Designing a Microsoft SharePoint 2010 Infrastructure Vol 1 part 29. This course is intended for IT Professionals who use Microsoft SharePoint 2010 in a team-based, medium-sized to large environment. While they may have implemented a SharePoint deployment, they have limited experience in designing a SharePoint infrastructure. They likely work as a senior administrator who acts as a technical lead over a team of administrators. Members of this audience should have at least 6 months experience with SharePoint 2010. | Designing a Security Plan 5-25 Planning Permission Assignment Assigning permissions Categorize and manage users Use a Windows group or a SharePoint group Decide whether a SharePoint administrator will manage SharePoint groups Inheriting permissions Inheritance and fine-grained permissions Inheritance and subsites Checking effective permissions Use the Check Permissions command Best practices Key Points There are some key points that you must consider when you plan how to assign permissions for SharePoint sites. Assigning Permissions Consider the following points when you plan how to assign permissions for site collections and sites You must decide which groups to use to categorize and manage your users. Groups do not have any permissions until you assign them a permission level for a specific site or for specific site content. When you assign permission levels to SharePoint groups at the site collection level by default all sites and site content inherit those permission levels. You can use either a Windows security group or a SharePoint group such as Site Owners Site Members or Site Visitors. You create and manage SharePoint groups at the site collection level. SharePoint assigns each group a default permission level but you can customize the permission level for any group. MCT USE ONLY. STUDENT USE PROHIBITED 5-26 Designing a Microsoft SharePoint 2010 Infrastructure A site collection administrator or a user with Manage Permissions privileges can define a SharePoint group and can use this group to secure objects in a single site collection only. SharePoint groups that you create at the site collection level are available to any subsite or other securable object in the site collection. You must decide whether to use Windows security groups or SharePoint groups. One benefit of using Windows groups is that the group membership is updated when the user account changes. For example if you delete the user account the Windows group membership is automatically updated. .
