Access Denied for most options in Shared Service Administration

Question

MOSS 2007 with SP2 and August Cumulative Update.

In the Shared Services Administration site most of the options give an "Access Denied" error. How do I set users to have permission for this shared service?

The user is set to Full Control in central administration.

(Additionally, I'm given an access denied error when trying to edit keywords or add best bets. I assume this is probably the same issue?)

Answer 1

>WSS3.0, SP Server 2007 with SP2

No, you don't have WSS 3.0 AND SP Server 2007

You only have MOSS 2007. It includes enough WSS 3.0 elements to require you to have both WSS 3.0 and MOSS service packs (etc.) but you have not installed WSS 3.0 only MOSS 2007. So please describe your system in future as MOSS 2007 with August Cumulative Updates.

(Moderator)

---

FAQ sites: (SP 2010) http://wssv4faq.mindsharp.com; (v3) http://wssv3faq.mindsharp.com and (WSS 2.0) http://wssv2faq.mindsharp.com
Complete Book Lists (incl. foreign language) on each site.

Answer 2

Hi,

Open the Central Admin page and then click on "Shared Services Administration" link present on the left pane of the Central Admin page.

Here you will find the SSP name. Go and edit the SSP.

You will find the account used for creating that SSP. This SSP shall have access to all the links inside the SSP.

Use this account to access all the SSP links. 

Hope this helps..

Answer 3

Hi,

Open the Central Admin page and click on Operation>>Update Farm administrator group and add those user whom you want to give access to links in the SSP. This will give farm level access to all previledges in the farm.

Thanks,
Yogesh.

Answer 4

Hi,

Open the Central Admin page and click on Operation>>Update Farm administrator group and add those user whom you want to give access to links in the SSP. This will give farm level access to all previledges in the farm.

Thanks,
Yogesh.

Answer 5

Hi,

Open the Central Admin page and then click on "Shared Services Administration" link present on the left pane of the Central Admin page.

Here you will find the SSP name. Go and edit the SSP.

You will find the account used for creating that SSP. This SSP shall have access to all the links inside the SSP.

Use this account to access all the SSP links. 

Hope this helps..

When I try to edit the SSP I'm given the following error:
"You do not have the correct permissions to perform this task. You must be a member of the local administrators group. For more information, contact your system administrator."

The user I'm running as is a farm administrator. Is there another security level I'm not aware of?

Answer 6

Is your farm administrator a local administrator on the box? If not, please add it. This should fix the error as mentioned by you above.

Try it and let me know if that works..

Once that is done, you can have a look at the SSP account which was being used to create it...

Answer 7

also you can run this stsadm command on the sharepoint server on the 12\BIN folder using the command prompt..

stsadm -o enumssp -title sharedservices1 where sharedservices1 is the SSP name. This will give you the details of the SSP without editing it... Check for the Account UserName...

hope this helps..

Answer 8

Thank you very much for your help.

The farm admisinstrator is a local administrator on the box. (Why would that matter? Shouldn't I be able to setup Sharepoint admins without giving them admin access to the machine?)

The account username that command gave me is "NT AUTHORITY\NETWORK SERVICE". How would I go about giving other users access?

Answer 9

Full control in Central Administration does not necessarily means full control in Shared Service Administration site since they are different site collection. 

Please read : Modify permissions for users and groups in the Shared Services Administration site (http://technet.microsoft.com/en-us/library/cc262961.aspx );

               And Use the farm administrator account to add users to the Shared Services Administration site (http://technet.microsoft.com/en-us/library/cc262963.aspx );

               And Manage permissions to the Shared Services Administration site (http://technet.microsoft.com/en-us/library/cc262153.aspx )