Pro SharePoint 2013 Administration - EBook Free Download

Chapter 7 ■ Security and Policy6. Select the appropriate permissions—this is the only place in the SharePoint securitymodel where an administrator may deny access rights. This feature comes in handy if anadministrator needs to revoke access for users in the web application, without editing thepermissions in site collections.7. You may choose to operate the account policy as System, meaning the account does notshow up in user information lists (it’s effectively hidden).8. Click the Finish button to enact the policy.Returning to the web application security policies, shown in Figure 7-18, you see a big bold message at the topof the page about search crawling. Changing the security policy for a web application instructs SharePoint to executea full search crawl (see Chapter 15)—this is to ensure security trimming of content per the policy and permissionsassigned to all users. For example, if you create a new security policy to deny a user access to content in all sitecollections hosted by the web application, then that user should not see this content in search results. Makingmultiple changes to the web application security policy might add strain on your environment if these changes causea search crawl during busy usage periods. The information message recommends applying web application policiesto security groups; thus, adding users to and removing users from the group avoids a full search crawl.Also on the Web Application Security Policies page are some links (top left) to change policy for anonymous usersand to change the permission levels for policy. Similar to how you grant or deny access to specific users for the entireweb application, you can perform these actions for anonymous users. Thus, if you want to deny access to all anonymoususers without turning off anonymous access, you can add a policy to deny access at the web application level.The link to manage permission policy levels takes you to a page that lists all permission levels for web applicationsecurity policy (Figure 7-20). Similar to permission levels for site and site collections, the available permission levelsfor web application security policies reflect typical groupings of permissions for a specific role. You can add your ownpermission levels to apply as policy to the web application, and change the existing permission policy levels, but thisis not recommended; it is always best to create your own permission levels.Figure 7-20. Permission Policy Levels231www.it-ebooks.info4