them to.


    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

    Monday, August 05, 2013 8:45 PM