Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 9: Capacity Planning 203
More Info You can also define your own custom roles and site groups with
different rights. For more information, it is strongly recommended that you
read Chapter 24 to thoroughly understand security before deploying Share-
Point Portal Server.
You should plan for the following roles and groups:
■ Central administrator group (domain\CentralAdminGroup). Responsible
for administration of the entire server farm, server farm topology, and virtual websites.
This group must be a member of the SharePoint Portal Server administrators
group and of the SQL Server system administrators group.
Note You can register only one domain group as the SharePoint Portal
Server administrators group. Therefore, if you want to include other members,
you must add them using the user and group management tools for
your domain.
■ Corporate administrator group (domain\CorpAdminGroup). Responsible
for managing site groups, managing list permissions, creating sites, creating portal
sites, and viewing usage analysis data. The corporate administrator group cannot
be customized or deleted, and there must always be at least one member of this
group. Members of this group always have access to, or can grant themselves
access to, any item in the website. This group needs to be a member of Domain
Admins to import user profiles from Active Directory.
■ Managing and updating news group. Based on your company business
rules and security policies, you might need to create a group that only manages
and updates the company news. In this case, be sure to remove inheritance
permissions by selecting unique permissions. This will remove site-level permissions
and provide news update rights only to the assigned group. For this
accelerator, you need to create groups for the corporate portal site news area
and also for each divisional news area.
■ Managing and updating topics content group. Based on your company
business rules and security policies, you might need to create a group for each
topic area and assign separate groups for managing each topic or subtopic area
in the corporate and divisional portal sites. In this case, you need to create
groups that can update and upload documents to each topic area.