about chris welch synergy – global reach. local service. email - [email protected] cell -...
TRANSCRIPT
![Page 1: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/1.jpg)
![Page 2: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/2.jpg)
About
Chris Welch
Synergy – Global Reach. Local Service.
Email - [email protected] - 808 255 9431 Online - www.synergyonline.com
USA | South Africa | United Kingdom | Asia Pacific
![Page 3: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/3.jpg)
SharePoint 2010 End User Security - Standardization and Customization• Understanding security in
the End User environment
• Discussion and Demonstrations
• All participation is welcome and appreciated
![Page 4: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/4.jpg)
SharePoint 2010 End User Security - Standardization and Customization
> Planning and understanding <
How do you make a meaningful security infrastructure?
So… Let’s talk a bit about security
![Page 5: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/5.jpg)
What is security?
Trust
• Trust in people• Trust in technology• Trust in business P&P• Trust in the institutional
setting
![Page 6: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/6.jpg)
Best Practice
• Keep it simple• Reduce• Reuse• Recycle
Security is a management process
![Page 7: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/7.jpg)
Basic Security Concepts
• Plan the security environment• What – define security • Sites• Lists and libraries
• Who – define roles• Separation of Duties
• Access – define levels• Least Privilege
![Page 8: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/8.jpg)
SharePoint Roles
• Standard Security Roles• Farm Administrator• Site Collection Administrator• Service Application Administrator• Site Administrator• Users
![Page 9: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/9.jpg)
Security 101 - Terms
• Authorization vs. Authentication• Risk Management• $ or other measure
• Central tenets of measuring secure systems• Confidentiality• Integrity• Availability• Non Repudiation• Others….
![Page 10: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/10.jpg)
So What About SharePoint?
• Demo Interlude• How does SharePoint do -• Confidentiality• Integrity• Availability• Non-Repudiation
![Page 11: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/11.jpg)
Discussion Point
• Where are the
• Strengths in your SharePoint security
• Weaknesses in your SharePoint security
What is the trust factor
![Page 12: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/12.jpg)
Architecture Primer
• SharePoint architecture
Web ApplicationSite Collection
SitesLists and Libraries
![Page 13: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/13.jpg)
Web Application Security
• Performed by a Farm Administrator• Security• Authentication• User Permissions• Policies• Anonymous• User• Permissions
![Page 14: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/14.jpg)
Web Application Demo
• Authentication Providers• User Permissions• Remove Manage Lists
permission• Policies• Create Deny Delete Permission
Policy• Apply as a User Policy
![Page 15: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/15.jpg)
• Site Collection Administrator• Has full control of all content in a
site collection• Is bound by security policy
settings at the Web Application level
• Is managed at the site collection or farm Web Application level
• Highly trusted position in user environment• Farm Administrator
Site collection security
![Page 16: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/16.jpg)
Site Level Security
• Uses three basic pieces of infrastructure• Security principle• Securable Object• Permission Level
User or Group Site-List-Item
Permission Level
![Page 17: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/17.jpg)
Users and Groups
• Maintained at the site collection • Users • Available from Authentication
Provider• Stored in user information list
• Groups• AD• SharePoint
• Best Practice Discussion• Users vs. Groups
![Page 18: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/18.jpg)
Some Limits to Consider
• Supported Limits• Groups per users - 5000• Users – 2 million per SC• Principles per group – 5000• SharePoint Groups – 10,000 per
SC• Security Scope – 5000
• Limits based on performance
![Page 19: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/19.jpg)
Users and Group Demo
• Users and Group• Review groups• Create a group and discuss
settings• Suggestions Group
• Add users• Settings overview• Groups page• Group
![Page 20: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/20.jpg)
Securable Objects
• Sites, lists and libraries, item• Security inherited by default• Inheritance can be removed• Sites can be created with unique
permissions• Creates three groups by default• Permsetup.aspx
![Page 21: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/21.jpg)
Securable Objects Demonstration
• Review settings• Remove inheritance for a site• Remove inherited principles• Create a new security infrastructure
![Page 22: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/22.jpg)
Permissions and Permission Levels
• Used to grant access• Based upon granular permissions• 33
• Default set of permission levels• FDCRL• AMRV• Do not delete!
• Used to create customized security settings
![Page 23: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/23.jpg)
Permission Levels
• Stored at the top level site• Inheritance can be broken, using
PowerShell• Best practice is to create a new
Permission Level by inheriting from an existing one
![Page 24: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/24.jpg)
Demo of Permission Levels
• Review permissions• Create a permission level by
copying• Remove delete versions
• Create a manage lists permission level• Demonstrate permission
dependencies
![Page 25: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/25.jpg)
Finally
• Security• Standardize where possible• Customize where necessary• Plan• Document• Simplify
![Page 26: About Chris Welch Synergy – Global Reach. Local Service. Email - cwelch@synergyonline.com Cell - 808 255 9431 Online - USA | South](https://reader035.vdocuments.us/reader035/viewer/2022081519/56649e6b5503460f94b68dc3/html5/thumbnails/26.jpg)
Questions?